Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33322d3332203d3e20323637333935.roa
File:                     323830343a346364343a3a2f33322d3332203d3e20323637333935.roa (raw, json)
Hash identifier:          sr1gnNIFYGLqQV5jLhRMGIqIbiysHZ00rmKUkozyoiA=
Subject key identifier:   9E:60:96:50:56:C3:72:9D:D0:FD:67:34:BC:9F:4B:D4:17:AB:16:9E
Certificate issuer:       /CN=FCC7A10CD64B84116220258C164688796EE17437
Certificate serial:       264AC888721FE25B540CFA0D83ECE014E52B743D
Authority key identifier: FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33322d3332203d3e20323637333935.roa
Signing time:             Thu 15 Feb 2024 13:48:04 +0000
ROA not before:           Thu 15 Feb 2024 13:43:04 +0000
ROA not after:            Thu 13 Feb 2025 13:48:04 +0000
asID:                     267395
IP address blocks:        2804:4cd4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4a:c8:88:72:1f:e2:5b:54:0c:fa:0d:83:ec:e0:14:e5:2b:74:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCC7A10CD64B84116220258C164688796EE17437
        Validity
            Not Before: Feb 15 13:43:04 2024 GMT
            Not After : Feb 13 13:48:04 2025 GMT
        Subject: CN=9E60965056C3729DD0FD6734BC9F4BD417AB169E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:6c:80:be:58:48:e8:c3:fa:06:10:54:b0:
                    93:9f:8b:56:8a:22:8d:ed:3a:b9:20:89:36:ae:b3:
                    8e:12:e8:93:c2:9d:77:3c:92:06:ed:7f:85:eb:88:
                    5e:ac:c3:62:75:77:42:1f:79:97:53:67:1f:e2:94:
                    8b:78:13:87:0f:99:e1:dd:1f:d9:2b:a3:e2:f5:f2:
                    7c:b5:3a:da:1e:d0:26:81:e5:ac:47:58:f7:39:1e:
                    5f:04:6f:50:e9:40:23:9b:b9:12:6b:dd:0c:ad:5b:
                    2f:58:7c:5f:04:d8:b9:ca:8d:02:94:ac:27:f3:fe:
                    9a:3e:cf:79:4e:09:3e:d1:42:c7:b3:81:88:a1:6f:
                    76:70:e2:d7:ca:54:69:2b:f9:43:e2:81:2c:51:f6:
                    32:bc:03:ee:8b:f5:17:60:4c:8b:41:e5:b4:55:04:
                    19:1a:12:31:24:c4:31:f6:b1:8b:ae:f0:8e:8e:bd:
                    c6:64:3c:69:2e:eb:3b:b5:a3:b4:37:47:c2:e8:c8:
                    2e:5d:21:f0:eb:b5:20:ad:07:6b:75:7d:8a:4e:53:
                    9d:cd:2f:91:8f:2e:8a:c0:d2:9c:8a:fc:de:e2:56:
                    4c:b5:72:06:95:66:64:57:ec:67:61:d7:e1:c8:df:
                    de:d6:00:4f:a8:e0:b3:17:50:cc:c7:44:09:83:50:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:60:96:50:56:C3:72:9D:D0:FD:67:34:BC:9F:4B:D4:17:AB:16:9E
            X509v3 Authority Key Identifier:
                keyid:FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/FCC7A10CD64B84116220258C164688796EE17437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33322d3332203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:46:b1:4e:19:76:ca:e1:0e:3a:3f:cc:86:b0:2f:5d:31:9b:
         3e:b5:99:3c:8d:20:cd:12:56:56:55:e8:ed:55:97:83:b0:29:
         b5:c5:86:60:6a:c9:36:7d:c4:88:f3:f9:37:6a:85:68:3f:3f:
         a2:45:08:24:bc:ea:60:ab:b6:b4:92:37:f6:3d:f1:ac:fe:9c:
         74:eb:26:04:13:05:e5:9b:f6:f1:0e:e4:5e:f3:67:45:3b:7e:
         ac:2e:4e:7e:64:78:8b:fe:ec:41:f4:a7:5a:ba:42:fa:67:34:
         69:c4:74:d1:eb:f6:11:38:3e:11:0c:bb:49:fa:a0:0b:70:bd:
         61:f0:72:31:f8:a4:d5:a4:6f:06:e0:9a:32:0e:5d:99:3f:da:
         c7:0b:c3:0c:c8:6e:25:1b:1b:40:98:6b:6b:1c:fc:f5:9a:c1:
         4b:50:9c:bd:a6:44:61:28:3c:e9:15:e4:1c:28:2b:9f:fe:2a:
         3d:bf:61:92:c9:75:18:f4:cb:1d:f5:de:1e:e5:28:01:4f:1f:
         4e:60:2b:be:5e:e2:a7:5e:d3:e8:73:55:2c:89:d5:a2:cd:03:
         56:ec:e6:50:32:64:92:87:6b:0f:ec:8d:8b:d8:4b:63:5d:17:
         84:32:bc:05:a2:f5:f8:03:54:92:a4:25:a7:66:8f:ed:a4:35:
         c3:d9:75:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----