Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33322d3438203d3e20323637333935.roa
File:                     323830343a346364343a3a2f33322d3438203d3e20323637333935.roa (raw, json)
Hash identifier:          Fq3xUdrrsN2Iuhqjv6mVcWqagRUJQm8xl9COVT/iuNw=
Subject key identifier:   3F:AE:1E:C7:25:D2:74:01:C3:14:B6:6B:CF:9B:0B:54:F4:77:0E:03
Certificate issuer:       /CN=FCC7A10CD64B84116220258C164688796EE17437
Certificate serial:       73DA5E6EA07AC350114A399BA0A9201871999213
Authority key identifier: FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33322d3438203d3e20323637333935.roa
Signing time:             Wed 10 Apr 2024 13:16:36 +0000
ROA not before:           Wed 10 Apr 2024 13:11:36 +0000
ROA not after:            Wed 09 Apr 2025 13:16:36 +0000
asID:                     267395
IP address blocks:        2804:4cd4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:da:5e:6e:a0:7a:c3:50:11:4a:39:9b:a0:a9:20:18:71:99:92:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCC7A10CD64B84116220258C164688796EE17437
        Validity
            Not Before: Apr 10 13:11:36 2024 GMT
            Not After : Apr  9 13:16:36 2025 GMT
        Subject: CN=3FAE1EC725D27401C314B66BCF9B0B54F4770E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:10:02:1a:d0:40:a8:2d:e5:45:e2:ae:c7:7b:
                    93:8f:9e:fe:bb:b8:33:6f:1f:95:57:a5:62:26:f0:
                    fc:42:34:8c:8a:d7:8a:62:d6:8a:8d:b6:e1:8e:c0:
                    c3:2b:38:fc:fd:bc:56:d8:e0:47:b6:01:76:68:21:
                    1b:30:ad:64:5f:70:ab:45:f7:a0:5a:d3:c6:9a:19:
                    ee:1c:59:c1:1f:2a:d0:bc:7a:d2:d9:4a:58:98:d2:
                    47:3c:a4:0c:2f:58:80:48:bb:12:81:19:4c:57:4a:
                    5e:01:72:0d:ec:f4:55:bc:1d:dd:89:2a:b8:25:ff:
                    f3:10:79:7f:fc:76:00:5a:9d:35:3e:46:fa:e5:c6:
                    76:d3:20:c2:49:3d:a9:15:da:e1:c6:ab:b1:e5:ed:
                    d9:d4:0b:1f:43:6c:e6:fe:5d:6e:87:3c:c4:fd:e9:
                    8d:af:4c:5c:21:63:e4:59:c8:33:19:55:d1:92:56:
                    d4:f2:ec:54:df:33:63:30:b1:fe:30:bb:0f:b7:b1:
                    8f:95:2d:04:9d:c3:da:38:15:40:f6:93:b4:05:6c:
                    b7:ee:76:1c:91:14:6c:56:37:a1:ac:58:d5:3c:72:
                    fd:2f:ee:1e:13:1a:0f:d7:d1:d6:3b:a0:65:2e:ba:
                    01:61:68:d0:ca:6c:b1:01:bd:7f:fe:93:93:6a:ed:
                    9a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AE:1E:C7:25:D2:74:01:C3:14:B6:6B:CF:9B:0B:54:F4:77:0E:03
            X509v3 Authority Key Identifier:
                keyid:FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/FCC7A10CD64B84116220258C164688796EE17437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33322d3438203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:97:da:22:b1:b2:58:18:5d:3e:a3:6e:e6:ed:31:f7:e2:1a:
