Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa
File:                     323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa (raw, json)
Hash identifier:          9rMynVTvWkiR+cndiH+LAkZQe+LD2Fa0tYSvaXZAgUg=
Subject key identifier:   4B:1F:06:21:03:3E:D4:47:18:24:6E:3B:84:D8:0C:81:B0:AA:29:F0
Certificate issuer:       /CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
Certificate serial:       3F21554C28565BFA3223426DCE0CAC33DA5ECD34
Authority key identifier: FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa
Signing time:             Thu 04 Apr 2024 22:49:24 +0000
ROA not before:           Thu 04 Apr 2024 22:44:24 +0000
ROA not after:            Thu 03 Apr 2025 22:49:24 +0000
asID:                     262578
IP address blocks:        2804:658:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:21:55:4c:28:56:5b:fa:32:23:42:6d:ce:0c:ac:33:da:5e:cd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF3CD0C3D025669552813E8E441EAA710DE43B2
        Validity
            Not Before: Apr  4 22:44:24 2024 GMT
            Not After : Apr  3 22:49:24 2025 GMT
        Subject: CN=4B1F0621033ED44718246E3B84D80C81B0AA29F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:bd:aa:30:0d:d4:3c:48:9b:2e:cc:96:29:
                    9f:e6:7e:9d:42:ed:d4:c9:22:40:a0:db:d5:36:18:
                    d8:61:be:fa:fc:82:71:26:1a:02:c1:6a:79:e9:f5:
                    f4:43:a1:7f:22:ea:ad:d4:45:31:d7:62:83:5e:50:
                    86:aa:6a:18:9b:0a:5b:a7:6c:d1:ef:73:0d:cb:fe:
                    f2:8a:66:c6:2a:e0:19:c9:51:49:cc:71:99:af:2f:
                    18:d3:bb:be:94:24:42:89:50:29:fb:d7:ef:66:3d:
                    c6:0c:5d:a7:02:c6:24:2a:10:33:71:1e:2a:77:79:
                    39:7b:1a:bb:85:01:ce:cd:ba:2a:57:a6:b8:56:36:
                    03:88:3c:1e:37:42:ad:fc:12:4a:1b:87:69:c7:ae:
                    f3:17:ef:41:fc:aa:1b:12:08:19:59:9b:da:79:bf:
                    d9:64:cd:ae:1c:55:86:3a:5b:6a:80:76:53:41:82:
                    89:19:2a:4d:48:a6:fe:67:6f:e4:74:a3:0a:54:cd:
                    86:9d:66:c0:30:50:41:09:4d:ba:18:f4:0f:84:b5:
                    c5:23:9a:b0:2e:5e:48:71:cd:53:b2:b8:99:3c:d4:
                    1e:48:43:c2:e9:f3:67:1d:38:b6:50:94:80:ff:91:
                    f0:24:51:a5:c9:4b:62:d2:dd:b2:35:30:a3:f3:61:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1F:06:21:03:3E:D4:47:18:24:6E:3B:84:D8:0C:81:B0:AA:29:F0
            X509v3 Authority Key Identifier:
                keyid:FF:F3:CD:0C:3D:02:56:69:55:28:13:E8:E4:41:EA:A7:10:DE:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFF3CD0C3D025669552813E8E441EAA710DE43B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/1/323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:658:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         43:2d:0f:1b:df:74:da:67:dc:38:67:fc:6c:e9:57:14:62:c2:
         b8:51:6d:02:77:8a:4d:06:b2:35:66:f1:cb:17:57:d0:0d:ae:
         63:ca:c1:a9:1e:6f:60:22:bf:54:55:75:37:0e:e8:59:b9:3e:
         8f:29:3b:8c:43:e0:fd:fa:21:72:ef:ff:b5:e8:e1:44:ba:01:
         f9:77:6a:43:26:c5:4d:81:5c:9a:65:44:8a:e3:dd:e4:d0:62:
         0a:03:13:73:41:43:44:b0:ac:92:ac:e6:74:28:c9:c2:b3:f8:
         44:8e:c0:b0:86:3f:da:df:f3:86:1d:7d:3e:1c:8b:25:c8:6e:
         dd:55:fb:31:10:14:34:3d:f5:11:a3:3c:e4:f0:b4:5c:92:dd:
         4c:a7:77:19:dc:dc:c6:a7:a6:30:c4:ad:29:65:a2:9c:61:96:
         20:ec:b9:4e:9f:55:af:fa:0a:83:b4:3b:72:06:7e:2c:63:05:
         85:06:e8:66:f1:81:9c:55:7d:a4:24:27:01:9b:8d:6d:df:bd:
         df:4a:b1:fc:49:3d:3e:41:43:ec:46:4b:e4:3e:c1:de:81:37:
         d6:2a:02:61:e6:75:1e:a9:88:6d:90:66:ab:c1:4c:23:10:7a:
         b8:28:85:39:6e:10:35:ef:2e:7e:0e:23:01:40:70:cf:31:49:
         d5:46:c4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----