Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/1/323830343a333564343a3a2f33332d3333203d3e20323636333039.roa
File:                     323830343a333564343a3a2f33332d3333203d3e20323636333039.roa (raw, json)
Hash identifier:          pvQl6SjGp1Omad2sdf1VkpO+BHK8qamL8cuXEinKmKg=
Subject key identifier:   03:39:CD:35:77:D7:38:7F:C2:70:12:FD:96:5A:9D:19:01:F0:7C:C3
Certificate issuer:       /CN=7F39C51E813795F38605AAADC5EF070FF0B6EF60
Certificate serial:       3C0033A9E99E081B705559ABCEA40431D234B6E2
Authority key identifier: 7F:39:C5:1E:81:37:95:F3:86:05:AA:AD:C5:EF:07:0F:F0:B6:EF:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F39C51E813795F38605AAADC5EF070FF0B6EF60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/1/323830343a333564343a3a2f33332d3333203d3e20323636333039.roa
Signing time:             Tue 20 Feb 2024 12:50:09 +0000
ROA not before:           Tue 20 Feb 2024 12:45:09 +0000
ROA not after:            Tue 18 Feb 2025 12:50:09 +0000
asID:                     266309
IP address blocks:        2804:35d4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:00:33:a9:e9:9e:08:1b:70:55:59:ab:ce:a4:04:31:d2:34:b6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F39C51E813795F38605AAADC5EF070FF0B6EF60
        Validity
            Not Before: Feb 20 12:45:09 2024 GMT
            Not After : Feb 18 12:50:09 2025 GMT
        Subject: CN=0339CD3577D7387FC27012FD965A9D1901F07CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:61:2b:b1:0c:28:c9:03:ca:38:82:59:52:9c:
                    b8:fc:9f:d1:8a:de:73:42:5a:2c:67:e7:48:08:e1:
                    e7:cb:9a:67:7c:1f:4e:18:03:d3:c2:f9:9a:88:db:
                    e2:2f:21:8f:c6:c2:e9:a1:82:5c:b5:79:2c:75:10:
                    1f:b0:f6:58:f7:ac:cd:2a:89:b7:ae:56:74:b6:f2:
                    48:83:d7:33:01:e8:47:3b:a3:06:2b:ea:c4:70:82:
                    79:38:8a:0c:c6:69:40:10:0b:cb:dc:23:29:44:f4:
                    26:e8:81:ca:1a:f5:cb:59:d8:d3:b5:91:ae:30:d7:
                    fe:00:33:ec:00:41:2f:84:8d:79:00:7a:78:17:0f:
                    6c:f4:59:0b:c5:f0:3c:ac:31:20:38:7a:9e:92:34:
                    70:89:0d:d1:74:25:26:44:d8:0e:36:d1:ea:0c:a5:
                    3e:50:8b:3b:1a:bd:6e:a7:fe:b4:dd:36:56:79:fb:
                    9b:57:6c:d6:2b:59:73:76:b4:7c:44:35:55:c5:3c:
                    47:f3:f5:eb:ef:f4:f0:af:2e:f4:dc:9e:20:bd:64:
                    10:4f:38:7e:07:a6:af:79:46:59:88:3f:de:aa:b8:
                    0e:3e:08:f0:c0:75:1a:62:13:65:bb:58:75:0c:40:
                    12:39:4b:6e:29:7c:e8:6f:08:76:91:55:7a:18:8d:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:39:CD:35:77:D7:38:7F:C2:70:12:FD:96:5A:9D:19:01:F0:7C:C3
            X509v3 Authority Key Identifier:
                keyid:7F:39:C5:1E:81:37:95:F3:86:05:AA:AD:C5:EF:07:0F:F0:B6:EF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/1/7F39C51E813795F38605AAADC5EF070FF0B6EF60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F39C51E813795F38605AAADC5EF070FF0B6EF60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/1/323830343a333564343a3a2f33332d3333203d3e20323636333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         b2:f2:e2:52:65:9a:49:e8:b7:20:03:f8:98:6f:ac:44:f7:5d:
         8a:14:22:05:d4:2b:58:fe:c3:37:4e:89:cc:6d:ad:47:fe:4d:
         47:c6:4c:23:c8:fe:6a:e6:89:a6:cf:9e:71:cb:e2:40:ee:7c:
         a4:29:58:35:17:32:99:85:5d:fb:d8:eb:d2:ae:4e:ed:b3:fa:
         d5:40:bf:8f:7e:cc:a7:4d:bf:55:21:ff:29:32:06:d5:a4:81:
         6e:5f:1f:f0:4e:f4:ea:dd:3f:48:1e:e0:d1:a3:bf:4b:b2:3e:
         10:0c:29:eb:e2:91:8b:1d:2a:5d:75:3a:c1:70:ef:6d:2a:4e:
         8d:60:27:be:d3:2c:ed:83:45:40:ea:3a:29:41:f1:d0:83:9c:
         66:bb:3b:66:47:4d:07:b1:35:8b:ad:3b:ea:d7:e7:cb:f3:07:
         92:6f:34:bf:2f:27:6e:10:24:5b:75:bb:de:f3:30:a7:52:5a:
         18:a3:d4:fb:0e:5b:dd:ee:e8:67:1d:6b:29:33:21:a4:7a:0a:
         8b:c7:e0:2e:10:b5:73:1a:ff:34:27:94:75:25:17:f2:d3:5f:
         1e:9a:c8:78:e6:47:ee:36:79:d1:e1:5c:78:57:ed:93:b2:31:
         7b:10:e2:9c:7e:41:ac:f7:1e:7c:3c:b1:47:4a:4c:e3:5b:f2:
         08:12:1a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----