Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a623a3a2f34382d3438203d3e203238323032.roa
File:                     323830343a3837633a623a3a2f34382d3438203d3e203238323032.roa (raw, json)
Hash identifier:          7mAlyYR/wwe9z4qu3/1ysg5PDjapJ9LRvobB7D0wwhg=
Subject key identifier:   5D:DD:7A:7B:A8:A0:31:B9:73:55:3D:85:CE:68:01:06:74:F7:EE:AA
Certificate issuer:       /CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
Certificate serial:       3F08AB2B5CEF4E543A237BECE22C56A8BC02C619
Authority key identifier: BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a623a3a2f34382d3438203d3e203238323032.roa
Signing time:             Mon 13 Jan 2025 13:32:26 +0000
ROA not before:           Mon 13 Jan 2025 13:27:26 +0000
ROA not after:            Mon 12 Jan 2026 13:32:26 +0000
asID:                     28202
IP address blocks:        2804:87c:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:08:ab:2b:5c:ef:4e:54:3a:23:7b:ec:e2:2c:56:a8:bc:02:c6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE867134DD576AA44DA77A1C5D714DB384FEC083
        Validity
            Not Before: Jan 13 13:27:26 2025 GMT
            Not After : Jan 12 13:32:26 2026 GMT
        Subject: CN=5DDD7A7BA8A031B973553D85CE68010674F7EEAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:8a:61:f1:66:52:eb:8e:05:6f:d9:92:f4:
                    f1:9f:2e:63:79:68:0b:e0:cc:e0:d7:fe:5b:93:a9:
                    f4:07:3e:cd:64:6c:75:57:e3:7c:41:43:12:0a:1e:
                    bf:7f:dc:84:f0:bf:c1:38:ff:ef:29:ec:71:69:8f:
                    df:11:11:89:64:71:d4:2e:a7:1c:a6:f8:81:1a:3a:
                    d1:69:fa:f0:ba:f5:49:30:1d:8f:c6:a8:97:af:4d:
                    3d:90:53:a0:4b:eb:ee:41:7b:3c:55:64:e7:22:f3:
                    d4:9e:17:a2:d8:a0:d5:46:7a:59:cb:53:c8:46:42:
                    6f:ab:a0:fc:34:d9:56:f4:12:f1:6e:3f:82:66:a6:
                    f7:20:5b:84:8e:a8:ad:c8:d9:7d:cb:52:5a:ae:8b:
                    e2:86:c4:7f:cf:27:05:35:a2:66:0f:f0:00:2b:0d:
                    15:c9:a8:bd:b3:bc:ea:91:77:e7:d2:e1:23:0c:d8:
                    2e:43:96:2c:96:42:5d:57:ec:62:7c:14:3d:45:62:
                    5d:c7:80:5e:43:86:a4:02:11:fa:1b:89:75:11:15:
                    30:ed:8c:97:26:62:e9:57:d4:47:9e:e7:5c:e8:bb:
                    de:ab:47:0c:09:66:9b:0f:de:d4:c4:62:96:88:11:
                    f9:d5:56:6b:03:4f:4f:f1:d6:a0:77:9b:31:45:28:
                    9e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DD:7A:7B:A8:A0:31:B9:73:55:3D:85:CE:68:01:06:74:F7:EE:AA
            X509v3 Authority Key Identifier:
                keyid:BE:86:71:34:DD:57:6A:A4:4D:A7:7A:1C:5D:71:4D:B3:84:FE:C0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/BE867134DD576AA44DA77A1C5D714DB384FEC083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE867134DD576AA44DA77A1C5D714DB384FEC083.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/0/323830343a3837633a623a3a2f34382d3438203d3e203238323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:db:ad:c2:4f:95:7e:72:cf:e3:3e:34:c2:a9:b9:cf:0f:06:
         ac:f5:50:08:e1:89:86:4d:61:b5:ea:37:7b:1e:73:70:b3:d2:
         98:8e:88:da:38:90:35:09:19:8f:88:f9:dd:51:fe:e8:4d:a2:
         6c:c4:98:ad:85:3a:8e:c3:15:72:a3:f1:f0:36:d3:85:f0:3e:
         b7:68:73:14:59:a4:b9:e7:5b:b5:d8:23:ef:01:f5:dd:81:e3:
         b9:8c:0d:51:e2:15:ac:75:38:59:36:6f:fa:d6:c3:59:7d:52:
         d6:b3:ca:27:18:a8:11:e3:65:12:0b:9b:78:a8:4e:0d:0a:4c:
         d9:44:06:21:fe:b5:67:c7:20:10:6a:85:f2:4a:6f:2c:da:fe:
         3c:e8:17:c8:89:7d:0d:39:0a:3c:7d:f2:da:92:85:4e:81:19:
         ba:7b:f2:d6:f7:a4:90:20:1f:76:85:a5:aa:1b:0f:ae:41:f7:
         06:63:57:b5:f9:af:b9:e4:a2:44:a0:d4:e8:d1:c2:71:14:41:
         dd:f9:32:04:3c:6e:0d:97:b4:2a:bd:37:e5:74:01:f7:c1:df:
         ad:b1:e1:20:5d:40:4a:22:d0:35:35:c2:b6:24:95:4c:c3:58:
         08:e5:c7:fd:b9:f9:54:0b:a9:62:a1:e5:f2:e5:1b:92:e5:b5:
         f4:1d:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----