Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/323830343a366536343a3a2f33322d3430203d3e20323730353934.roa
File:                     323830343a366536343a3a2f33322d3430203d3e20323730353934.roa (raw, json)
Hash identifier:          C4k1cWihRPycwMGAcTbK3TVb6Xni/MSXoHGzTeKKmhM=
Subject key identifier:   69:49:CA:F4:4A:2E:BD:A0:A3:E4:93:64:D2:42:8D:B1:EF:61:D6:AB
Certificate issuer:       /CN=FBCE40180F6E820F31920824D82B285CF0E32992
Certificate serial:       3307F1578D64EC0D28563B60BB8644360D3CDF3D
Authority key identifier: FB:CE:40:18:0F:6E:82:0F:31:92:08:24:D8:2B:28:5C:F0:E3:29:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBCE40180F6E820F31920824D82B285CF0E32992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/323830343a366536343a3a2f33322d3430203d3e20323730353934.roa
Signing time:             Wed 17 May 2023 14:28:14 +0000
ROA not before:           Wed 17 May 2023 14:23:14 +0000
ROA not after:            Wed 15 May 2024 14:28:14 +0000
asID:                     270594
IP address blocks:        2804:6e64::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:07:f1:57:8d:64:ec:0d:28:56:3b:60:bb:86:44:36:0d:3c:df:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCE40180F6E820F31920824D82B285CF0E32992
        Validity
            Not Before: May 17 14:23:14 2023 GMT
            Not After : May 15 14:28:14 2024 GMT
        Subject: CN=6949CAF44A2EBDA0A3E49364D2428DB1EF61D6AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:81:9a:29:75:fb:99:3f:dd:43:3f:78:ac:
                    0d:02:cf:e0:13:22:fb:80:98:11:f3:d2:83:de:99:
                    54:6d:28:c4:67:64:49:a8:89:4e:aa:4a:4c:aa:d7:
                    ea:ef:9d:78:c6:40:80:48:55:bd:a7:6c:ca:66:10:
                    02:02:5f:86:7a:56:a8:71:69:8b:4a:73:d0:10:79:
                    8d:14:53:91:b9:f2:6b:c4:ed:24:64:18:5c:2d:b3:
                    d6:86:7c:0f:fd:de:96:8a:a0:a6:eb:bf:d5:99:22:
                    b5:ed:8c:de:b9:a3:51:8e:51:d8:ca:f5:2c:e4:f6:
                    ad:5a:7f:26:74:d1:f1:69:8d:ab:3a:69:df:86:57:
                    8b:2e:d3:c4:1c:4e:f9:7d:8d:69:7b:d9:15:ae:29:
                    7b:2a:b3:32:ef:a4:df:c9:13:e8:dc:d9:ee:1b:48:
                    e9:4a:88:59:e3:b1:51:09:3f:88:73:6f:56:1f:81:
                    be:3a:08:f1:bb:11:1e:39:18:79:0c:28:b0:6a:27:
                    c7:d9:c3:c4:91:92:5d:f2:e3:38:ff:0c:5f:8b:5b:
                    af:6a:d6:27:ab:2a:50:71:1c:99:84:82:dd:f0:77:
                    54:52:3d:21:d3:2e:5d:dc:e1:74:23:0a:6b:0a:e7:
                    a2:6d:a9:9a:9b:83:6b:9d:99:cc:0f:23:99:f1:ca:
                    b3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:49:CA:F4:4A:2E:BD:A0:A3:E4:93:64:D2:42:8D:B1:EF:61:D6:AB
            X509v3 Authority Key Identifier:
                keyid:FB:CE:40:18:0F:6E:82:0F:31:92:08:24:D8:2B:28:5C:F0:E3:29:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/FBCE40180F6E820F31920824D82B285CF0E32992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBCE40180F6E820F31920824D82B285CF0E32992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/323830343a366536343a3a2f33322d3430203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e64::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:a4:a3:39:8b:5c:0d:18:a1:e0:42:30:f7:d8:fc:d7:48:45:
         db:6d:1a:96:6b:7c:88:b3:c4:f5:99:29:2c:82:81:9e:24:55:
         25:25:3f:2f:81:af:3f:af:08:6c:71:8f:86:64:e2:0f:14:1a:
         fb:7a:0b:21:28:b9:96:f2:04:69:ff:4a:bf:60:8a:41:cf:8a:
         f8:e4:4c:00:7f:63:3b:cc:5b:2d:1d:4a:30:16:8a:f2:e1:36:
         0a:a0:1b:9b:b1:b9:fc:76:16:9d:2f:f7:02:82:9f:17:1b:d1:
         bc:fc:86:62:38:82:3e:54:63:49:79:6a:ed:e2:e4:6d:63:a3:
         19:14:ac:95:54:dd:a5:48:8d:53:e9:ba:5c:b1:51:4a:d5:9b:
         7b:30:13:cd:5e:3b:d6:15:0e:66:57:1f:50:f7:f8:01:26:73:
         97:35:cf:84:af:d5:cc:9f:76:c0:33:0e:ea:2a:b1:36:bf:11:
         17:ff:a9:3d:f5:e3:ea:01:0d:00:cb:0e:c5:8c:be:55:ed:13:
         60:68:2a:9b:cc:2d:3e:92:02:97:d5:d3:52:14:6a:8c:9b:77:
         53:f0:f1:43:76:e5:c6:02:f3:eb:f1:2f:66:0b:08:95:79:a6:
         19:14:56:81:45:be:0c:10:38:77:77:f6:91:72:a3:b2:20:54:
         3d:8f:e9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----