Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/323830343a3937303a383030303a3a2f33332d3333203d3e20323633303836.roa
File:                     323830343a3937303a383030303a3a2f33332d3333203d3e20323633303836.roa (raw, json)
Hash identifier:          sNMVAGCnZoOtUY253rVGTCxdgK/dLs88YA7dF8grGn8=
Subject key identifier:   A0:9C:EF:9B:23:BF:69:3A:75:18:B8:57:2D:48:CD:76:D9:5D:B8:B8
Certificate issuer:       /CN=1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549
Certificate serial:       522869ED389CCEC767D93EE13A9B01FE82B97E8D
Authority key identifier: 1F:2C:B2:3A:24:C7:AD:3E:5F:D9:43:A3:47:2E:7E:6A:9C:51:45:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/323830343a3937303a383030303a3a2f33332d3333203d3e20323633303836.roa
Signing time:             Wed 20 Mar 2024 18:57:29 +0000
ROA not before:           Wed 20 Mar 2024 18:52:29 +0000
ROA not after:            Wed 19 Mar 2025 18:57:29 +0000
asID:                     263086
IP address blocks:        2804:970:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:28:69:ed:38:9c:ce:c7:67:d9:3e:e1:3a:9b:01:fe:82:b9:7e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549
        Validity
            Not Before: Mar 20 18:52:29 2024 GMT
            Not After : Mar 19 18:57:29 2025 GMT
        Subject: CN=A09CEF9B23BF693A7518B8572D48CD76D95DB8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:eb:41:f2:bb:60:54:f1:e9:b2:48:9e:75:
                    de:08:f5:99:32:17:d3:d5:3c:6f:22:51:6b:e4:8d:
                    d8:6f:a1:7e:17:01:98:86:bc:72:f5:92:49:3b:c0:
                    ac:b6:4f:97:69:38:37:fd:06:68:8f:c0:a1:57:9b:
                    cc:88:3d:da:84:10:2a:55:0b:86:1c:77:cc:68:d9:
                    61:d8:d8:0e:6a:ed:36:8f:3a:8b:0e:fb:cb:be:34:
                    eb:a4:fd:7c:57:42:4f:a6:c3:99:7b:d9:c3:6b:9d:
                    33:03:9d:aa:c3:8e:fb:41:1e:05:ce:56:3a:84:9e:
                    c3:04:c5:f2:b1:16:75:1a:c3:4e:44:6f:7a:d5:52:
                    c8:f9:f2:3a:9c:08:93:28:1f:fb:f7:89:b2:02:41:
                    2f:c0:d6:7d:4f:99:6d:2c:07:dd:71:0c:8d:05:b0:
                    60:39:4b:7e:e3:c2:7c:f9:fa:70:93:b7:52:6d:00:
                    8a:e2:29:bd:d7:2f:d9:b0:8a:a4:cb:c7:8d:30:c9:
                    0d:8b:be:59:8a:06:4b:23:97:28:a4:3c:f5:95:b3:
                    aa:85:5b:74:17:40:88:71:a9:09:fc:9f:10:00:09:
                    de:4b:4b:9e:17:80:0c:0c:b4:f0:56:c1:a8:63:69:
                    e1:28:04:2e:bf:a0:b4:d5:13:50:b5:77:e1:20:77:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9C:EF:9B:23:BF:69:3A:75:18:B8:57:2D:48:CD:76:D9:5D:B8:B8
            X509v3 Authority Key Identifier:
                keyid:1F:2C:B2:3A:24:C7:AD:3E:5F:D9:43:A3:47:2E:7E:6A:9C:51:45:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/323830343a3937303a383030303a3a2f33332d3333203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:970:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b0:12:d3:9f:fc:50:d8:c7:47:34:79:81:47:30:96:4a:a5:f3:
         35:1e:ae:dd:66:63:3c:73:c2:e7:0e:67:22:64:1a:28:e5:3c:
         7b:ce:c9:a7:84:60:57:c2:d9:fb:db:2d:d1:4c:98:b5:97:2e:
         08:89:cb:b6:a4:de:6f:e0:f7:f4:c2:c5:54:8f:8d:1b:53:a0:
         07:23:8d:f8:ff:c2:86:c9:2c:59:f1:61:bf:b4:a8:b4:a0:0f:
         b0:e7:2c:a2:da:46:f5:f2:98:57:9b:a1:e0:12:09:37:2d:f1:
         92:98:7c:d1:d0:0b:f0:5d:4d:ca:a3:a7:1a:da:7a:39:83:2e:
         2a:cb:83:2e:5b:c4:03:65:53:bf:cb:2e:27:c7:a2:7b:47:32:
         12:2c:a5:33:7c:b8:20:fe:61:a4:f6:ce:8f:e6:5d:ec:fd:3d:
         34:b2:e9:51:2d:52:f7:ef:f8:32:01:49:3c:2c:55:67:6a:20:
         ce:61:74:5c:e8:2f:73:9b:27:7d:97:b3:0c:b8:2c:98:1d:32:
         dc:4a:39:bd:05:d5:9f:b5:c5:41:f5:df:0b:0a:af:01:c8:1b:
         eb:7b:88:d8:5b:66:27:93:aa:bf:4f:de:b8:ab:bf:3f:04:ef:
         09:8c:a5:90:ce:99:43:b2:ce:13:13:2d:1e:70:c0:99:de:20:
         9e:e6:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----