Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/323830343a313134303a3a2f33322d3336203d3e20323633363636.roa
File:                     323830343a313134303a3a2f33322d3336203d3e20323633363636.roa (raw, json)
Hash identifier:          dneYtHXibbPRDfK+d/TArU4MIo2JZ9T/XJg0tXkejbM=
Subject key identifier:   DC:40:B7:29:4F:FC:94:D5:A1:3B:7D:14:D0:16:93:8C:5E:26:82:08
Certificate issuer:       /CN=7AFE4BCD689DFF0C180988329AD8922D4AACA40B
Certificate serial:       2DCA2DFD7BD59890DE961584C7DDF9A27C8D121C
Authority key identifier: 7A:FE:4B:CD:68:9D:FF:0C:18:09:88:32:9A:D8:92:2D:4A:AC:A4:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE4BCD689DFF0C180988329AD8922D4AACA40B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/323830343a313134303a3a2f33322d3336203d3e20323633363636.roa
Signing time:             Mon 19 Feb 2024 12:41:56 +0000
ROA not before:           Mon 19 Feb 2024 12:36:56 +0000
ROA not after:            Mon 17 Feb 2025 12:41:56 +0000
asID:                     263666
IP address blocks:        2804:1140::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ca:2d:fd:7b:d5:98:90:de:96:15:84:c7:dd:f9:a2:7c:8d:12:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AFE4BCD689DFF0C180988329AD8922D4AACA40B
        Validity
            Not Before: Feb 19 12:36:56 2024 GMT
            Not After : Feb 17 12:41:56 2025 GMT
        Subject: CN=DC40B7294FFC94D5A13B7D14D016938C5E268208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:90:d3:e6:57:24:f6:89:03:32:ca:3a:7f:
                    5d:d9:76:cc:c8:81:a9:15:89:83:dd:82:c2:35:b3:
                    8c:94:4a:2a:68:60:f5:1e:a6:85:df:f3:ed:3f:87:
                    67:bd:ba:5e:8f:e0:e1:14:1d:2e:72:62:94:b8:28:
                    d7:d3:ce:e6:c0:db:6c:ac:aa:20:bf:8a:8b:a9:76:
                    06:e6:75:46:b7:88:57:5c:49:ef:02:7f:6f:dc:06:
                    c1:9e:fa:9b:75:6c:0f:8b:ce:21:f8:34:7c:14:3d:
                    1a:47:10:c3:37:cd:21:fd:94:b8:9f:c6:f5:69:a5:
                    a6:91:80:0e:61:64:6d:9c:ff:f6:c9:49:74:40:3c:
                    ac:23:02:38:dd:c8:2a:88:52:66:97:66:30:99:38:
                    70:fe:2f:e3:98:82:62:47:9e:f1:1c:25:fb:ed:68:
                    02:c8:10:33:2e:35:50:6c:7d:c3:d1:b1:3b:98:5f:
                    67:d2:cf:c9:87:43:9d:df:d1:71:1b:3a:9b:82:33:
                    b5:b3:00:aa:75:4c:7c:cc:bc:ae:c4:f2:3b:e8:90:
                    f6:71:ca:83:d8:1d:cc:6f:be:5b:8d:30:2d:26:ac:
                    2f:2d:33:9f:b3:0f:ed:da:09:4f:17:ec:5d:37:83:
                    9c:20:ed:45:88:96:09:b1:a1:d9:dd:17:16:d0:8a:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:40:B7:29:4F:FC:94:D5:A1:3B:7D:14:D0:16:93:8C:5E:26:82:08
            X509v3 Authority Key Identifier:
                keyid:7A:FE:4B:CD:68:9D:FF:0C:18:09:88:32:9A:D8:92:2D:4A:AC:A4:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/7AFE4BCD689DFF0C180988329AD8922D4AACA40B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE4BCD689DFF0C180988329AD8922D4AACA40B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/323830343a313134303a3a2f33322d3336203d3e20323633363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1140::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:3c:d3:cb:bf:7d:42:6b:bc:c6:4e:f5:1c:f1:fb:95:a2:e8:
         7a:e4:d7:c8:8b:71:0d:ba:3d:4b:6c:0e:dd:c9:b4:15:bc:32:
         e2:16:63:d5:f3:ae:88:ac:64:bf:5a:8d:cf:e0:54:e6:dc:9f:
         ec:e2:f8:7f:23:d6:ec:40:d3:24:71:31:9f:9c:82:86:50:f9:
         a0:b6:d8:17:bd:4d:13:d1:37:18:a0:25:77:32:7c:ab:51:4a:
         1d:ae:f0:dc:2d:42:25:4c:65:49:5f:74:1b:84:e9:e1:1d:5c:
         74:f1:e4:47:4d:cf:db:5b:8e:28:ec:d2:f6:7f:9d:48:5e:e0:
         a2:37:a2:de:64:67:a9:b9:ce:28:38:99:20:a6:c3:fc:e6:6f:
         c7:a5:92:b6:fe:e0:97:5d:e8:ef:a3:f0:9b:47:be:7d:24:8f:
         be:d8:79:21:6f:1f:e1:af:de:7d:f5:ad:27:1c:f6:a1:88:ed:
         7d:b8:44:af:65:6b:52:e7:9b:fc:ef:42:9c:6c:42:c3:fd:25:
         aa:83:88:23:5e:25:68:dd:f5:f4:c5:61:ee:7d:4a:ab:b1:6e:
         58:17:92:1f:21:f9:4d:91:42:1e:07:c8:3f:6e:ed:5b:b1:59:
         3a:d7:65:aa:e2:d5:88:3b:d9:18:93:f0:d4:31:7a:b9:fa:68:
         aa:6a:74:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----