Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/323830343a323536633a3a2f33322d3438203d3e20323634323830.roa
File:                     323830343a323536633a3a2f33322d3438203d3e20323634323830.roa (raw, json)
Hash identifier:          scDQ9CffabjSt4SlP1BP9TyUPA9K6jVGY/Cyxf/+weE=
Subject key identifier:   9A:5B:96:32:7F:E5:31:AD:4E:4D:20:92:26:B2:4F:CE:B1:B6:56:64
Certificate issuer:       /CN=727619F0B90128C3DF95B9AAAE1F281B07964C12
Certificate serial:       513BEBC66EEED486BA432F2A9A06A4E14D0F007F
Authority key identifier: 72:76:19:F0:B9:01:28:C3:DF:95:B9:AA:AE:1F:28:1B:07:96:4C:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/727619F0B90128C3DF95B9AAAE1F281B07964C12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/323830343a323536633a3a2f33322d3438203d3e20323634323830.roa
Signing time:             Tue 12 Mar 2024 16:35:14 +0000
ROA not before:           Tue 12 Mar 2024 16:30:14 +0000
ROA not after:            Tue 11 Mar 2025 16:35:14 +0000
asID:                     264280
IP address blocks:        2804:256c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3b:eb:c6:6e:ee:d4:86:ba:43:2f:2a:9a:06:a4:e1:4d:0f:00:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727619F0B90128C3DF95B9AAAE1F281B07964C12
        Validity
            Not Before: Mar 12 16:30:14 2024 GMT
            Not After : Mar 11 16:35:14 2025 GMT
        Subject: CN=9A5B96327FE531AD4E4D209226B24FCEB1B65664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:ac:ac:1a:c7:5c:f4:b0:30:fd:02:23:01:
                    61:ee:3b:83:7a:2f:3d:23:a1:fe:24:45:32:05:1d:
                    fa:f5:74:de:fd:9e:61:97:2f:1b:15:d6:03:ce:0f:
                    24:70:fd:58:1c:63:8b:dd:f5:76:dd:f2:e4:5e:9c:
                    c3:65:3b:e5:e2:6c:50:6e:f2:72:b9:af:01:16:5b:
                    c9:05:4c:dc:e2:1d:98:33:87:ca:31:20:70:65:71:
                    75:c0:6e:02:9c:9b:54:dc:89:39:11:8f:5d:83:24:
                    43:ff:b1:64:46:e5:bd:70:d3:56:92:cf:84:23:e5:
                    c1:42:99:6a:0d:42:97:a3:fd:6a:90:79:0c:8f:24:
                    1a:3a:89:5f:99:7a:f6:30:25:f8:17:4a:9d:85:20:
                    a6:d1:5d:63:fd:55:38:fa:f5:54:bb:43:46:25:45:
                    8b:aa:27:04:17:58:d7:b6:80:af:e4:04:1d:b7:a5:
                    32:2b:43:a6:f4:d2:3c:a2:0e:9a:a5:60:e0:1d:9b:
                    3d:4a:ad:5b:27:38:46:aa:f8:90:d0:6c:10:12:f3:
                    b0:70:81:8e:79:49:46:8f:13:cc:c8:f4:28:fd:9b:
                    df:59:00:7d:f4:38:a9:e5:37:23:5d:05:b1:3d:04:
                    c8:d1:fd:2d:65:f5:19:03:ab:31:ce:9f:b4:0e:a8:
                    2c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5B:96:32:7F:E5:31:AD:4E:4D:20:92:26:B2:4F:CE:B1:B6:56:64
            X509v3 Authority Key Identifier:
                keyid:72:76:19:F0:B9:01:28:C3:DF:95:B9:AA:AE:1F:28:1B:07:96:4C:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/727619F0B90128C3DF95B9AAAE1F281B07964C12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/727619F0B90128C3DF95B9AAAE1F281B07964C12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/323830343a323536633a3a2f33322d3438203d3e20323634323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:256c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:24:32:ed:e7:3f:ac:12:fe:4f:8b:46:ea:3c:ec:c8:ad:
         3c:3a:64:6b:d7:e5:34:65:89:74:60:71:84:63:1a:d8:73:bd:
         6f:7f:99:e7:f3:df:da:b0:3d:15:82:8a:dd:37:92:2e:23:9a:
         a4:80:f1:44:cb:59:8e:b8:6d:ab:21:9a:8a:5f:d4:07:21:7a:
         c6:5d:7a:80:a4:30:e3:40:3c:3a:cb:7d:94:9d:45:93:36:2f:
         1b:a8:5f:80:10:dd:07:e6:7a:f1:1e:42:e9:86:d0:1c:e3:f4:
         a8:c7:fa:90:01:27:8b:a5:2c:ec:9e:b1:83:05:6e:ad:d8:66:
         e8:fe:b6:b5:0a:f3:1a:97:a9:12:5d:6b:17:f6:b5:86:82:19:
         9b:2a:64:ca:e9:00:57:75:2c:1b:25:8c:ac:bc:10:b6:bd:e2:
         1f:bc:de:d3:5b:ee:b5:ab:36:a2:33:31:b5:80:90:b5:04:e3:
         a5:07:73:51:76:86:7f:f9:3d:12:ff:11:84:79:9b:dc:14:13:
         a0:b6:8b:58:e9:43:9f:df:f7:35:51:b7:95:2a:93:9d:2b:dc:
         ee:fb:e5:0f:32:fa:d6:73:c9:40:63:9b:b4:21:2d:87:35:45:
         f1:df:cd:c5:43:25:54:e4:bd:73:9a:ae:fb:3b:d5:2a:ff:2d:
         78:c0:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----