Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/323830343a313539303a3a2f33322d3332203d3e20323633333935.roa
File:                     323830343a313539303a3a2f33322d3332203d3e20323633333935.roa (raw, json)
Hash identifier:          aq/OKWg7ZV1/tpKyv07GdoL/rIbOYWP7kukyPnTuSwE=
Subject key identifier:   E7:6F:CA:0F:F3:A3:EB:AE:D4:24:99:19:4D:2A:68:72:B6:D1:C1:A1
Certificate issuer:       /CN=67666492B102F21109D368673B2B20745692E1A8
Certificate serial:       08FEA6708B27AE616F44B59852A67A6EB095F4BC
Authority key identifier: 67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/323830343a313539303a3a2f33322d3332203d3e20323633333935.roa
Signing time:             Sun 25 Dec 2022 17:22:16 +0000
ROA not before:           Sun 25 Dec 2022 17:17:16 +0000
ROA not after:            Sun 24 Dec 2023 17:22:16 +0000
asID:                     263395
IP address blocks:        2804:1590::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fe:a6:70:8b:27:ae:61:6f:44:b5:98:52:a6:7a:6e:b0:95:f4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67666492B102F21109D368673B2B20745692E1A8
        Validity
            Not Before: Dec 25 17:17:16 2022 GMT
            Not After : Dec 24 17:22:16 2023 GMT
        Subject: CN=E76FCA0FF3A3EBAED42499194D2A6872B6D1C1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:cb:31:b8:9f:ac:59:5e:a4:ac:c6:bd:99:
                    a3:a7:61:4b:4f:8b:9e:b6:ea:4c:68:ab:8b:6c:1b:
                    d7:af:c2:79:ed:76:df:40:cc:ca:39:1b:d8:bb:c1:
                    ba:de:5c:9f:26:20:56:e3:e9:51:45:3e:cf:3f:7f:
                    e3:ef:0f:d7:96:1c:2d:73:13:e5:e8:6e:be:e5:25:
                    c7:e5:fd:be:41:7f:2c:b8:0e:50:f6:7c:e5:bb:27:
                    71:44:2f:94:b0:05:1b:f2:46:bc:1a:13:d6:c8:48:
                    6c:84:83:41:ff:02:6a:45:36:69:21:40:51:e2:5f:
                    d4:0a:f4:26:8f:6c:11:c3:3a:b6:39:cd:de:36:1d:
                    90:67:25:91:b4:43:b7:a5:5e:a8:cc:91:91:17:1f:
                    f9:49:ed:84:31:04:c9:dc:29:b0:e4:06:82:e8:9b:
                    ae:d9:a7:ae:cd:63:4c:42:a2:b9:a8:9a:c5:f6:8e:
                    c6:e4:f4:b4:06:85:2f:0b:da:eb:9b:01:81:b5:ec:
                    ea:c0:c4:85:7d:af:de:72:02:d7:10:84:a0:cc:2c:
                    23:ce:43:7e:92:cf:b7:31:b8:da:a1:c4:41:60:25:
                    1e:ad:9e:ff:f1:c8:5a:d4:48:91:c7:7b:09:f5:e2:
                    87:ef:9c:a6:37:be:cd:a7:6a:67:e5:0a:95:99:3e:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6F:CA:0F:F3:A3:EB:AE:D4:24:99:19:4D:2A:68:72:B6:D1:C1:A1
            X509v3 Authority Key Identifier:
                keyid:67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/67666492B102F21109D368673B2B20745692E1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/323830343a313539303a3a2f33322d3332203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1590::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:e8:83:ad:f6:d5:45:b7:89:24:26:7a:1d:bb:8d:08:ea:f5:
         3c:0a:73:a2:b9:12:e9:5a:78:fe:18:d6:69:26:d0:33:6d:da:
         6f:31:a1:47:09:ca:79:fc:dc:ab:b7:f1:13:fc:5b:c5:d3:d0:
         18:36:0c:96:07:ea:ad:ff:62:1a:2a:78:a3:86:6c:12:1d:a5:
         4d:e1:aa:1b:85:d9:89:dc:b0:80:45:ec:28:78:d1:89:2a:a2:
         32:2c:05:b5:96:d9:c7:7e:9c:a1:85:0b:af:99:27:30:84:05:
         0b:cc:9c:55:b3:e9:ac:1d:98:c2:37:12:97:04:6d:58:f8:c2:
         b8:83:1f:b2:50:78:48:31:cb:6d:00:c8:9f:86:e9:35:91:26:
         7c:45:85:8e:37:4c:24:8b:a2:01:b8:dd:ec:52:ef:87:7a:e3:
         59:70:0c:0e:82:9a:c8:39:53:d2:14:69:0e:67:8f:5d:a3:b9:
         4e:b0:b4:89:ae:4c:ac:13:24:b3:bd:1e:68:a9:14:c5:8a:93:
         4d:fb:27:7b:7d:ae:3d:f2:18:7c:dd:8c:91:bd:36:4c:bf:8a:
         79:bf:d6:15:cb:ba:e9:e5:f0:7b:b1:73:3a:19:52:05:c0:a6:
         22:34:10:d0:dc:58:8d:3e:b7:be:92:e2:2d:de:b1:cd:73:cb:
         d0:da:eb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----