Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/323830343a336539343a3a2f33332d3338203d3e20323636363037.roa
File:                     323830343a336539343a3a2f33332d3338203d3e20323636363037.roa (raw, json)
Hash identifier:          sK6TfwLukS/TRjBI7l8kQESia7Par7qGaPQK0s3wVzg=
Subject key identifier:   A4:F5:35:FB:86:14:3D:D2:37:79:18:1A:F8:F7:5F:F4:BA:A5:30:F9
Certificate issuer:       /CN=52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A
Certificate serial:       5988F9DCD80363A0288C76CBB2B92D7F03ADF6DE
Authority key identifier: 52:FC:BB:FF:5F:F3:EE:EA:4A:47:AA:50:D3:79:4E:C4:EB:07:BE:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/323830343a336539343a3a2f33332d3338203d3e20323636363037.roa
Signing time:             Thu 23 Nov 2023 10:38:05 +0000
ROA not before:           Thu 23 Nov 2023 10:33:05 +0000
ROA not after:            Thu 21 Nov 2024 10:38:05 +0000
asID:                     266607
IP address blocks:        2804:3e94::/33 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:88:f9:dc:d8:03:63:a0:28:8c:76:cb:b2:b9:2d:7f:03:ad:f6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A
        Validity
            Not Before: Nov 23 10:33:05 2023 GMT
            Not After : Nov 21 10:38:05 2024 GMT
        Subject: CN=A4F535FB86143DD23779181AF8F75FF4BAA530F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4b:c4:95:f1:f2:fa:79:d0:31:2a:c5:ef:d8:
                    a2:a6:f6:81:d0:e3:0b:58:c4:6f:2c:25:21:df:f6:
                    86:ce:6c:f1:31:bb:ac:9d:14:b5:1e:9b:46:9d:de:
                    f9:8a:f1:65:26:26:ad:ae:3a:90:87:4a:ab:e0:9e:
                    a2:bb:ee:95:f1:3e:d2:5e:1e:bb:5c:f7:24:f0:18:
                    99:56:55:86:cd:64:f7:e6:b7:ed:a8:6e:99:21:27:
                    3e:67:a6:9a:7c:34:80:30:f3:91:85:02:98:38:1c:
                    56:3a:ee:80:f1:12:97:a9:58:35:c9:cf:8c:cf:43:
                    bc:32:d3:91:fe:6d:fb:5b:d1:9e:9f:6d:0d:fb:a0:
                    ef:14:19:61:ea:3b:0a:b8:52:9f:92:c6:b3:06:b5:
                    bd:1e:c0:cb:d2:2f:1a:86:60:f7:af:d9:a6:58:3b:
                    2f:84:f9:c9:a7:0e:1c:56:db:d7:ad:e3:94:ef:9e:
                    5f:e9:c9:f6:fe:44:a9:01:1a:a9:89:53:ea:1a:b0:
                    cf:c0:92:f4:86:c9:59:b2:94:0b:db:58:1a:bd:92:
                    6b:5a:b3:83:49:cb:f6:00:b9:18:41:a7:4d:25:7d:
                    87:85:86:32:f1:06:e5:6e:d6:0e:ca:29:41:7c:89:
                    82:52:c3:1e:1c:d6:d0:41:52:75:8f:79:25:b5:a1:
                    a9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F5:35:FB:86:14:3D:D2:37:79:18:1A:F8:F7:5F:F4:BA:A5:30:F9
            X509v3 Authority Key Identifier:
                keyid:52:FC:BB:FF:5F:F3:EE:EA:4A:47:AA:50:D3:79:4E:C4:EB:07:BE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/323830343a336539343a3a2f33332d3338203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e94::/33

    Signature Algorithm: sha256WithRSAEncryption
         78:1e:70:46:ad:8b:72:49:d0:47:5f:59:ac:b4:3c:74:4a:e1:
         5d:f9:19:7e:f9:2e:22:01:cb:97:c5:cd:5b:19:98:5f:fb:19:
         99:ac:9c:61:6a:fe:34:67:9e:55:e0:b6:46:b2:bc:d9:ac:df:
         50:dd:88:98:6d:95:33:3d:2d:57:21:58:36:7d:c2:41:9d:3b:
         91:4d:3f:3a:33:36:4c:56:00:f8:db:1e:9b:b2:36:cc:bd:8c:
         dd:f7:c8:57:30:a1:2d:91:f1:bc:85:65:79:5b:83:3e:d5:57:
         c9:f6:4b:84:8d:e1:5f:03:ea:a0:4c:1b:76:50:f3:f4:0a:d7:
         c8:e5:2d:cb:13:cd:96:7c:45:b8:64:96:c4:dd:5e:9c:49:51:
         b7:3a:5c:c5:f2:91:57:a0:4d:82:32:2d:a0:22:17:22:89:7c:
         0e:98:ce:53:92:8e:38:b0:44:a0:bc:15:9c:c2:c6:97:ef:3a:
         55:21:c8:9f:ce:a4:3a:d6:39:1f:1f:3c:af:5a:6f:fa:02:a4:
         c6:87:a9:e4:51:23:9a:d4:35:45:5c:33:1a:7b:ab:f7:5d:8c:
         b6:41:12:ae:aa:2d:e5:b0:e9:39:57:43:83:b2:1f:28:ea:69:
         94:f6:94:51:5d:c8:b5:6c:b3:c7:88:28:6c:ea:5d:d9:6d:40:
         7b:e1:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----