Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/323830343a323366343a3a2f33322d3438203d3e20323634313933.roa
File:                     323830343a323366343a3a2f33322d3438203d3e20323634313933.roa (raw, json)
Hash identifier:          4CmBfX5MY74bevj9VevN6bP1iGqm2gD8LZZOYVoQJLA=
Subject key identifier:   BF:C0:98:99:FC:0B:5E:33:59:9E:75:1F:D0:32:CD:75:09:2D:85:AA
Certificate issuer:       /CN=DC13A6C4AE68B902CF647C91547B88EF9E2B6738
Certificate serial:       13AF313AAC603173CBF68540C675B69782755BA0
Authority key identifier: DC:13:A6:C4:AE:68:B9:02:CF:64:7C:91:54:7B:88:EF:9E:2B:67:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/323830343a323366343a3a2f33322d3438203d3e20323634313933.roa
Signing time:             Wed 14 Feb 2024 20:28:46 +0000
ROA not before:           Wed 14 Feb 2024 20:23:46 +0000
ROA not after:            Wed 12 Feb 2025 20:28:46 +0000
asID:                     264193
IP address blocks:        2804:23f4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:af:31:3a:ac:60:31:73:cb:f6:85:40:c6:75:b6:97:82:75:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC13A6C4AE68B902CF647C91547B88EF9E2B6738
        Validity
            Not Before: Feb 14 20:23:46 2024 GMT
            Not After : Feb 12 20:28:46 2025 GMT
        Subject: CN=BFC09899FC0B5E33599E751FD032CD75092D85AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fd:8d:fb:50:b4:83:a0:b8:a4:73:f1:81:aa:
                    2b:bd:39:12:80:fb:06:e7:17:37:3b:9f:09:b4:04:
                    ad:e7:19:78:26:3a:c0:41:c5:1b:59:e2:b0:ec:11:
                    e3:2c:32:cb:d7:bc:67:6f:4c:b7:95:23:07:7f:b7:
                    ca:fe:50:26:8b:67:9e:44:ed:ae:6d:f3:a6:65:b2:
                    bf:54:d7:a5:8d:fb:c0:a8:b9:ae:c0:56:d3:d5:bf:
                    b3:8a:87:df:0b:62:53:79:cf:95:ad:b9:99:a4:07:
                    e5:d9:13:dd:66:66:fa:d1:3a:5b:ed:c4:21:49:46:
                    18:94:85:4f:3f:c8:cf:1f:7e:79:bc:40:49:e1:2b:
                    2f:7d:1c:15:57:48:92:77:4c:90:8f:9d:e3:e8:a4:
                    9c:ab:08:e4:9e:5a:21:18:c7:f2:2b:26:cb:29:e1:
                    1c:99:36:21:62:ad:f7:50:a9:cb:51:b0:bb:1a:ca:
                    56:32:73:cd:58:bb:cf:6c:d4:47:4a:ba:8a:a7:46:
                    75:9e:68:0a:86:32:be:02:c4:c5:d2:2d:d7:52:94:
                    88:2e:a7:f7:2b:d9:75:e7:a8:4c:71:6b:fd:da:00:
                    f7:11:23:65:a9:dd:1a:4e:33:d5:92:a4:fd:e7:fe:
                    c1:54:91:1a:cc:18:ad:6a:50:f2:a3:22:81:9b:9f:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C0:98:99:FC:0B:5E:33:59:9E:75:1F:D0:32:CD:75:09:2D:85:AA
            X509v3 Authority Key Identifier:
                keyid:DC:13:A6:C4:AE:68:B9:02:CF:64:7C:91:54:7B:88:EF:9E:2B:67:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/323830343a323366343a3a2f33322d3438203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:77:84:76:90:fc:79:47:24:cd:4b:27:d5:79:1c:ec:f3:e4:
         be:72:e6:10:bc:e4:4f:c1:5a:07:88:37:7f:33:44:5e:38:8c:
         18:8c:e8:09:e8:81:c6:a3:5a:e9:1d:4d:26:22:13:34:4d:f7:
         a9:b1:fb:9b:54:3d:b4:66:a3:21:bf:25:a4:52:9e:c3:9f:b0:
         7d:0a:d1:c4:91:99:c0:be:67:62:b9:77:79:8f:0e:0b:ca:1d:
         dc:56:98:ca:fd:28:ca:3e:9d:66:d6:26:60:8b:94:24:9e:e6:
         99:c1:26:1d:d8:96:b1:dd:a1:ed:d4:e0:13:40:07:ee:00:fe:
         55:d2:48:12:c2:75:07:99:3a:ae:bb:96:f8:0b:83:53:e9:43:
         e2:c4:4c:b8:1a:e6:f7:46:1b:52:66:b8:97:41:6f:d8:ee:f0:
         6d:ff:38:c5:f7:76:83:7d:5a:6e:38:ad:ff:42:23:a1:b6:99:
         68:5e:b4:2a:54:6b:c7:48:5b:9e:fa:82:44:a2:a3:78:5e:6f:
         12:46:13:3a:be:8d:b8:71:87:80:e3:e2:a4:f3:1f:a1:c3:f4:
         97:58:dd:0f:b2:1f:68:0c:61:17:ab:b5:c3:36:41:21:72:aa:
         c7:54:b9:68:27:4f:de:e1:65:18:bd:3a:30:12:18:e4:f5:98:
         65:bf:d0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----