Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/323830343a316263343a3a2f33322d3332203d3e203631373438.roa
File:                     323830343a316263343a3a2f33322d3332203d3e203631373438.roa (raw, json)
Hash identifier:          CxQNw9ELHZu6RmTYMvvVp3xJqkM4k0YbPcB0HLawAU4=
Subject key identifier:   25:A6:7D:E4:80:91:DB:C7:49:34:5B:3B:FD:53:B5:77:76:72:2B:0B
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       621D15BE48525321A163E61092B41A2251793C1B
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/323830343a316263343a3a2f33322d3332203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:18:34 +0000
ROA not before:           Wed 10 Apr 2024 19:13:34 +0000
ROA not after:            Wed 09 Apr 2025 19:18:34 +0000
asID:                     61748
IP address blocks:        2804:1bc4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1d:15:be:48:52:53:21:a1:63:e6:10:92:b4:1a:22:51:79:3c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:13:34 2024 GMT
            Not After : Apr  9 19:18:34 2025 GMT
        Subject: CN=25A67DE48091DBC749345B3BFD53B57776722B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:56:15:82:eb:4a:07:dc:b1:cf:f0:ce:d7:40:
                    03:62:4c:38:50:8c:49:a4:3c:ca:33:b5:d2:5c:7c:
                    7b:83:7e:9c:f7:6c:8a:95:fa:ce:42:86:ba:1a:04:
                    ef:a5:42:46:73:42:e5:ed:f8:f5:e0:fa:6e:8d:3c:
                    d0:7c:c0:a3:0e:5a:87:28:a4:11:c7:5b:c9:be:90:
                    37:3b:a1:ff:5c:6a:72:e7:48:d1:70:96:87:df:88:
                    95:ef:6a:5e:c9:00:56:88:a5:fd:f8:69:ac:df:a9:
                    de:74:31:a6:99:cc:f9:3c:aa:d0:09:6e:cf:0e:0d:
                    1e:73:d0:02:d4:1c:42:ab:40:00:5b:8a:47:08:2a:
                    5a:5f:88:15:9b:e4:42:09:52:26:3c:7b:53:06:20:
                    16:f3:dc:f7:68:e6:db:89:d6:c6:b4:e0:25:28:26:
                    e5:82:26:ee:23:4a:25:18:65:de:10:0a:7a:11:e6:
                    a4:01:fd:3a:f7:b3:03:c1:96:b6:7f:3c:1e:53:2c:
                    1f:68:8d:5c:a7:be:17:01:b9:84:61:19:eb:54:d3:
                    9c:89:6c:29:bf:61:8b:ce:77:7b:6b:92:bc:0e:63:
                    49:4d:a4:30:da:91:ed:23:30:d7:07:57:05:b0:d2:
                    ec:da:86:04:3e:41:d0:6a:9e:76:4e:04:90:b0:01:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A6:7D:E4:80:91:DB:C7:49:34:5B:3B:FD:53:B5:77:76:72:2B:0B
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/323830343a316263343a3a2f33322d3332203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:23:cf:fc:db:24:3c:9c:c4:8e:fe:76:a6:e2:83:db:f0:b9:
         47:bf:6e:1f:4b:c9:19:06:67:df:89:5d:a8:28:fd:4b:67:e4:
         94:05:09:ee:2c:aa:d3:ea:3c:32:3a:df:8d:10:a8:b2:09:00:
         b5:36:83:20:95:56:d0:ec:cc:2d:3c:3b:e1:dc:8a:c3:10:22:
         0b:03:4f:e3:46:69:6d:81:f4:43:26:f4:f8:e2:c9:a6:24:cc:
         c1:4f:70:dc:52:4a:af:9e:b7:72:9e:47:8b:d6:37:ee:6a:ae:
         4c:9f:fd:3b:5a:bc:97:36:f5:4c:db:57:ce:28:43:75:fb:e6:
         07:71:90:e1:a1:a1:d3:e5:86:bd:63:65:40:b9:83:b0:f2:71:
         d5:0e:e0:de:50:55:2a:88:db:5d:90:0b:57:79:44:b3:b8:ba:
         d1:8a:c4:af:8e:77:f3:d5:39:2e:ca:b6:71:eb:b6:c3:40:66:
         8e:71:0a:f2:53:18:c0:0d:7f:73:0c:1a:ab:82:13:13:1b:ed:
         95:16:60:30:bf:f0:e3:5e:1b:da:7d:0c:7f:1c:e3:1e:d4:46:
         45:a1:35:80:e6:9e:91:92:da:df:76:39:0e:d6:57:6d:35:9a:
         18:8e:dd:21:6a:2f:4f:97:b7:64:37:f2:ef:d2:0d:21:c2:78:
         a7:7f:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----