Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/323830343a3836303a3a2f33322d3332203d3e20323632343939.roa
File:                     323830343a3836303a3a2f33322d3332203d3e20323632343939.roa (raw, json)
Hash identifier:          rozhBDMyrEDHSP0WSYTV32lvJ7bNBC8IcpBGm4lOLRE=
Subject key identifier:   17:D6:5A:45:0B:90:66:7D:56:D4:F7:53:E4:AA:D2:6B:CB:1D:E3:91
Certificate issuer:       /CN=FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA
Certificate serial:       7EB005241AAF4B0BC0E5E84DB0F49D0CC77B83AD
Authority key identifier: FB:69:29:18:40:0F:03:EA:4A:51:C4:E3:6D:DD:21:BB:B7:ED:9D:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/323830343a3836303a3a2f33322d3332203d3e20323632343939.roa
Signing time:             Mon 08 Apr 2024 19:00:00 +0000
ROA not before:           Mon 08 Apr 2024 18:55:00 +0000
ROA not after:            Mon 07 Apr 2025 19:00:00 +0000
asID:                     262499
IP address blocks:        2804:860::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b0:05:24:1a:af:4b:0b:c0:e5:e8:4d:b0:f4:9d:0c:c7:7b:83:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA
        Validity
            Not Before: Apr  8 18:55:00 2024 GMT
            Not After : Apr  7 19:00:00 2025 GMT
        Subject: CN=17D65A450B90667D56D4F753E4AAD26BCB1DE391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ee:47:6c:2f:ea:f2:f3:e5:ff:2d:2a:9a:da:
                    36:2a:41:11:f7:ac:d5:3b:55:ad:bc:10:cd:15:87:
                    27:21:d5:91:63:0a:21:9a:9f:98:a4:87:24:f4:b7:
                    48:01:fd:cc:c2:97:70:ed:78:f2:02:5b:b7:e9:cf:
                    e5:b4:b5:b4:25:af:f0:01:c3:87:3a:81:4a:d3:e5:
                    9b:cb:a9:ee:23:18:4a:d0:8a:47:a5:cb:e0:54:e5:
                    d2:62:ca:50:85:0a:1c:ea:eb:72:e5:8f:50:c8:c9:
                    c4:64:78:8a:01:2a:c2:9b:62:7f:47:e7:6e:1e:b9:
                    e9:8e:ff:4c:80:57:91:ca:49:49:24:4c:0e:b5:b6:
                    42:e0:a8:71:b5:88:c4:fe:8e:0e:95:74:08:5f:9e:
                    db:1b:35:6d:cc:b9:2b:01:51:a0:a9:56:dc:a6:68:
                    d7:36:f3:51:ed:b9:c8:bf:b8:34:3c:a3:37:82:e5:
                    fb:dc:1f:23:62:83:40:64:bc:3d:2f:56:99:be:a7:
                    80:a5:f5:80:98:6c:93:97:ec:e2:64:43:73:cb:c0:
                    47:5a:3c:85:72:37:1f:d8:8f:ac:31:4b:26:b0:5c:
                    b3:64:61:11:33:55:bb:f0:8d:95:ab:b5:d2:11:3e:
                    25:03:79:b1:9f:3b:84:a4:60:12:49:d1:4d:0f:07:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D6:5A:45:0B:90:66:7D:56:D4:F7:53:E4:AA:D2:6B:CB:1D:E3:91
            X509v3 Authority Key Identifier:
                keyid:FB:69:29:18:40:0F:03:EA:4A:51:C4:E3:6D:DD:21:BB:B7:ED:9D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/323830343a3836303a3a2f33322d3332203d3e20323632343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:860::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:95:42:87:72:4f:eb:c6:6e:4d:18:f0:0e:11:5f:05:8f:0f:
         b8:9a:08:c7:fe:6e:b7:e2:17:fb:5a:39:2a:ca:39:97:13:ec:
         93:17:d8:f9:11:a7:66:e8:5a:30:27:84:6b:c4:2b:68:da:1d:
         f2:7b:f9:39:a1:fe:eb:af:bf:71:fb:07:23:fe:a6:c9:30:bc:
         39:a0:6e:8e:81:1a:3f:28:d1:4c:dc:45:b7:f7:03:2c:94:f0:
         ec:4f:88:97:a4:a6:91:79:95:8d:d5:e1:72:5b:7b:9b:a6:b7:
         63:af:66:1e:44:ba:e8:4d:83:ed:ed:a0:3b:a9:ef:9f:af:76:
         4a:9a:ff:54:de:6f:00:d2:09:eb:79:b9:ac:d5:e3:c8:c9:e8:
         d3:93:f5:6a:b2:fc:eb:e3:8d:c1:e3:ed:e4:69:82:03:c4:ab:
         ca:39:a0:ff:ac:08:b1:d0:09:25:22:2d:7c:f7:00:f9:e9:92:
         e0:9e:36:c2:f7:d5:76:66:f3:67:2e:be:79:96:44:5b:87:28:
         f9:09:a4:a2:91:70:90:d5:bb:cc:39:f6:bf:28:40:f1:bb:13:
         43:e0:5a:a1:0d:5f:ef:0f:c2:5e:ed:fd:bb:f0:19:6c:4f:96:
         be:20:d0:64:41:bb:d0:99:03:d8:98:75:53:d8:ef:98:61:79:
         54:48:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----