Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/323830343a3635383a323030303a3a2f33352d3335203d3e20323632353738.roa
File:                     323830343a3635383a323030303a3a2f33352d3335203d3e20323632353738.roa (raw, json)
Hash identifier:          xY6or5q5CS4g/3qJ8rfsdPOoXdFY/m3r+wHpr2qjV0E=
Subject key identifier:   D1:86:4D:7A:00:87:B3:2D:D2:4F:69:9D:75:A8:BA:FB:EC:6F:5D:31
Certificate issuer:       /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial:       1B3C5E09BBB2AA374494847026D688C7DAB0075E
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/323830343a3635383a323030303a3a2f33352d3335203d3e20323632353738.roa
Signing time:             Thu 04 Apr 2024 22:49:25 +0000
ROA not before:           Thu 04 Apr 2024 22:44:25 +0000
ROA not after:            Thu 03 Apr 2025 22:49:25 +0000
asID:                     262578
IP address blocks:        2804:658:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3c:5e:09:bb:b2:aa:37:44:94:84:70:26:d6:88:c7:da:b0:07:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Validity
            Not Before: Apr  4 22:44:25 2024 GMT
            Not After : Apr  3 22:49:25 2025 GMT
        Subject: CN=D1864D7A0087B32DD24F699D75A8BAFBEC6F5D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:99:d8:19:03:15:5f:4e:ea:8c:93:41:db:
                    1b:63:72:35:27:4e:89:bc:48:ce:8c:c4:74:af:71:
                    32:f1:a3:c8:86:50:43:0d:21:40:98:30:6f:c1:eb:
                    4d:d1:ac:87:8a:73:00:30:39:1a:b7:9b:9c:c2:41:
                    0d:70:e8:92:27:43:7e:a3:11:10:01:ae:e0:64:5c:
                    d6:85:0f:89:45:e3:84:6a:fa:ab:16:32:54:54:17:
                    d2:20:65:bb:fb:c1:e8:aa:3d:44:ad:58:be:5b:83:
                    12:11:a2:94:20:ba:c3:77:7c:a4:6b:53:c2:21:ff:
                    d4:74:57:72:64:02:ba:b7:c2:61:65:7a:08:0b:7b:
                    57:f0:66:e3:0d:5f:b9:4a:35:d4:a0:8d:f4:47:0d:
                    91:5b:2d:9a:f3:2a:ac:fb:38:f0:98:2b:7e:13:be:
                    f9:73:49:4a:8a:5f:3b:b0:fe:37:91:7c:0a:4f:1e:
                    f0:6e:b6:7e:c1:27:34:ce:18:b0:5b:89:4d:e9:55:
                    a8:c3:9a:d2:c5:4e:8e:ba:e6:51:07:2a:19:38:ff:
                    bd:f5:4a:3b:f6:81:bf:2a:48:18:2e:da:6a:6c:34:
                    60:d0:74:ef:ff:3b:1e:c8:b5:36:d0:99:c7:06:46:
                    4b:1d:61:e2:e3:cb:3c:0c:e9:5e:25:00:40:44:f5:
                    08:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:86:4D:7A:00:87:B3:2D:D2:4F:69:9D:75:A8:BA:FB:EC:6F:5D:31
            X509v3 Authority Key Identifier:
                keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/323830343a3635383a323030303a3a2f33352d3335203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         56:74:88:6b:c6:46:5b:49:00:ae:5c:d7:c3:82:87:a3:fe:d0:
         9c:34:71:58:ba:5a:c4:94:b5:45:5b:0f:be:d5:bf:19:f1:d0:
         fb:2b:ef:2e:c7:61:39:49:d8:08:1c:da:98:43:b1:e6:2f:85:
         b1:72:6a:6c:f9:5e:25:45:04:e1:6d:6d:ec:48:75:f2:8b:51:
         8b:b9:24:75:eb:c5:33:80:50:a1:2a:82:2a:31:42:09:c4:66:
         2a:d3:9a:60:39:6b:b1:f6:6c:5c:13:13:c5:78:26:6f:44:bb:
         45:7c:9b:44:0d:68:dc:a7:03:99:36:a1:5a:37:e1:67:2e:8f:
         7b:74:aa:9f:ed:87:1a:a2:68:8e:31:80:35:61:97:05:10:e9:
         8d:4f:2f:59:a3:5a:6b:90:c7:73:69:65:98:a2:54:71:3a:2e:
         d9:7e:5d:79:8c:4c:b8:92:e9:db:83:0b:73:58:9c:bb:a2:08:
         70:71:17:2c:6e:de:ac:0f:bb:58:bb:99:20:57:d2:29:0b:67:
         a6:12:55:1d:56:b0:be:69:dc:7a:95:ef:e7:80:4e:23:1d:49:
         e5:6f:fc:54:af:5d:99:ce:28:a3:4a:dc:63:25:7d:66:de:15:
         47:7b:b3:51:e1:81:d5:c0:7f:af:72:19:4c:87:97:46:5e:69:
         97:92:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----