Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/323830343a323032303a3a2f3332203d3e20323634343730.roa
File:                     323830343a323032303a3a2f3332203d3e20323634343730.roa (raw, json)
Hash identifier:          OOIBDFW63ANMm4W8W/fHFCFRRhSKsvvynHB/1F01i3w=
Subject key identifier:   F8:CA:CD:95:56:B1:17:A1:F7:68:B3:C9:42:86:C7:AC:01:9A:7E:D1
Certificate issuer:       /CN=332E0DA86130575BFAD949B0B294C77899BFD68B
Certificate serial:       21E1B9381FE450A0FA2BC1A51CC00612D920EB34
Authority key identifier: 33:2E:0D:A8:61:30:57:5B:FA:D9:49:B0:B2:94:C7:78:99:BF:D6:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332E0DA86130575BFAD949B0B294C77899BFD68B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/323830343a323032303a3a2f3332203d3e20323634343730.roa
Signing time:             Thu 23 Nov 2023 17:25:22 +0000
ROA not before:           Thu 23 Nov 2023 17:20:22 +0000
ROA not after:            Thu 21 Nov 2024 17:25:22 +0000
asID:                     264470
IP address blocks:        2804:2020::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e1:b9:38:1f:e4:50:a0:fa:2b:c1:a5:1c:c0:06:12:d9:20:eb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332E0DA86130575BFAD949B0B294C77899BFD68B
        Validity
            Not Before: Nov 23 17:20:22 2023 GMT
            Not After : Nov 21 17:25:22 2024 GMT
        Subject: CN=F8CACD9556B117A1F768B3C94286C7AC019A7ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:99:27:40:e3:21:5c:6d:95:37:a6:3c:3f:
                    df:19:5b:d1:a2:9d:20:55:a8:4b:90:fd:6a:25:c7:
                    41:0f:d9:d2:56:7a:01:ac:82:fb:10:e0:2c:d0:93:
                    4b:46:ab:74:c0:e4:5e:df:32:b6:28:b1:56:df:ae:
                    18:5c:a8:d4:8d:aa:69:13:53:56:bb:d3:ba:27:fd:
                    e9:82:ae:2f:b0:8e:e7:60:1c:71:fa:28:e4:26:79:
                    4e:3b:c6:fc:e5:b0:b0:2c:e1:c5:fb:75:69:3c:e5:
                    fb:6d:19:96:3f:02:83:0d:b8:e7:b8:e7:47:46:1f:
                    f4:77:3e:c6:15:7f:dd:39:df:89:e5:06:d7:14:5c:
                    27:b4:1a:8f:98:23:e6:a2:ad:e1:f3:e7:9c:59:0a:
                    7d:8d:84:bf:94:39:87:35:9d:9f:98:d9:74:5e:15:
                    7b:0a:93:38:f7:bb:d9:20:e8:6b:4d:3a:47:b9:4a:
                    0e:1d:58:bd:ef:c6:85:19:6b:2c:cb:a4:9e:c3:28:
                    ad:c9:55:72:62:cb:50:1d:33:05:d6:c0:8f:c0:f6:
                    c5:f2:d7:c6:96:aa:96:91:25:e0:53:50:7e:55:4e:
                    26:a0:ae:ee:3b:90:a0:07:66:df:75:62:0f:08:c6:
                    ec:e9:db:fc:14:e4:fe:90:9a:38:73:56:c8:39:b9:
                    a4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CA:CD:95:56:B1:17:A1:F7:68:B3:C9:42:86:C7:AC:01:9A:7E:D1
            X509v3 Authority Key Identifier:
                keyid:33:2E:0D:A8:61:30:57:5B:FA:D9:49:B0:B2:94:C7:78:99:BF:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/332E0DA86130575BFAD949B0B294C77899BFD68B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332E0DA86130575BFAD949B0B294C77899BFD68B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/323830343a323032303a3a2f3332203d3e20323634343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2020::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:27:e7:4d:28:75:95:30:43:a8:e2:8d:7f:5d:31:22:74:f4:
         c2:c5:aa:b1:53:50:56:ea:5c:6a:81:1e:b9:98:85:0e:67:85:
         5b:7d:33:48:89:9b:4d:cd:04:50:d2:86:04:43:5d:ee:9b:b6:
         f2:3e:9e:57:30:24:f3:83:f9:2d:72:e6:54:60:e2:bf:ca:d2:
         da:5f:04:42:e2:f2:49:66:dc:cb:01:ff:74:6b:1f:c9:97:eb:
         0c:1a:25:cc:1e:b8:46:af:db:f1:ae:7a:77:d7:58:8e:33:a4:
         12:7e:bd:4e:e8:e4:d5:26:94:1e:85:c7:fa:e2:02:5b:3f:34:
         58:44:82:7a:2b:0b:b1:d1:87:69:f3:5b:80:af:10:e1:51:72:
         e1:74:ba:47:a5:c4:6f:41:69:5a:ef:25:b6:d6:04:ce:f9:3d:
         f3:d8:92:78:58:ef:02:39:b9:df:03:24:e8:a6:70:6b:2f:f5:
         bf:a5:42:56:35:76:55:66:81:c2:cc:cb:4f:ed:7a:87:79:40:
         15:d8:9f:73:df:8a:28:da:87:57:0f:b9:c6:68:34:fb:4a:41:
         58:05:b5:d9:02:87:3d:9d:7a:bb:9a:c1:97:fd:be:f2:b3:9b:
         4a:8a:13:62:7c:fe:d8:54:df:d8:19:e8:6e:71:a2:35:59:99:
         ca:4f:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----