Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a383530303a3a2f34302d3430203d3e203533303138.roa
File:                     323830343a333534633a383530303a3a2f34302d3430203d3e203533303138.roa (raw, json)
Hash identifier:          tSupwfrjhGKkM6yVBiuzPvfAnFaXsAzZYq9QNcrZpS4=
Subject key identifier:   3C:A1:2B:6F:87:0D:A1:0C:91:F4:14:24:01:2F:04:27:64:BC:D6:4E
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       714648CB7F551AD238BDF7AFB15FE46D03083BEB
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a383530303a3a2f34302d3430203d3e203533303138.roa
Signing time:             Fri 08 Mar 2024 19:00:21 +0000
ROA not before:           Fri 08 Mar 2024 18:55:21 +0000
ROA not after:            Fri 07 Mar 2025 19:00:21 +0000
asID:                     53018
IP address blocks:        2804:354c:8500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:46:48:cb:7f:55:1a:d2:38:bd:f7:af:b1:5f:e4:6d:03:08:3b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar  8 18:55:21 2024 GMT
            Not After : Mar  7 19:00:21 2025 GMT
        Subject: CN=3CA12B6F870DA10C91F41424012F042764BCD64E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:7d:43:49:1d:30:df:3c:18:d4:e3:84:61:
                    f9:1e:65:d4:d1:f4:60:21:fe:03:90:d3:17:72:9f:
                    7e:30:7a:f1:72:3f:ed:7c:0f:d8:78:83:60:66:0e:
                    7b:32:c6:72:df:58:d9:a3:da:33:79:22:56:06:81:
                    84:c0:c3:30:92:51:4c:a0:3e:ea:ee:98:c0:a9:d3:
                    ce:d6:38:f4:3a:b6:66:4a:23:ec:88:91:09:2e:17:
                    b3:59:50:9d:ef:99:22:b8:fa:6e:d8:0f:04:5f:ce:
                    ff:68:70:3e:16:a4:f3:2a:52:40:f2:b4:df:ed:ef:
                    78:af:b2:df:8e:03:a9:a8:ed:37:c1:36:d2:6d:27:
                    56:63:78:58:7b:b7:8a:ad:9a:6a:f7:9e:6e:b6:d9:
                    1b:51:4c:80:c4:bb:b2:7b:c1:f6:25:67:ae:f6:93:
                    5f:43:ae:a8:4a:eb:37:d9:1b:68:55:04:4b:3c:b2:
                    50:0d:e7:05:5a:12:1f:19:42:49:fe:1e:67:26:2e:
                    6a:0b:38:ed:ed:eb:05:b9:a5:2f:b2:62:79:50:55:
                    57:87:e4:79:62:bf:47:2a:1a:fd:d7:7f:5f:eb:90:
                    68:a1:78:b9:ab:b3:89:56:a4:97:10:9a:b3:dd:0f:
                    5c:6b:7c:6e:0f:2b:46:ea:33:78:84:1c:e2:e6:b5:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A1:2B:6F:87:0D:A1:0C:91:F4:14:24:01:2F:04:27:64:BC:D6:4E
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a383530303a3a2f34302d3430203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354c:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:2d:be:62:cd:9b:9f:3c:fa:01:58:a1:ea:7b:29:a4:b1:06:
         f1:17:4d:ba:aa:f2:3f:34:cd:8e:9a:39:81:b5:57:4d:a3:56:
         90:e1:10:7f:59:a4:f0:ca:99:e3:b3:b5:8b:43:ac:fa:1a:99:
         d9:4b:d2:3a:5b:6f:7c:36:8a:bc:c5:5b:1b:b7:f1:dd:c1:ec:
         99:09:8c:20:6e:57:81:99:84:d9:38:96:62:a4:6b:87:d4:a3:
         f7:41:a7:27:fc:88:60:be:b5:1f:1a:df:37:6a:f4:22:ff:97:
         32:61:13:8b:b8:92:21:3a:33:08:53:21:13:74:6f:97:95:7d:
         7e:71:47:52:5d:8a:72:17:c3:aa:d1:bd:38:58:c3:2b:be:32:
         3c:33:5d:35:98:d2:25:f6:9a:c9:b5:0e:93:60:9c:74:92:f2:
         89:3b:7b:c2:93:eb:97:6c:fa:62:2a:3b:5d:dd:5e:c9:ac:8d:
         c3:fa:0e:5f:18:89:bb:34:1d:dc:9e:b5:e4:21:50:9a:c8:76:
         b5:0d:85:71:f5:8c:c6:cb:1f:22:d3:31:c8:68:1d:28:c3:30:
         3d:51:9a:3a:e5:22:ac:ad:ab:c2:46:24:36:4c:a2:b8:a4:7f:
         48:a5:63:d3:16:12:d2:35:61:e4:29:7c:ee:03:04:b3:b9:a6:
         a2:5d:0c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----