Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/323830343a343432343a3a2f33322d3332203d3e20323637363035.roa
File:                     323830343a343432343a3a2f33322d3332203d3e20323637363035.roa (raw, json)
Hash identifier:          HsUrCVacRt2FSy+bZRbZ/glkBqlZ+BcUG3/YAkKup9w=
Subject key identifier:   1A:F8:67:14:16:DA:A0:8F:93:67:31:E7:A6:3F:A0:B3:B3:9E:C0:AD
Certificate issuer:       /CN=47D8D5FEE9032D80A186B4EBC0BF422F045F309B
Certificate serial:       026823CE1704645A77B781A6E1A54C0B2572AD4E
Authority key identifier: 47:D8:D5:FE:E9:03:2D:80:A1:86:B4:EB:C0:BF:42:2F:04:5F:30:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47D8D5FEE9032D80A186B4EBC0BF422F045F309B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/323830343a343432343a3a2f33322d3332203d3e20323637363035.roa
Signing time:             Tue 19 Mar 2024 18:57:01 +0000
ROA not before:           Tue 19 Mar 2024 18:52:01 +0000
ROA not after:            Tue 18 Mar 2025 18:57:01 +0000
asID:                     267605
IP address blocks:        2804:4424::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:68:23:ce:17:04:64:5a:77:b7:81:a6:e1:a5:4c:0b:25:72:ad:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47D8D5FEE9032D80A186B4EBC0BF422F045F309B
        Validity
            Not Before: Mar 19 18:52:01 2024 GMT
            Not After : Mar 18 18:57:01 2025 GMT
        Subject: CN=1AF8671416DAA08F936731E7A63FA0B3B39EC0AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:34:6a:3f:d5:23:87:0a:71:4b:47:34:79:58:
                    0e:f6:45:f7:30:b4:4e:43:db:81:b8:5d:57:f3:bb:
                    1b:f3:da:a1:46:0d:cb:be:f2:a0:39:0e:20:88:96:
                    20:2e:85:92:5e:b6:aa:d0:81:42:d0:06:bf:f4:57:
                    5c:49:17:4c:40:ff:71:70:f7:06:8f:9e:d1:69:7f:
                    a7:e1:f7:8d:84:18:11:4d:d5:12:1a:1b:56:3e:37:
                    a4:58:96:74:18:3a:2a:42:8d:28:f7:b4:f5:88:3b:
                    92:a3:53:97:b8:3f:4e:09:6a:40:33:24:9b:e0:8e:
                    f8:c1:3f:2d:ab:d8:a6:fd:bc:4b:c8:fe:6a:c7:b2:
                    9c:55:9a:fd:a1:09:34:06:98:13:de:20:9c:6f:fa:
                    ff:35:31:a6:f8:4d:5a:e2:5a:64:3e:e3:6b:3b:ea:
                    99:a3:6d:b8:60:e6:52:92:bd:ac:39:a7:fb:2f:7e:
                    7d:1a:f5:35:c6:b1:34:77:8e:f6:c8:bb:99:42:de:
                    02:07:5b:c4:69:aa:58:a2:c6:47:9c:57:8d:54:9d:
                    3a:10:63:43:5a:ff:4f:d5:b1:88:7c:8f:fb:99:0f:
                    70:f3:a6:c2:f8:08:21:92:82:81:cc:81:b1:44:b3:
                    68:7f:30:b9:ad:e6:80:eb:dc:95:c2:77:41:46:4c:
                    dc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F8:67:14:16:DA:A0:8F:93:67:31:E7:A6:3F:A0:B3:B3:9E:C0:AD
            X509v3 Authority Key Identifier:
                keyid:47:D8:D5:FE:E9:03:2D:80:A1:86:B4:EB:C0:BF:42:2F:04:5F:30:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/47D8D5FEE9032D80A186B4EBC0BF422F045F309B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47D8D5FEE9032D80A186B4EBC0BF422F045F309B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/323830343a343432343a3a2f33322d3332203d3e20323637363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4424::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:42:d5:40:0d:42:ec:89:7f:71:e3:03:9b:ff:5f:1d:3f:45:
         92:29:c8:79:d8:be:c4:de:35:65:66:39:51:9a:f4:08:df:38:
         4a:ec:c3:de:46:cf:e9:df:60:07:05:99:b4:bb:50:3d:39:6a:
         7b:fd:7f:87:f7:eb:b9:ea:d4:83:a4:b7:5f:a0:8e:ba:10:7b:
         08:31:00:ee:4c:bd:ec:a8:d1:9c:e2:90:9b:82:87:f0:fd:d0:
         3c:b8:cb:e7:b6:b1:3a:a2:48:69:1f:65:6b:ad:7d:2b:ab:8f:
         99:4b:7c:d5:9b:bc:34:db:2a:39:97:41:ac:03:9a:4b:31:e7:
         f9:64:58:41:08:c4:75:1e:be:79:95:0a:26:7f:70:b8:31:24:
         4a:a0:94:da:51:0a:fa:d6:a3:10:fd:e5:2e:31:7d:ae:5d:4b:
         10:63:bc:de:45:79:0d:0a:70:b5:c2:6f:6d:e6:b6:61:a7:e1:
         33:ab:6e:c8:2d:23:ee:d1:64:5e:d3:3c:96:fb:1a:e6:59:cf:
         27:fd:08:b9:76:91:f2:1d:e8:f2:85:30:28:45:28:d5:a7:a3:
         de:9b:d1:1f:14:87:23:48:3f:63:b2:45:83:17:fa:58:b1:80:
         53:05:9a:2d:8d:43:14:75:9e:79:b7:6f:83:58:b9:73:64:7b:
         db:39:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----