Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a383030303a3a2f33332d313238203d3e20323635333238.roa
File:                     323830343a326532383a383030303a3a2f33332d313238203d3e20323635333238.roa (raw, json)
Hash identifier:          3vegte5RqX/ISIxxW4Eik7WCdFcmX29bP9g38Ht0OaI=
Subject key identifier:   42:D8:09:59:9C:DD:4D:44:05:15:4B:78:09:5A:8B:C4:29:D9:13:AF
Certificate issuer:       /CN=A5766C825150ED3F3AFE55B1E0ED3721718F1CBE
Certificate serial:       383E6D530326CE31B151A228CF3A54C0BAE906B7
Authority key identifier: A5:76:6C:82:51:50:ED:3F:3A:FE:55:B1:E0:ED:37:21:71:8F:1C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5766C825150ED3F3AFE55B1E0ED3721718F1CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a383030303a3a2f33332d313238203d3e20323635333238.roa
Signing time:             Fri 21 Jul 2023 13:00:54 +0000
ROA not before:           Fri 21 Jul 2023 12:55:54 +0000
ROA not after:            Fri 19 Jul 2024 13:00:54 +0000
asID:                     265328
IP address blocks:        2804:2e28:8000::/33 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3e:6d:53:03:26:ce:31:b1:51:a2:28:cf:3a:54:c0:ba:e9:06:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5766C825150ED3F3AFE55B1E0ED3721718F1CBE
        Validity
            Not Before: Jul 21 12:55:54 2023 GMT
            Not After : Jul 19 13:00:54 2024 GMT
        Subject: CN=42D809599CDD4D4405154B78095A8BC429D913AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6a:c5:03:9d:31:b1:9e:2f:ee:0b:37:d3:30:
                    64:6f:cc:8c:c9:00:a5:60:bf:1a:4f:91:95:0c:62:
                    9a:e1:5a:1b:81:eb:b0:35:9f:df:0e:01:c4:be:2b:
                    b4:4e:5e:bd:79:c5:e4:a3:fd:44:53:f5:77:95:6c:
                    6e:35:cc:36:23:d2:89:2f:0a:59:26:73:e4:0c:77:
                    d7:26:3b:29:07:df:01:7e:23:90:7d:35:65:f1:f1:
                    fd:c9:36:db:50:80:20:3a:a1:ed:d8:5d:da:72:d1:
                    3f:2e:8b:8f:e7:91:4b:a7:44:57:cb:1a:83:31:ae:
                    71:af:4f:cb:ef:bb:d3:27:9f:c2:51:15:4b:b7:06:
                    ae:91:d6:86:aa:5a:df:fc:11:3e:2e:92:26:6b:d6:
                    aa:1d:b3:7c:96:57:de:1f:78:f9:cf:71:66:b5:19:
                    73:2b:9e:36:74:c0:ce:f9:4d:64:51:df:e0:13:aa:
                    83:b2:6d:1c:6d:cc:53:21:3c:f7:27:fb:b6:8c:9f:
                    eb:b9:ee:57:3c:49:8d:97:4e:f1:3c:6b:03:4a:25:
                    91:c6:06:d6:14:45:92:fb:12:dd:c6:57:aa:e0:40:
                    f7:ee:18:84:8e:2e:ba:d2:27:d4:e6:c7:85:af:25:
                    50:43:84:2a:0b:b3:8f:d9:52:3c:c2:0b:c9:68:54:
                    e6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D8:09:59:9C:DD:4D:44:05:15:4B:78:09:5A:8B:C4:29:D9:13:AF
            X509v3 Authority Key Identifier:
                keyid:A5:76:6C:82:51:50:ED:3F:3A:FE:55:B1:E0:ED:37:21:71:8F:1C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/A5766C825150ED3F3AFE55B1E0ED3721718F1CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5766C825150ED3F3AFE55B1E0ED3721718F1CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a383030303a3a2f33332d313238203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e28:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4d:14:e2:4a:c9:8c:7f:3a:a5:99:21:3d:59:de:e0:82:ff:5f:
         c0:84:de:84:50:31:cb:83:73:8e:76:0e:80:ff:9f:29:0d:98:
         f7:33:f3:d9:d0:f2:56:12:ba:35:fd:4a:36:29:91:ba:be:9a:
         1b:be:02:81:94:db:71:44:b1:ef:24:a0:83:55:57:35:4d:68:
         27:95:e1:8e:5a:ae:55:de:89:20:8b:ed:a4:21:4d:8d:df:4b:
         80:1f:6e:0e:5a:ce:b3:5f:a1:f5:5f:27:f8:53:3b:13:cb:cb:
         68:22:ae:f8:3c:89:ea:13:65:fb:a8:8c:99:40:7e:ad:2c:4d:
         f6:d4:b5:25:1b:35:e7:84:dc:9d:a1:e6:e9:fa:e1:c1:dd:4f:
         e0:91:81:d5:89:f9:cb:d9:a8:70:00:50:e8:2d:e5:27:c4:62:
         2b:bb:fa:cf:2a:53:bf:d7:9a:42:55:31:9c:45:76:c1:67:96:
         b6:23:45:0c:1e:94:ed:9b:40:7b:51:d7:9a:22:0a:c7:58:5d:
         10:b5:2d:ec:83:56:d0:e2:17:be:18:70:66:01:29:46:1c:6c:
         24:2b:2a:71:75:80:c5:6f:08:b7:43:8a:4e:77:37:1b:0d:df:
         6d:a9:2b:8f:a5:99:af:d2:0f:cc:ee:1e:37:1d:f9:02:7f:75:
         b7:e2:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----