Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/323830343a343731633a3a2f33322d3332203d3e20323637303332.roa
File:                     323830343a343731633a3a2f33322d3332203d3e20323637303332.roa (raw, json)
Hash identifier:          q/uU5ejA5OZ2PHh3tdoFuTJxw3Q8/4bsHY+DMCY+pGY=
Subject key identifier:   14:FB:E3:03:57:E9:D1:63:22:73:0C:00:F7:91:2B:22:5F:6D:53:2F
Certificate issuer:       /CN=A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E
Certificate serial:       296A46BF7015068FD7E6E058C74A40831A323F3F
Authority key identifier: A2:BF:C8:76:97:B7:5B:E1:3F:D7:BB:FD:27:F9:C7:E8:3E:D4:10:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/323830343a343731633a3a2f33322d3332203d3e20323637303332.roa
Signing time:             Wed 21 Aug 2024 16:25:13 +0000
ROA not before:           Wed 21 Aug 2024 16:20:13 +0000
ROA not after:            Wed 20 Aug 2025 16:25:13 +0000
asID:                     267032
IP address blocks:        2804:471c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6a:46:bf:70:15:06:8f:d7:e6:e0:58:c7:4a:40:83:1a:32:3f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E
        Validity
            Not Before: Aug 21 16:20:13 2024 GMT
            Not After : Aug 20 16:25:13 2025 GMT
        Subject: CN=14FBE30357E9D16322730C00F7912B225F6D532F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:86:9c:bf:8d:11:cf:4a:c6:12:5e:71:34:
                    0f:c0:2c:79:ae:f5:80:3e:e9:b7:85:7f:f5:9e:62:
                    0f:a4:e2:80:c1:22:b3:da:7e:bd:a3:64:30:82:35:
                    22:8c:f6:27:65:e9:8e:81:e4:a9:ff:1a:92:78:9d:
                    21:b7:e9:d5:c8:57:0c:77:96:82:c0:79:42:52:58:
                    82:fe:75:08:59:32:44:ce:39:08:89:66:8e:28:0b:
                    85:93:13:30:81:cf:80:79:39:90:d8:67:56:f2:99:
                    d9:e5:00:23:fc:a5:59:4d:38:68:20:6e:a1:f4:02:
                    31:52:50:dc:e3:5d:60:26:c3:08:79:42:1b:21:10:
                    ed:09:23:1d:00:7b:98:ed:98:e0:e2:fb:b8:a6:f6:
                    91:86:d2:f8:3d:1d:71:12:f4:3f:25:69:ae:72:59:
                    c0:e9:21:70:09:c7:83:61:34:ba:2a:5e:42:38:f7:
                    3e:b5:03:33:bd:69:7f:c3:52:ad:9a:af:26:07:ed:
                    62:b6:dd:e1:ae:c1:c9:fb:5e:a5:31:c1:cc:7f:99:
                    f6:b6:be:c4:9b:0f:69:3b:2e:10:f5:78:99:2b:eb:
                    11:0c:2c:c5:9a:1a:76:52:e4:f9:64:6e:42:86:d1:
                    6f:89:96:38:23:16:ed:94:70:8b:66:7d:f1:20:3f:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FB:E3:03:57:E9:D1:63:22:73:0C:00:F7:91:2B:22:5F:6D:53:2F
            X509v3 Authority Key Identifier:
                keyid:A2:BF:C8:76:97:B7:5B:E1:3F:D7:BB:FD:27:F9:C7:E8:3E:D4:10:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2BFC87697B75BE13FD7BBFD27F9C7E83ED4101E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCmtN4pMGoa4k5AgQRiJPzj47DGKJdUxjDi5uy7tY7qk/0/323830343a343731633a3a2f33322d3332203d3e20323637303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:471c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:07:04:77:a4:8b:d8:22:b4:f0:b4:36:9d:67:59:e3:dc:fa:
         dc:33:ce:55:b8:c0:df:94:8a:34:18:73:f8:a8:e1:87:38:60:
         cf:f7:41:f3:6f:29:5a:21:16:6c:3b:bd:4b:c5:80:6f:7f:21:
         42:60:a4:d3:17:e9:de:f9:33:45:e6:b8:03:c0:4c:fb:02:49:
         42:c8:dc:b4:27:81:1f:1c:80:d5:40:6a:88:30:22:57:9c:99:
         2c:f5:f0:24:e7:b5:bc:fa:b3:0c:6c:00:e1:be:d7:f4:96:59:
         28:0d:6c:04:90:9c:a4:61:4b:c9:3d:b8:6a:64:56:49:3d:aa:
         cc:a9:ff:69:76:b1:5a:76:a5:15:63:26:ce:c1:a5:e3:81:cd:
         12:33:95:5c:41:e9:69:29:a5:9c:f7:8f:f3:86:63:c5:5d:8f:
         5b:67:60:65:58:00:58:e2:5b:97:03:7e:0f:8b:f9:71:95:44:
         23:0c:a5:48:02:28:83:2e:ff:8b:f5:77:e0:1b:42:77:e2:da:
         7d:b9:13:24:c8:31:32:b3:ce:8c:bb:c8:a2:58:1d:9a:4d:4f:
         53:db:be:e9:7c:51:a6:11:d4:91:a2:b6:6c:38:51:cb:c2:bc:
         97:53:6f:2e:8c:14:7e:04:8c:4c:fd:10:cb:94:d5:6c:e8:10:
         04:03:6e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----