Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/323830343a336238343a3a2f33322d3438203d3e20323636313534.roa
File:                     323830343a336238343a3a2f33322d3438203d3e20323636313534.roa (raw, json)
Hash identifier:          o6pIi3OaeZzYC0lA6kvpExhLBJBEIp5mWguGihT8duY=
Subject key identifier:   8F:8D:87:CE:2B:C1:BD:5A:06:38:95:2D:58:F7:3D:CE:D9:4C:53:C6
Certificate issuer:       /CN=FEDE3D4062536781E5EF8F9E8CD862890EB9A688
Certificate serial:       0F9FB683CB5CBC76EBC31B3DA379526E359AE03D
Authority key identifier: FE:DE:3D:40:62:53:67:81:E5:EF:8F:9E:8C:D8:62:89:0E:B9:A6:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEDE3D4062536781E5EF8F9E8CD862890EB9A688.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/323830343a336238343a3a2f33322d3438203d3e20323636313534.roa
Signing time:             Tue 12 Mar 2024 12:14:00 +0000
ROA not before:           Tue 12 Mar 2024 12:09:00 +0000
ROA not after:            Tue 11 Mar 2025 12:14:00 +0000
asID:                     266154
IP address blocks:        2804:3b84::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9f:b6:83:cb:5c:bc:76:eb:c3:1b:3d:a3:79:52:6e:35:9a:e0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEDE3D4062536781E5EF8F9E8CD862890EB9A688
        Validity
            Not Before: Mar 12 12:09:00 2024 GMT
            Not After : Mar 11 12:14:00 2025 GMT
        Subject: CN=8F8D87CE2BC1BD5A0638952D58F73DCED94C53C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:ea:27:27:9c:56:e4:9d:16:c5:e5:1e:a4:
                    a7:55:b3:40:cd:0e:74:b5:ff:8d:0e:ba:7b:10:e4:
                    db:9b:17:aa:52:9b:96:e6:c3:5f:d9:ce:f7:d6:b3:
                    a1:fa:8b:a4:a2:8a:42:0b:77:70:90:5f:14:ea:bb:
                    86:22:f0:98:b5:da:e7:40:43:7b:ca:f7:8f:e0:90:
                    53:13:52:42:2c:a6:16:7e:fb:8e:a0:82:01:00:cd:
                    a4:4e:e5:94:82:44:9b:dc:f7:37:f7:69:7b:ed:5e:
                    42:e5:b7:76:8a:28:18:d2:b3:db:c8:5c:08:33:fd:
                    fe:7e:d7:22:ba:db:83:b2:40:5e:5b:3f:0c:da:ee:
                    d2:4c:48:1d:07:c0:97:3f:c0:4d:63:5f:ef:a8:2d:
                    a6:6c:65:59:62:96:b3:ba:2b:87:34:50:0f:47:01:
                    69:94:c2:2b:84:28:4c:11:85:c4:e6:9a:ef:f5:03:
                    79:e2:54:75:41:3d:dc:92:46:2a:d3:8d:b8:fe:91:
                    55:8a:f8:d8:83:c0:94:65:a8:e0:0b:2c:4e:5f:fc:
                    72:7f:fb:80:4f:f8:cf:7d:88:d4:5a:11:d1:1c:f2:
                    15:e0:1b:75:0a:24:22:46:f7:b9:d8:c0:c7:33:64:
                    3e:fa:57:ea:2e:33:b9:2e:bd:a7:bd:ba:14:ad:b9:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8D:87:CE:2B:C1:BD:5A:06:38:95:2D:58:F7:3D:CE:D9:4C:53:C6
            X509v3 Authority Key Identifier:
                keyid:FE:DE:3D:40:62:53:67:81:E5:EF:8F:9E:8C:D8:62:89:0E:B9:A6:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/FEDE3D4062536781E5EF8F9E8CD862890EB9A688.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEDE3D4062536781E5EF8F9E8CD862890EB9A688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/323830343a336238343a3a2f33322d3438203d3e20323636313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:a4:9c:ab:8a:62:d6:a9:67:e8:71:52:32:40:bb:78:0e:eb:
         14:7e:ad:d5:8b:af:f8:c3:e2:04:4d:4e:35:4f:e6:4c:78:43:
         e8:b9:73:9a:c3:eb:37:23:ab:6e:80:51:28:71:07:0c:7b:42:
         fb:02:65:30:e3:85:26:e1:2d:c9:7a:60:49:9e:d4:45:f5:67:
         a0:a2:bd:04:5c:61:62:99:97:23:dd:54:91:3b:55:5c:c3:90:
         e6:bc:9c:81:f9:3b:45:94:b2:46:69:9d:2a:7a:b5:4f:83:d3:
         36:e1:98:1a:dd:dd:46:15:51:11:ca:14:fe:fd:98:75:79:b0:
         19:0c:3c:b1:7b:be:5e:82:d4:1b:2a:ab:44:56:d9:9e:2a:f6:
         ac:c6:18:30:63:09:5e:c2:62:74:b9:c4:9a:e6:9c:02:96:fd:
         31:4a:fb:02:c5:91:d7:14:13:7f:bd:44:b6:e6:22:1d:60:70:
         1b:77:4f:1c:82:92:12:da:ca:05:fc:61:58:11:e6:30:8c:cd:
         d9:ec:50:ae:d6:2a:e2:90:f9:6b:e8:78:5c:40:18:12:0c:5f:
         94:4f:2a:bc:8c:7b:bd:09:72:05:47:1e:94:ee:1a:7b:b6:0b:
         cd:be:94:00:e4:bf:d2:12:f7:34:fa:15:1f:6f:51:ca:14:25:
         55:e6:81:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----