Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/323830343a373836383a3a2f33322d3438203d3e20323731323430.roa
File:                     323830343a373836383a3a2f33322d3438203d3e20323731323430.roa (raw, json)
Hash identifier:          yh/gdIshn9jv9M3OL67sPhiMKoNCnd+XzpN8fNw8nRI=
Subject key identifier:   D1:61:06:F4:05:68:A4:40:60:FE:9D:23:44:38:EA:F7:4C:06:11:0B
Certificate issuer:       /CN=2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3
Certificate serial:       68AD31762439B72FD243A7CBCC1FE33E05593D65
Authority key identifier: 2F:70:AB:1A:AC:5B:BF:95:C0:B3:D0:60:9E:BA:8F:B6:66:8F:B3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/323830343a373836383a3a2f33322d3438203d3e20323731323430.roa
Signing time:             Tue 02 Apr 2024 18:21:22 +0000
ROA not before:           Tue 02 Apr 2024 18:16:22 +0000
ROA not after:            Tue 01 Apr 2025 18:21:22 +0000
asID:                     271240
IP address blocks:        2804:7868::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ad:31:76:24:39:b7:2f:d2:43:a7:cb:cc:1f:e3:3e:05:59:3d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3
        Validity
            Not Before: Apr  2 18:16:22 2024 GMT
            Not After : Apr  1 18:21:22 2025 GMT
        Subject: CN=D16106F40568A44060FE9D234438EAF74C06110B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:57:cb:0a:a9:cc:a1:d0:90:56:cf:00:bf:
                    d8:48:5c:da:10:dc:a5:fb:38:0d:c7:8f:73:55:f3:
                    30:13:1d:83:06:77:a3:0b:06:a4:39:dc:43:fd:15:
                    13:89:e6:95:0c:7f:f3:31:d4:3c:17:9b:0f:2d:77:
                    f3:5b:64:bb:c3:e6:81:00:d7:f8:5a:5a:2f:92:97:
                    06:1f:ea:12:d4:24:d0:5c:2f:4d:e8:7a:20:b2:a8:
                    89:b5:fb:26:7d:c0:6c:59:9c:4a:d7:eb:1b:ed:83:
                    10:7f:53:d4:8e:93:2b:91:d3:9c:09:54:e1:3b:b8:
                    e5:d7:fc:37:38:6a:6b:0d:4c:46:94:6e:40:18:1e:
                    e5:a6:24:36:41:8e:ce:66:76:a0:44:f8:ed:40:37:
                    b2:69:b9:e3:a7:a9:93:d8:c9:1c:34:3b:4b:79:ad:
                    5a:aa:d3:c6:07:12:5c:b4:c4:67:f4:0a:ff:32:de:
                    ed:0f:60:b2:03:65:d9:39:e9:cf:1d:64:61:cd:55:
                    9f:d5:fc:71:8a:ec:8a:42:3d:1c:35:ff:be:6a:09:
                    f3:65:a5:8e:5a:03:cb:f6:8b:b7:11:af:53:92:c8:
                    28:82:fc:96:f4:b6:86:71:9d:72:4f:21:16:01:f8:
                    ee:11:a7:63:5d:49:ab:f0:0f:6a:2c:d3:e3:f9:f4:
                    52:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:61:06:F4:05:68:A4:40:60:FE:9D:23:44:38:EA:F7:4C:06:11:0B
            X509v3 Authority Key Identifier:
                keyid:2F:70:AB:1A:AC:5B:BF:95:C0:B3:D0:60:9E:BA:8F:B6:66:8F:B3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/323830343a373836383a3a2f33322d3438203d3e20323731323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7868::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:2c:46:2d:0c:9b:b4:50:fb:9a:0a:95:e7:6d:25:ca:d6:f5:
         c9:22:6d:75:89:7d:ea:89:ff:71:66:9c:fa:f8:ff:a7:99:76:
         d8:f9:51:f1:11:ff:e1:66:06:55:20:22:5c:11:00:4a:cc:bf:
         db:5a:ea:b9:2f:b2:85:ad:9d:f9:57:aa:2d:a9:71:9c:a9:06:
         97:ae:44:04:ac:96:9d:cc:26:05:3d:a9:d6:0c:cf:de:21:4b:
         ab:18:32:04:b2:23:46:b8:0b:82:dc:ef:66:fb:73:08:4d:0a:
         81:d3:80:de:ae:65:fc:43:53:1f:25:58:58:f1:a3:c1:f9:2b:
         f3:91:96:31:e2:59:83:22:1b:5a:5b:fd:f4:91:f2:09:df:36:
         15:60:af:03:bf:8e:5e:f5:58:6b:a5:04:dc:2f:c6:de:8f:4f:
         50:bb:91:3a:12:9b:b7:89:91:54:88:6e:bf:9e:6f:5b:98:c4:
         d5:ba:82:e7:56:f7:f1:e2:de:1a:ec:7b:96:84:b9:49:8d:95:
         82:e2:e7:06:6f:b2:15:8c:f3:7e:9d:49:1b:33:15:83:f1:3e:
         b8:4b:c0:59:5a:dc:44:10:cd:7c:78:36:c8:b6:a8:a0:d8:7f:
         94:bb:b5:d0:02:98:82:09:50:bf:c9:9e:93:99:43:c8:01:7a:
         b5:a4:dd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----