         69:d8:49:24:ea:5f:17:ec:14:68:32:68:c9:e4:ac:6e:0d:ea:
         8e:15:48:49:97:cf:58:9c:8c:51:d0:fd:5e:4e:f2:d6:3f:df:
         eb:fc:6f:ed:1a:37:b3:31:9d:66:20:21:42:ee:f4:28:a8:73:
         5d:3e:db:27:e3:2d:e1:fa:f9:8d:43:a6:cc:f9:dc:bf:c1:30:
         ea:30:7a:20:7b:3c:cd:11:b5:bf:a4:82:8f:e3:0b:09:5e:7e:
         cb:e5:07:f0:e4:69:84:02:28:3e:ee:16:b3:fa:44:5f:68:b9:
         a4:13:a4:72:51:48:ee:b3:9e:a4:83:b1:f4:2b:8b:4d:10:fb:
         ba:fa:c6:e3:ff:b4:45:ed:7b:26:38:ec:ef:55:7b:0b:85:78:
         d2:03:16:68:77:ca:70:49:7c:9f:b8:e4:b0:a5:a5:4f:0b:75:
         9f:0d:ed:99:74:2d:4b:69:dd:7b:e7:27:a9:ac:42:a6:19:12:
         0d:01:05:1c:e2:45:c6:4b:40:3c:8a:ef:39:be:ec:6c:33:db:
         ea:ac:21:17:fb:45:ad:d1:db:a9:dd:29:48:7f:ca:a9:85:0b:
         d8:85:fd:f2:37:9b:f5:50:0b:f7:65:06:00:f6:fb:4f:95:22:
         87:44:38:32
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUc9pebqB6w1ARSjmboKkgGHGZkhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNDN0ExMENENjRCODQxMTYyMjAyNThDMTY0Njg4Nzk2
RUUxNzQzNzAeFw0yNDA0MTAxMzExMzZaFw0yNTA0MDkxMzE2MzZaMDMxMTAvBgNV
BAMTKDNGQUUxRUM3MjVEMjc0MDFDMzE0QjY2QkNGOUIwQjU0RjQ3NzBFMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEEAIa0ECoLeVF4q7He5OPnv67
uDNvH5VXpWIm8PxCNIyK14pi1oqNtuGOwMMrOPz9vFbY4Ee2AXZoIRswrWRfcKtF
96Ba08aaGe4cWcEfKtC8etLZSliY0kc8pAwvWIBIuxKBGUxXSl4Bcg3s9FW8Hd2J
Krgl//MQeX/8dgBanTU+RvrlxnbTIMJJPakV2uHGq7Hl7dnUCx9DbOb+XW6HPMT9
6Y2vTFwhY+RZyDMZVdGSVtTy7FTfM2Mwsf4wuw+3sY+VLQSdw9o4FUD2k7QFbLfu
dhyRFGxWN6GsWNU8cv0v7h4TGg/X0dY7oGUuugFhaNDKbLEBvX/+k5Nq7ZqhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUP64exyXSdAHDFLZrz5sLVPR3DgMwHwYDVR0j
BBgwFoAU/MehDNZLhBFiICWMFkaIeW7hdDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtjUGY2QXM4eVNwU2pXNW5lSHpkeUF3aXVyYVFRNlgza2Y2eWExVE1W
am0vMC9GQ0M3QTEwQ0Q2NEI4NDExNjIyMDI1OEMxNjQ2ODg3OTZFRTE3NDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZDQzdBMTBDRDY0Qjg0MTE2
MjIwMjU4QzE2NDY4ODc5NkVFMTc0MzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLY1BmNkFzOHlTcFNqVzVuZUh6ZHlBd2l1cmFRUTZYM2tmNnlhMVRNVmptLzAv
MzIzODMwMzQzYTM0NjM2NDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzMzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARM1DANBgkqhkiG9w0BAQsFAAOCAQEAfZfaIrGy
WBhdPqNu5u0x9+IaadhJJOpfF+wUaDJoyeSsbg3qjhVISZfPWJyMUdD9Xk7y1j/f
6/xv7Ro3szGdZiAhQu70KKhzXT7bJ+Mt4fr5jUOmzPncv8Ew6jB6IHs8zRG1v6SC
j+MLCV5+y+UH8ORphAIoPu4Ws/pEX2i5pBOkclFI7rOepIOx9CuLTRD7uvrG4/+0
Re17Jjjs71V7C4V40gMWaHfKcEl8n7jksKWlTwt1nw3tmXQtS2nde+cnqaxCphkS
DQEFHOJFxktAPIrvOb7sbDPb6qwhF/tFrdHbqd0pSH/KqYUL2IX98jeb9VAL92UG
APb7T5Uih0Q4Mg==
-----END CERTIFICATE-----