Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3a2f33322d3334203d3e20323637333235.roa
File:                     323830343a346262343a3a2f33322d3334203d3e20323637333235.roa (raw, json)
Hash identifier:          KdVBtc1T1OrBVwX/deREgpL1MShi3ULKs2keQusjsXg=
Subject key identifier:   DD:56:4E:4C:4C:BA:3B:79:42:FC:E4:31:92:1D:79:85:80:C8:49:8E
Certificate issuer:       /CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
Certificate serial:       623DE0559F6A8B5679C521FD8198E6D249A333C2
Authority key identifier: 4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3a2f33322d3334203d3e20323637333235.roa
Signing time:             Fri 23 Feb 2024 12:30:34 +0000
ROA not before:           Fri 23 Feb 2024 12:25:34 +0000
ROA not after:            Fri 21 Feb 2025 12:30:34 +0000
asID:                     267325
IP address blocks:        2804:4bb4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3d:e0:55:9f:6a:8b:56:79:c5:21:fd:81:98:e6:d2:49:a3:33:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
        Validity
            Not Before: Feb 23 12:25:34 2024 GMT
            Not After : Feb 21 12:30:34 2025 GMT
        Subject: CN=DD564E4C4CBA3B7942FCE431921D798580C8498E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:c7:42:82:dd:1a:c0:d3:e1:1d:05:0f:51:
                    5d:a2:3e:33:76:ec:ae:13:e1:3c:28:b1:9b:d0:ed:
                    b1:70:73:18:0c:2d:b4:1d:2d:db:17:53:ea:5a:15:
                    30:5d:77:15:70:88:ab:1f:46:eb:db:29:68:9b:0a:
                    93:00:32:6a:f8:98:3b:c7:20:13:11:ea:7d:c5:ed:
                    8d:09:0c:56:05:af:38:72:11:73:93:ba:e3:cb:01:
                    32:11:47:41:10:6c:17:bf:a7:36:c3:02:fa:80:20:
                    64:3b:7e:a6:bc:af:b6:1a:19:9f:ff:a2:bb:93:af:
                    a3:c6:82:a8:c2:9c:d7:d2:41:03:76:19:0c:34:f4:
                    b8:1d:c8:b3:56:e0:84:12:8b:86:ca:27:16:b3:8e:
                    0b:5c:c4:9d:cc:47:74:9b:23:ff:75:3a:ed:a8:32:
                    c9:00:c4:dd:5c:44:a5:07:73:0a:00:aa:ce:c1:6f:
                    1e:99:28:d0:74:56:1f:ad:02:b8:6a:33:57:f5:a1:
                    09:9f:fd:df:ae:74:89:a1:ac:45:40:35:85:cc:fd:
                    51:1b:52:43:5c:3a:ef:a2:41:6d:aa:22:80:31:91:
                    b3:46:7c:79:a0:05:68:36:d7:88:6b:9d:ad:86:82:
                    df:02:95:b8:9e:08:0a:1e:67:6e:e7:17:af:73:a3:
                    01:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:56:4E:4C:4C:BA:3B:79:42:FC:E4:31:92:1D:79:85:80:C8:49:8E
            X509v3 Authority Key Identifier:
                keyid:4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3a2f33322d3334203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:d6:34:32:dd:20:01:92:1b:5d:1d:a8:6e:6d:c8:8d:09:
         f2:00:7e:a5:0c:69:ff:ac:9d:ef:19:d0:8d:c8:fa:32:08:92:
         d4:50:44:0e:8e:bf:de:cb:b8:7a:71:e9:df:ea:1c:a3:07:bc:
         7f:3c:1d:ac:02:36:fe:20:e1:1b:77:93:54:01:73:cc:54:b6:
         82:22:94:c1:c4:41:fd:92:c4:b9:de:3c:3c:fe:82:ea:19:92:
         4e:c2:68:64:49:75:99:c1:1a:e3:50:1f:d6:b6:5a:7b:0d:d8:
         0c:8e:e5:b9:9c:d3:d4:e9:b1:d6:cb:c3:5a:a7:be:4b:64:b5:
         8f:9d:dd:b5:40:98:18:2c:94:f0:4d:c7:e4:8b:84:c0:06:ba:
         28:e7:c0:e0:b7:50:e5:a7:82:8f:dd:44:20:96:22:4a:4b:89:
         e7:c8:75:91:7a:9e:ba:94:5b:33:33:34:85:46:27:01:c3:b5:
         6a:9f:00:50:14:4e:f0:c3:4a:fe:4e:3b:ce:a9:d9:f7:25:51:
         f8:ce:20:6a:ef:8b:06:58:89:94:07:5b:0b:03:07:5d:1c:8e:
         2f:73:9a:6f:ce:ef:93:a4:8f:d8:ac:9f:ec:ff:5a:af:b4:76:
         95:9d:03:d6:93:5c:98:d4:6d:d7:a7:df:ad:0a:a0:0f:3a:8e:
         19:54:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----