Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/323830343a343731633a383030303a3a2f33332d3333203d3e20323637303332.roa
File:                     323830343a343731633a383030303a3a2f33332d3333203d3e20323637303332.roa (raw, json)
Hash identifier:          G4zchT7FzJgOXl7I/51MjR0smNEq6KBjX83aZG5Kmvs=
Subject key identifier:   FF:E6:69:96:73:43:1D:D2:AB:62:74:BC:DA:75:4D:7F:27:85:7F:55
Certificate issuer:       /CN=A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E
Certificate serial:       0E6268EC289ABD2D1D86DF564829C8EEBE8A1AC2
Authority key identifier: A2:BF:C8:76:97:B7:5B:E1:3F:D7:BB:FD:27:F9:C7:E8:3E:D4:10:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/323830343a343731633a383030303a3a2f33332d3333203d3e20323637303332.roa
Signing time:             Wed 21 Aug 2024 16:25:23 +0000
ROA not before:           Wed 21 Aug 2024 16:20:23 +0000
ROA not after:            Wed 20 Aug 2025 16:25:23 +0000
asID:                     267032
IP address blocks:        2804:471c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:62:68:ec:28:9a:bd:2d:1d:86:df:56:48:29:c8:ee:be:8a:1a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E
        Validity
            Not Before: Aug 21 16:20:23 2024 GMT
            Not After : Aug 20 16:25:23 2025 GMT
        Subject: CN=FFE6699673431DD2AB6274BCDA754D7F27857F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:9c:99:c7:3a:62:ba:d9:e7:55:ed:72:14:
                    82:17:4a:b6:35:a2:f6:22:c8:2a:52:b7:19:04:c0:
                    fa:9d:4a:2e:7f:38:54:4a:ae:83:76:33:24:3a:8f:
                    63:2e:5d:eb:ac:9f:cd:06:1a:da:c9:06:01:0e:30:
                    c8:b5:83:ab:ba:2a:4c:20:a0:fd:9a:98:81:7e:9a:
                    7a:04:a3:60:4a:48:27:b4:2b:85:60:e1:db:87:54:
                    8c:4d:40:d1:e2:eb:e6:62:44:37:c3:7f:04:d6:02:
                    79:55:bd:dc:88:66:09:3b:39:48:75:27:04:68:b5:
                    42:0c:52:d4:f0:7a:0e:08:e2:99:b7:0e:94:1a:8d:
                    97:40:40:18:70:2b:8d:fc:81:aa:7d:fc:21:eb:a8:
                    30:6b:f4:09:3a:bb:3c:e7:36:b7:2f:fb:aa:18:16:
                    c2:68:30:ed:90:3d:c8:81:86:86:2f:8b:6d:12:d8:
                    90:98:5d:d0:e9:30:1d:0a:d8:3b:4f:ed:52:12:64:
                    71:f9:a4:c9:49:4f:5d:ec:ec:a2:65:eb:ab:94:dd:
                    a7:ec:26:57:43:44:65:a5:06:a4:43:e5:3f:3e:78:
                    a5:7d:73:44:c8:b7:7b:1e:bb:d0:e3:a3:8a:84:b7:
                    dc:6f:98:2b:69:8d:d9:88:55:b7:00:ea:c1:85:9f:
                    e2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E6:69:96:73:43:1D:D2:AB:62:74:BC:DA:75:4D:7F:27:85:7F:55
            X509v3 Authority Key Identifier:
                keyid:A2:BF:C8:76:97:B7:5B:E1:3F:D7:BB:FD:27:F9:C7:E8:3E:D4:10:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/323830343a343731633a383030303a3a2f33332d3333203d3e20323637303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:471c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:d9:00:6e:3e:1e:eb:4a:36:6a:58:c0:3f:54:50:6a:5d:62:
         d1:e6:fe:9c:a1:f1:38:4e:01:09:b1:aa:bd:20:92:db:f1:3f:
         42:61:37:86:9d:5b:c8:22:c1:e5:82:b0:24:c0:c7:a2:e5:fc:
         e4:37:47:da:bf:98:36:52:68:8c:94:c8:3a:1c:e6:7b:f3:47:
         90:14:fb:8b:0f:d6:b3:e8:3b:1b:0d:09:f1:d8:4e:d7:79:1e:
         2e:b6:35:b7:de:64:76:c3:9d:e2:d6:6f:26:8a:63:c1:a8:7c:
         b9:59:18:bb:63:63:ee:9a:35:4c:0f:55:06:2b:66:0c:97:b0:
         64:5d:83:71:27:c7:27:cc:a6:04:b6:13:2e:71:72:76:a5:83:
         e3:c5:b0:ef:1d:ae:af:89:cd:50:4a:92:42:ff:00:0a:61:b5:
         02:8d:87:b6:13:42:8a:df:e8:87:9f:1d:cc:11:0f:f5:f9:b0:
         c6:fa:bb:f8:02:36:f7:8c:74:08:71:c6:1a:b5:14:c7:79:96:
         e1:c4:5f:3b:b1:32:b5:e3:0a:82:db:d8:12:36:37:28:eb:65:
         0a:63:25:3e:c7:7b:1e:3e:02:b0:25:41:e9:39:cb:3d:8f:37:
         fa:de:b1:71:17:5d:c9:3e:66:4a:34:6b:b5:f8:8e:a2:67:44:
         54:61:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----