Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a383030303a3a2f33332d3333203d3e20323633363034.roa
File:                     323830343a6663633a383030303a3a2f33332d3333203d3e20323633363034.roa (raw, json)
Hash identifier:          b2Zm2MYgr+5Auk+hgjYxdVatUAo8I8UY9WWoisvhfm4=
Subject key identifier:   56:BB:FA:74:E0:A8:C3:C8:C3:9C:D1:33:FF:DC:B4:C3:17:85:C9:BD
Certificate issuer:       /CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
Certificate serial:       329548323E4D8294F34B04998808B7948BF3AB15
Authority key identifier: 49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a383030303a3a2f33332d3333203d3e20323633363034.roa
Signing time:             Tue 19 Dec 2023 17:10:16 +0000
ROA not before:           Tue 19 Dec 2023 17:05:16 +0000
ROA not after:            Tue 17 Dec 2024 17:10:16 +0000
asID:                     263604
IP address blocks:        2804:fcc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:95:48:32:3e:4d:82:94:f3:4b:04:99:88:08:b7:94:8b:f3:ab:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
        Validity
            Not Before: Dec 19 17:05:16 2023 GMT
            Not After : Dec 17 17:10:16 2024 GMT
        Subject: CN=56BBFA74E0A8C3C8C39CD133FFDCB4C31785C9BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:04:7a:ca:18:4e:13:d4:73:da:3a:9b:98:
                    d4:a8:d8:8e:ff:ed:7e:2c:37:fc:e1:ab:42:ba:11:
                    a0:fb:c8:4c:63:98:37:54:9c:8b:68:51:f9:89:17:
                    19:33:52:26:ab:c0:98:2a:93:a6:2d:b7:32:08:e4:
                    40:c7:39:61:eb:f8:a9:36:63:a0:9d:32:5d:3d:5d:
                    9b:75:f7:7e:e5:ce:c2:54:e7:11:32:64:df:de:9d:
                    45:56:16:db:2c:0a:40:87:5f:82:40:af:32:45:b1:
                    68:06:3f:01:3e:fe:42:17:d0:a5:cf:0c:7f:7c:2b:
                    f2:23:44:4f:47:bf:0d:f8:2a:3e:e0:63:2d:3d:03:
                    d7:98:95:a1:8a:07:b9:74:05:0b:6c:dd:f5:b4:0d:
                    e3:55:79:38:e7:23:13:c0:ff:5a:43:99:ba:63:72:
                    9c:e0:48:2f:45:25:23:5f:a9:bc:d6:84:4a:de:a5:
                    0d:8f:94:95:f0:91:3a:c9:4d:37:c2:79:15:92:bb:
                    e2:aa:ea:0e:92:b6:08:3b:4c:86:58:77:6e:cc:8f:
                    df:3f:6b:d7:34:2c:86:f3:a5:67:b1:b5:11:21:c4:
                    de:77:eb:0b:92:ab:fe:6f:d0:bc:38:42:85:43:b2:
                    14:70:91:34:f5:b0:37:ff:9d:b3:d6:93:b3:10:4d:
                    fc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BB:FA:74:E0:A8:C3:C8:C3:9C:D1:33:FF:DC:B4:C3:17:85:C9:BD
            X509v3 Authority Key Identifier:
                keyid:49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a383030303a3a2f33332d3333203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fcc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2e:17:9a:72:35:cc:4f:c2:b0:5a:55:15:20:48:d3:71:f0:e4:
         39:2e:a3:25:2b:f9:99:85:50:cd:a2:fe:ab:d4:ff:a3:35:83:
         c0:ea:ec:00:26:22:06:16:99:3e:a4:2d:ea:b8:67:98:a5:07:
         9e:9a:3e:2f:8a:96:2d:1d:58:af:c7:e1:f6:ef:95:7a:f1:db:
         e0:59:85:2e:cc:67:26:dd:5f:22:d4:43:5f:5f:0c:36:b6:b2:
         e4:33:1a:50:a2:29:f3:55:19:f5:83:3c:8d:1c:a4:cc:49:34:
         ec:a6:8c:44:b6:1a:96:b3:56:b1:92:52:4c:75:9f:d1:0b:82:
         d4:a3:e3:18:0c:b3:e6:33:4f:c1:ca:1d:b2:bc:06:dc:09:35:
         cc:7b:23:8d:b7:50:5f:31:2c:00:43:37:0e:3d:bd:04:13:25:
         8f:4d:f6:4c:37:f5:f6:76:0a:32:b3:96:9e:b9:72:45:42:6d:
         a2:3b:95:0c:1d:01:d0:dc:ac:22:b6:1f:df:31:29:f7:5b:6e:
         d9:fd:66:cc:02:8c:79:5d:66:6a:13:2c:ea:83:fe:30:81:15:
         b0:91:85:ce:10:db:1e:a3:ca:95:18:45:d0:0c:b8:ca:33:3d:
         8a:dc:d8:d6:81:81:c8:27:f0:de:1b:c1:c4:1f:2c:d7:ec:1d:
         f8:e0:a2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----