Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/323830343a3138343a383030303a3a2f33332d3333203d3e20323632373439.roa
File:                     323830343a3138343a383030303a3a2f33332d3333203d3e20323632373439.roa (raw, json)
Hash identifier:          URET221S560wN+awd+zoIu2mVa7xRxjFEbC1n5VDER4=
Subject key identifier:   0A:08:8F:F4:09:F9:FC:36:89:CE:4F:11:B5:4D:50:D8:74:BA:34:B2
Certificate issuer:       /CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
Certificate serial:       1D46091F4857625AC0F386AA64E8EA451AB4316A
Authority key identifier: 03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/323830343a3138343a383030303a3a2f33332d3333203d3e20323632373439.roa
Signing time:             Wed 21 Feb 2024 14:00:20 +0000
ROA not before:           Wed 21 Feb 2024 13:55:20 +0000
ROA not after:            Wed 19 Feb 2025 14:00:20 +0000
asID:                     262749
IP address blocks:        2804:184:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:46:09:1f:48:57:62:5a:c0:f3:86:aa:64:e8:ea:45:1a:b4:31:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
        Validity
            Not Before: Feb 21 13:55:20 2024 GMT
            Not After : Feb 19 14:00:20 2025 GMT
        Subject: CN=0A088FF409F9FC3689CE4F11B54D50D874BA34B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:ab:0e:2c:8f:60:55:0f:d0:a6:2a:7b:c8:
                    ae:0f:49:0e:6b:1f:3d:ba:e3:90:c3:c8:06:0d:77:
                    70:97:53:ea:a9:85:37:c0:1f:a2:15:7d:e2:97:a0:
                    81:f2:3a:a6:6c:da:c5:85:fb:68:f5:d6:9e:75:19:
                    d6:0b:b9:4e:88:5a:f3:12:62:7d:79:45:0d:48:74:
                    bc:24:59:5c:81:fe:4e:ed:24:3e:20:57:5c:35:a7:
                    77:4e:92:5b:3e:c8:07:98:0d:ea:eb:7e:11:4b:62:
                    7c:85:2e:42:9e:3d:a0:a5:ce:87:15:2c:8e:da:ef:
                    c6:33:d2:4d:ca:27:1c:c7:80:4f:b8:63:b1:62:7f:
                    d9:87:ae:8e:87:e3:27:1f:69:25:65:f9:1a:ba:e8:
                    18:13:f0:ec:06:90:5f:2f:c2:06:fe:fe:0d:d7:d0:
                    a8:fe:ca:61:a3:cd:33:d9:3f:b5:6c:1e:5a:e0:cb:
                    6a:7c:73:4a:1c:f4:b1:06:bc:91:58:ee:1c:b7:04:
                    05:e4:62:77:ee:b4:10:c3:eb:79:7f:03:f5:e1:f3:
                    2e:4b:e2:0b:9a:a1:6b:b7:09:28:fa:c8:85:c9:c9:
                    39:9c:42:8d:ee:e5:2c:09:41:32:b1:04:06:07:a3:
                    61:6c:d6:b9:c4:53:c7:d3:c9:7e:25:83:c1:2e:89:
                    72:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:08:8F:F4:09:F9:FC:36:89:CE:4F:11:B5:4D:50:D8:74:BA:34:B2
            X509v3 Authority Key Identifier:
                keyid:03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/323830343a3138343a383030303a3a2f33332d3333203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:184:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:41:c3:3c:3f:63:7f:94:ae:8d:e4:82:5e:41:97:98:5f:
         6e:a8:7d:94:a6:ae:b5:67:81:80:de:1c:54:e2:cb:94:93:3d:
         68:f3:f5:23:f2:04:a1:e7:26:cc:0d:d1:26:40:7e:4d:4b:8e:
         5f:47:34:61:23:5c:5d:1d:8a:3a:69:65:cf:cb:d1:84:f8:97:
         d2:dd:18:83:a0:f9:c4:39:a9:bb:7f:33:c9:14:a9:ee:e0:31:
         5b:2f:62:65:58:ea:a3:05:39:62:3b:b8:1d:3f:0a:db:bc:05:
         98:7c:c0:26:46:a4:9a:8a:bb:6a:fa:9b:e3:59:34:c8:75:96:
         e5:76:17:dd:55:20:12:de:c2:bb:d2:96:fd:0d:77:ec:c9:d2:
         d3:b4:4d:80:98:cc:b9:fe:ad:40:74:fd:d9:08:ed:82:27:a5:
         ef:f7:4f:86:38:f5:03:1a:e1:53:22:20:d8:ba:91:ee:40:94:
         25:1e:c5:62:76:e0:53:dc:73:93:09:2a:c0:b6:40:eb:4c:bf:
         dd:cd:69:bf:c4:4a:6a:41:58:77:ad:22:58:dd:14:b5:f2:19:
         b5:86:55:9f:6e:b2:8d:ae:cd:3e:ad:76:79:6a:4b:af:a9:de:
         06:c2:ee:f1:32:de:4f:fe:39:b3:f9:48:e5:b8:00:97:1c:96:
         da:d9:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----