Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3a2f33322d3333203d3e203238333238.roa
File:                     323830343a3637343a3a2f33322d3333203d3e203238333238.roa (raw, json)
Hash identifier:          RFrNy/mGGbzjzujsPvzsGs3LnnjgOxWfP5Wg21n6R7k=
Subject key identifier:   E3:CB:94:4C:16:33:8A:8F:F4:C1:7C:AC:FD:63:D6:38:63:58:7C:96
Certificate issuer:       /CN=8E443FD1F05F76E9C306FEF6685D2F4527493550
Certificate serial:       56AE9EFE796ECEFD0BA6A547C9277B93054D51DE
Authority key identifier: 8E:44:3F:D1:F0:5F:76:E9:C3:06:FE:F6:68:5D:2F:45:27:49:35:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3a2f33322d3333203d3e203238333238.roa
Signing time:             Thu 25 Jan 2024 16:07:01 +0000
ROA not before:           Thu 25 Jan 2024 16:02:01 +0000
ROA not after:            Thu 23 Jan 2025 16:07:01 +0000
asID:                     28328
IP address blocks:        2804:674::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ae:9e:fe:79:6e:ce:fd:0b:a6:a5:47:c9:27:7b:93:05:4d:51:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E443FD1F05F76E9C306FEF6685D2F4527493550
        Validity
            Not Before: Jan 25 16:02:01 2024 GMT
            Not After : Jan 23 16:07:01 2025 GMT
        Subject: CN=E3CB944C16338A8FF4C17CACFD63D63863587C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:4a:20:27:54:4f:cd:dd:57:8c:66:e4:b1:
                    3d:8c:8d:17:2b:fc:ba:ed:7f:e8:d9:5d:13:f0:57:
                    10:75:49:4e:42:3e:53:17:d3:92:35:ab:8f:f4:28:
                    14:53:4b:a3:f2:1b:95:1c:81:9e:28:af:6c:ea:16:
                    76:50:52:59:c4:b5:29:3f:2f:24:2d:3a:31:1d:98:
                    84:a3:af:fe:02:e4:0b:2c:66:4f:fd:de:e6:fe:5d:
                    04:80:2c:1b:a5:18:55:45:84:c4:fc:9c:b9:90:a1:
                    d4:89:6c:56:ba:f1:e6:22:56:f8:f7:d7:1c:c4:b6:
                    17:09:3a:a5:7e:4b:1f:c7:1f:31:80:64:ab:24:e0:
                    27:c2:f8:3c:1b:ca:46:cc:73:0d:3d:f0:d4:d6:fc:
                    03:50:d0:34:4d:26:9b:8e:92:6c:62:12:e3:4c:27:
                    0e:d3:33:a4:db:ef:67:f7:f1:bf:a3:07:a1:81:ab:
                    38:b1:60:67:d3:1d:bf:73:f2:16:96:cf:68:a6:30:
                    fd:58:71:f1:53:17:91:55:a9:b2:d6:84:dd:bb:16:
                    0b:e1:00:e2:f1:e1:43:da:d8:1f:8c:ac:47:f9:62:
                    80:2c:a2:37:c9:50:aa:2a:dd:50:8d:bf:05:c8:78:
                    fe:27:a4:6f:8b:b9:a2:cc:12:df:04:78:d6:7f:64:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CB:94:4C:16:33:8A:8F:F4:C1:7C:AC:FD:63:D6:38:63:58:7C:96
            X509v3 Authority Key Identifier:
                keyid:8E:44:3F:D1:F0:5F:76:E9:C3:06:FE:F6:68:5D:2F:45:27:49:35:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E443FD1F05F76E9C306FEF6685D2F4527493550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3a2f33322d3333203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:674::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:3a:bc:09:ed:e7:73:e0:53:97:3b:e9:7b:7e:90:3a:d1:a4:
         6d:ae:ed:06:e7:bd:97:59:13:ba:9b:e5:af:84:b3:01:21:a4:
         78:93:c6:bd:89:40:75:f8:bf:ac:37:f2:4f:66:e9:5e:4b:c9:
         70:d3:83:25:ee:c3:67:3a:94:f0:2a:9b:fa:a8:23:0e:a0:80:
         e9:8f:8a:ca:48:3f:a4:db:24:86:8b:0a:87:c2:e9:78:0b:ad:
         7a:e5:d4:52:58:5c:66:b2:9b:6e:ea:7e:32:8c:7e:78:07:f6:
         20:36:9a:66:b1:41:5f:41:75:0e:8d:d4:00:b4:12:11:17:50:
         0f:ce:c2:af:c2:a9:e8:ef:ee:8a:fc:f8:d7:53:25:ba:62:37:
         75:a5:1a:14:df:d2:12:e7:dc:85:7b:95:c8:cf:a0:4b:15:63:
         97:d3:9c:da:e1:bc:04:5f:4b:a6:a9:3f:b6:ae:ca:b5:39:17:
         0d:e7:0e:2c:49:dd:6e:b9:d5:2e:e4:7c:01:17:70:45:81:9b:
         7b:9a:32:d8:d7:de:f4:2e:0a:66:4f:9e:5e:00:11:57:27:76:
         1d:6c:3a:a8:47:a1:e1:80:64:ff:1f:b8:c6:02:5a:24:48:12:
         0b:05:72:97:1f:78:05:07:ba:6e:06:de:3d:bb:ed:cf:d9:08:
         75:10:b5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----