Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/323830343a353137303a3a2f33322d3336203d3e20323638343532.roa
File:                     323830343a353137303a3a2f33322d3336203d3e20323638343532.roa (raw, json)
Hash identifier:          tGm1xAXC0+dsJYsLUsY6TJeiOk5SFA4OaEn6dPYF/gk=
Subject key identifier:   FD:E7:6B:A0:F7:B8:66:29:55:54:5C:1E:AC:92:B1:53:7A:37:9F:0C
Certificate issuer:       /CN=38CB8780348540E936E47924E01C69A24F8C15DE
Certificate serial:       2A280ECA549742C76DC0AA6BF6791297963F9909
Authority key identifier: 38:CB:87:80:34:85:40:E9:36:E4:79:24:E0:1C:69:A2:4F:8C:15:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38CB8780348540E936E47924E01C69A24F8C15DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/323830343a353137303a3a2f33322d3336203d3e20323638343532.roa
Signing time:             Mon 01 Apr 2024 19:45:07 +0000
ROA not before:           Mon 01 Apr 2024 19:40:07 +0000
ROA not after:            Mon 31 Mar 2025 19:45:07 +0000
asID:                     268452
IP address blocks:        2804:5170::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:28:0e:ca:54:97:42:c7:6d:c0:aa:6b:f6:79:12:97:96:3f:99:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CB8780348540E936E47924E01C69A24F8C15DE
        Validity
            Not Before: Apr  1 19:40:07 2024 GMT
            Not After : Mar 31 19:45:07 2025 GMT
        Subject: CN=FDE76BA0F7B8662955545C1EAC92B1537A379F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:4c:f8:7c:5d:fc:71:25:0a:1c:e7:62:4e:
                    5f:d1:9c:d7:60:7e:35:64:06:b2:57:ce:71:9a:82:
                    e2:c1:d3:c5:08:15:7c:4e:43:d7:64:2f:c5:d0:f5:
                    ba:1f:4b:3a:16:c9:49:52:de:50:e8:4b:bf:70:30:
                    2b:40:01:d0:be:92:df:b2:c7:8e:a5:cc:bc:f5:ef:
                    cf:e1:21:a3:fa:df:cd:0c:62:fb:82:c8:a5:4c:b1:
                    4d:39:f1:0a:43:a4:c4:ff:d8:7d:59:d0:65:30:c7:
                    a8:a9:49:ec:c3:65:ec:05:ee:58:96:38:eb:f0:32:
                    3c:67:d1:14:17:5b:ad:fd:aa:ac:2b:90:9e:29:fc:
                    d0:ae:51:8b:05:a1:82:ce:fc:f3:db:bb:44:74:b3:
                    65:b7:f5:24:b2:46:7e:7e:a0:ee:fc:26:62:ae:34:
                    23:40:1d:b7:ba:38:27:5c:3c:af:98:25:22:68:50:
                    0d:d5:0d:7a:82:fe:44:ac:31:36:59:4c:32:42:81:
                    de:77:5d:47:5f:d1:99:8a:90:1f:9b:db:f8:d6:08:
                    7a:1f:50:17:f7:8d:0a:49:fc:20:31:58:77:1c:84:
                    32:ab:f5:9e:f2:4e:05:f3:1d:58:b4:9b:e2:d1:c2:
                    c9:6e:cf:39:2d:98:a7:0c:23:ab:72:8d:95:ea:12:
                    c2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E7:6B:A0:F7:B8:66:29:55:54:5C:1E:AC:92:B1:53:7A:37:9F:0C
            X509v3 Authority Key Identifier:
                keyid:38:CB:87:80:34:85:40:E9:36:E4:79:24:E0:1C:69:A2:4F:8C:15:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/38CB8780348540E936E47924E01C69A24F8C15DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38CB8780348540E936E47924E01C69A24F8C15DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/323830343a353137303a3a2f33322d3336203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5170::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:29:c4:83:7d:63:5f:99:c4:8c:72:31:b3:18:2a:9e:b9:d7:
         31:6e:87:c6:68:19:dd:05:ab:ed:1e:28:d4:a0:4c:00:7a:ea:
         25:fc:4a:b4:44:ed:a3:59:b9:e9:aa:24:38:bf:81:3a:b8:83:
         9a:7a:18:ea:7d:1d:f1:7a:b3:45:c8:37:a0:21:0a:97:c6:2e:
         24:37:d5:3b:8c:9b:5d:be:ab:87:3e:7c:93:40:5e:32:bb:0a:
         7b:ad:80:8c:c7:80:0b:40:1b:6f:45:a3:87:27:96:a1:da:73:
         e6:fe:f5:e5:10:80:be:71:b8:91:f6:11:d6:a2:12:e2:a6:bd:
         9f:be:7d:f5:55:88:f7:61:95:f5:8d:09:ed:45:cd:b1:dc:68:
         40:3b:10:7c:46:7d:09:60:8b:d4:49:bf:a2:2c:a0:65:ac:8f:
         3d:9e:ee:98:69:89:bc:6e:3b:b5:fe:84:19:a2:2b:dd:da:c7:
         65:ad:bf:82:c9:1c:6b:cc:0f:ae:34:e6:3e:0d:69:b4:f5:80:
         64:24:b5:a8:e5:09:61:3e:6d:8d:30:fd:c7:80:16:3e:08:70:
         39:e0:5a:57:6b:fb:18:89:9f:18:63:77:20:37:70:6d:bb:6e:
         a6:71:39:1b:75:7d:36:60:cb:b5:a1:32:d9:43:99:05:04:26:
         25:9e:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----