Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/0/323830343a3436343a3a2f33322d3438203d3e20323632343331.roa
File:                     323830343a3436343a3a2f33322d3438203d3e20323632343331.roa (raw, json)
Hash identifier:          +LFFeJze3wGVVajDOYe4EbQy/Q8I2msR9qp9SEkSMtU=
Subject key identifier:   C4:E5:89:AC:84:CD:1E:E7:61:40:72:07:9E:0E:1C:CB:8B:2B:F0:DA
Certificate issuer:       /CN=42CB6D3316ED3B8DC720AB876EE22A61846279E2
Certificate serial:       1E1C559DCF69ECD62E38C18862D583880E6EC462
Authority key identifier: 42:CB:6D:33:16:ED:3B:8D:C7:20:AB:87:6E:E2:2A:61:84:62:79:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42CB6D3316ED3B8DC720AB876EE22A61846279E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/0/323830343a3436343a3a2f33322d3438203d3e20323632343331.roa
Signing time:             Tue 26 Sep 2023 17:11:26 +0000
ROA not before:           Tue 26 Sep 2023 17:06:26 +0000
ROA not after:            Tue 24 Sep 2024 17:11:26 +0000
asID:                     262431
IP address blocks:        2804:464::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1c:55:9d:cf:69:ec:d6:2e:38:c1:88:62:d5:83:88:0e:6e:c4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CB6D3316ED3B8DC720AB876EE22A61846279E2
        Validity
            Not Before: Sep 26 17:06:26 2023 GMT
            Not After : Sep 24 17:11:26 2024 GMT
        Subject: CN=C4E589AC84CD1EE7614072079E0E1CCB8B2BF0DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:83:2f:25:2b:23:6d:93:ec:14:4e:db:4a:
                    cd:a3:d3:dd:cf:d8:ae:d1:09:aa:b9:17:f1:2f:9b:
                    23:1b:9c:58:7f:80:22:62:79:e1:89:0f:f4:39:e3:
                    89:b9:e3:4f:53:69:66:0d:1e:45:66:51:1e:3f:be:
                    62:a3:ef:5c:c0:2f:8c:26:2d:06:74:98:e7:cf:07:
                    86:67:7b:fb:cc:bd:f6:72:33:af:f9:a0:a3:19:c6:
                    f6:26:79:47:3b:4b:0b:94:b4:ed:e5:46:32:dd:13:
                    a6:4d:e7:4a:31:58:2f:d2:5a:5b:34:50:65:46:96:
                    00:a9:6c:44:55:44:61:25:2e:1b:61:ce:84:f6:dd:
                    ab:0a:75:72:98:cd:b9:b9:15:83:de:20:29:99:68:
                    8d:63:6d:5b:6d:6d:55:37:c9:ab:0e:66:46:a6:a6:
                    eb:76:3d:30:b8:1a:8d:89:d4:4f:72:22:90:5c:b0:
                    6f:b7:18:1b:b8:20:c1:9c:5e:5d:05:8a:94:3c:0b:
                    02:f0:3c:a7:30:e7:6a:19:30:2d:a7:07:ca:84:83:
                    9d:eb:04:03:81:8d:e8:94:fa:f6:7a:01:67:09:73:
                    ba:f7:17:e7:95:b0:bd:53:f2:26:72:d1:a1:25:5f:
                    11:23:61:d6:5f:3a:e6:79:5f:79:9b:83:d5:a0:a3:
                    a5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E5:89:AC:84:CD:1E:E7:61:40:72:07:9E:0E:1C:CB:8B:2B:F0:DA
            X509v3 Authority Key Identifier:
                keyid:42:CB:6D:33:16:ED:3B:8D:C7:20:AB:87:6E:E2:2A:61:84:62:79:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/0/42CB6D3316ED3B8DC720AB876EE22A61846279E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42CB6D3316ED3B8DC720AB876EE22A61846279E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/0/323830343a3436343a3a2f33322d3438203d3e20323632343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:464::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:bb:56:51:17:95:bb:9b:b8:a7:05:90:fb:82:d8:69:8b:4f:
         6b:df:82:0f:de:2a:eb:8e:84:72:02:a9:19:c3:82:55:ba:0a:
         bd:e2:eb:51:df:91:b9:f2:71:0d:9a:82:6d:51:ee:33:15:0b:
         c1:5f:08:23:4d:b1:45:c0:4a:d5:dc:4f:ce:97:3d:26:8e:22:
         d5:68:f5:26:27:bd:4b:ba:76:54:24:07:5e:49:9e:1f:c3:c8:
         30:2f:70:1b:6a:e8:f9:0f:e0:3a:85:40:1c:50:39:51:71:e2:
         06:43:76:c2:71:32:87:77:ad:6c:a2:30:b4:7b:81:4e:52:7e:
         84:32:4c:5f:f8:9d:3c:8b:a0:62:70:76:48:fd:a9:e4:ed:6d:
         5a:9d:4b:8c:f4:08:b7:1b:5e:aa:41:b7:21:7d:b1:cc:3b:b7:
         29:ed:5e:24:14:7f:64:df:79:24:aa:82:d1:b2:af:e4:13:75:
         86:55:f9:e2:12:6a:ce:ea:1e:69:3e:b5:4c:d2:cb:cf:9e:57:
         c4:53:e6:85:9f:20:47:ae:70:4b:a4:5a:5e:00:56:6b:63:11:
         d9:ab:05:42:55:65:98:2e:e1:30:9e:8e:eb:14:79:b7:4f:67:
         4a:aa:be:6e:d9:02:4d:35:bc:5b:95:36:15:f4:b6:62:2d:37:
         99:7d:53:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----