Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/323830343a356139343a3a2f33322d3438203d3e20323638373832.roa
File:                     323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (raw, json)
Hash identifier:          8CQrF34soBwXu1YRdamnxb0gJeOCBly8lfmNOKaeNCU=
Subject key identifier:   BE:8E:74:8F:42:D0:B3:B6:7A:28:EE:F9:0C:61:AF:6E:61:1F:49:26
Certificate issuer:       /CN=D1FFDF44055E16082D529730642377D751467152
Certificate serial:       3A8CF9E704ECE0DF7346C16D40EA532D027FC4D5
Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/323830343a356139343a3a2f33322d3438203d3e20323638373832.roa
Signing time:             Sat 21 Dec 2024 16:42:33 +0000
ROA not before:           Sat 21 Dec 2024 16:37:33 +0000
ROA not after:            Sat 20 Dec 2025 16:42:33 +0000
asID:                     268782
IP address blocks:        2804:5a94::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8c:f9:e7:04:ec:e0:df:73:46:c1:6d:40:ea:53:2d:02:7f:c4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FFDF44055E16082D529730642377D751467152
        Validity
            Not Before: Dec 21 16:37:33 2024 GMT
            Not After : Dec 20 16:42:33 2025 GMT
        Subject: CN=BE8E748F42D0B3B67A28EEF90C61AF6E611F4926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:95:53:20:26:31:d5:3b:5d:ca:cd:6e:b6:34:
                    0c:28:73:d8:8b:ce:9c:68:76:80:0d:e3:fe:80:e0:
                    f0:2a:37:81:4d:1a:a4:97:46:04:87:29:8e:77:88:
                    61:81:20:87:54:98:b5:9f:9b:af:08:5e:bf:bc:dc:
                    0f:f3:4e:ac:98:8c:e6:fc:5e:bd:6c:f5:e8:da:da:
                    e9:29:fd:8d:24:f7:ee:b4:70:48:bf:55:dd:1a:53:
                    4c:66:80:57:9f:1e:ff:dd:4b:a1:a4:9f:02:a6:01:
                    22:47:ed:c5:26:fa:67:a2:ac:45:0e:62:5a:d3:00:
                    15:5d:c6:40:a7:b4:10:37:c8:4c:4d:6e:ec:04:33:
                    94:26:38:ef:8a:48:36:f0:be:d2:64:ff:c2:70:da:
                    8a:48:44:ee:e7:33:32:65:f4:0f:a0:d9:22:cf:0d:
                    5d:72:84:d0:bd:62:3b:6e:84:58:b7:af:3c:ac:ba:
                    dd:49:05:12:8f:a1:57:a5:e8:20:46:13:c1:cd:e9:
                    0e:18:97:1b:fb:73:b9:c1:ae:e7:5f:a9:15:62:c7:
                    0a:63:16:2e:f5:a4:14:22:cf:58:69:f2:f1:f7:a5:
                    8e:75:10:37:f7:9f:8b:d2:9c:7e:7d:a6:b1:a9:c7:
                    5f:13:a2:7a:ec:e3:dd:0d:bc:0e:7a:3a:0d:c2:2a:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8E:74:8F:42:D0:B3:B6:7A:28:EE:F9:0C:61:AF:6E:61:1F:49:26
            X509v3 Authority Key Identifier:
                keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/323830343a356139343a3a2f33322d3438203d3e20323638373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a94::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:8e:d2:02:ff:fa:59:94:c8:b9:58:a7:e9:9e:6e:38:90:b9:
         d8:ef:62:f3:97:10:f7:d7:13:26:23:e2:6d:e3:ea:9d:1b:16:
         eb:9b:dc:6f:d1:bd:43:2f:cd:3e:2b:60:b0:8a:60:ad:3a:d1:
         b4:5e:04:1b:07:4e:1a:ec:54:41:05:f4:a2:99:92:55:00:c1:
         9f:59:b1:d6:db:f7:c4:93:51:8a:53:e6:60:af:b6:ec:df:f7:
         ad:45:d4:16:b5:c1:f5:82:57:71:b4:7d:16:fa:57:e0:52:5e:
         05:57:3b:8f:46:07:fd:28:eb:59:95:ce:d5:59:de:11:34:fa:
         a9:4e:f1:34:ec:7c:7f:1f:6b:68:c5:2a:f0:70:5e:16:58:ed:
         09:d2:76:9b:c6:56:2a:65:4b:64:62:81:61:d0:5e:fc:06:08:
         e2:cc:0d:e9:83:57:bd:ee:7d:7b:6d:20:aa:91:19:52:11:0d:
         3c:22:58:fd:61:eb:00:a8:3c:04:2d:e5:9c:fb:15:09:e3:35:
         e7:b7:1f:f9:f3:2e:dc:40:7c:46:e4:68:96:ab:e5:e0:06:5b:
         65:cf:db:01:a3:92:d6:21:85:52:3c:30:db:3b:c0:39:61:1f:
         f5:a4:fb:a6:62:6a:d3:4e:df:0c:9c:ee:3d:7d:53:86:cf:23:
         1f:10:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----