Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3a2f33322d3332203d3e20323637303637.roa
File:                     323830343a343761343a3a2f33322d3332203d3e20323637303637.roa (raw, json)
Hash identifier:          qabRc2B10DMeT1n9kvxoY+5Aly7fLkaehGpCqUhdI8U=
Subject key identifier:   5D:EC:0B:BD:10:97:77:98:5C:AC:13:40:B2:E2:D2:A4:2F:90:97:D7
Certificate issuer:       /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial:       549E09ACC309969E52D1F0B1DAC62A0632B84A19
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3a2f33322d3332203d3e20323637303637.roa
Signing time:             Fri 23 Feb 2024 14:40:52 +0000
ROA not before:           Fri 23 Feb 2024 14:35:52 +0000
ROA not after:            Fri 21 Feb 2025 14:40:52 +0000
asID:                     267067
IP address blocks:        2804:47a4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9e:09:ac:c3:09:96:9e:52:d1:f0:b1:da:c6:2a:06:32:b8:4a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
        Validity
            Not Before: Feb 23 14:35:52 2024 GMT
            Not After : Feb 21 14:40:52 2025 GMT
        Subject: CN=5DEC0BBD109777985CAC1340B2E2D2A42F9097D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:aa:0a:78:20:01:14:d6:35:ca:a4:a2:70:
                    b5:8d:a2:32:fd:18:0b:00:f6:be:9b:b7:0b:23:d2:
                    0d:16:63:ce:f4:75:e7:a5:0f:0d:3b:c1:ea:e3:87:
                    1d:be:6c:a2:53:0a:ac:3e:12:d8:f6:1a:8e:df:7e:
                    eb:c8:28:5e:e8:12:68:cb:43:df:74:60:bc:d0:48:
                    f9:15:4f:60:3d:ed:1c:e8:e0:51:86:8b:0e:76:4f:
                    53:2d:bf:c2:e5:fb:88:89:88:ee:f5:4b:05:bd:ce:
                    45:5c:16:c9:67:6b:36:8b:e6:2a:7c:7d:94:7e:a1:
                    39:9e:17:da:cd:03:4a:d1:7a:ac:3e:40:64:10:eb:
                    fb:dd:58:8d:9c:64:f7:86:49:c3:25:58:2c:77:d4:
                    6d:be:38:41:bf:d3:4a:ae:85:88:e6:8f:30:db:c2:
                    6e:a8:ce:4c:88:69:db:34:eb:83:cb:1c:6b:c4:dc:
                    33:9d:52:8c:0b:ec:b2:aa:2e:a8:61:66:9d:f2:cc:
                    5c:ca:c1:50:17:9a:7f:39:a2:16:18:13:5a:31:9c:
                    c1:1d:d7:7f:30:16:2e:57:8d:bd:a2:94:43:9c:8c:
                    c2:2f:af:a3:ca:04:68:46:4a:53:63:8a:e4:71:76:
                    62:54:bc:d9:1e:92:87:b4:1c:bb:fa:06:d9:74:cf:
                    e5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EC:0B:BD:10:97:77:98:5C:AC:13:40:B2:E2:D2:A4:2F:90:97:D7
            X509v3 Authority Key Identifier:
                keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3a2f33322d3332203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:62:c7:ca:0a:4b:f6:45:b8:91:0d:a6:4d:8e:5e:01:7b:27:
         b0:c2:c1:79:78:d5:a0:d7:b6:bb:12:86:4b:e7:b6:f7:fa:b6:
         2e:65:d9:9e:e3:e6:e4:74:9c:53:45:2c:19:2e:ef:cf:17:3a:
         b1:db:01:ff:c3:f5:11:ac:52:46:b3:84:eb:d8:54:18:ba:a3:
         16:09:b5:63:43:5c:3f:e2:e2:b0:e4:8e:8d:ab:27:73:94:f7:
         24:f8:ff:38:8d:a8:57:40:fd:a3:b6:2e:8e:a6:dd:74:57:d3:
         d8:f7:c2:ea:bd:ab:54:55:7b:ea:29:a8:50:a0:9d:74:dc:8b:
         b6:e4:6e:3a:50:58:2f:e5:eb:47:8c:9b:6f:26:f3:38:c3:0f:
         8f:74:5b:32:c3:20:8c:7f:b9:4c:d0:07:75:c7:91:9b:73:a2:
         09:c4:19:fe:30:d2:73:42:43:29:24:1a:f6:99:f2:fb:f7:62:
         3d:b8:3b:14:6f:2e:ec:51:ea:56:2f:31:8e:4a:c0:13:19:9d:
         1b:5c:85:be:44:5f:b8:5f:ee:72:eb:42:cc:04:6e:4e:7f:8d:
         71:3e:62:72:5b:5a:2b:2d:db:0f:05:6a:62:5c:32:82:c4:0a:
         a2:b3:4e:7e:ad:1a:3a:bb:27:89:6c:67:30:9a:c2:d0:1e:5e:
         e4:92:75:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----