Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/323830343a383335633a3a2f33322d3438203d3e20323732313933.roa
File:                     323830343a383335633a3a2f33322d3438203d3e20323732313933.roa (raw, json)
Hash identifier:          YuWURs2UHVvM2rCnGnwQWzuNKMCRYFp7+13b5xlVPAQ=
Subject key identifier:   0D:5D:20:FB:8E:A1:4F:C5:64:09:6C:E9:63:7F:71:0E:06:39:71:AD
Certificate issuer:       /CN=4F38B9A9DB9C979FA8DE949E660050126FB77039
Certificate serial:       69178D73F426FD4FEF0354DFD4FCE0EC174428AC
Authority key identifier: 4F:38:B9:A9:DB:9C:97:9F:A8:DE:94:9E:66:00:50:12:6F:B7:70:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F38B9A9DB9C979FA8DE949E660050126FB77039.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/323830343a383335633a3a2f33322d3438203d3e20323732313933.roa
Signing time:             Sat 16 Mar 2024 13:25:31 +0000
ROA not before:           Sat 16 Mar 2024 13:20:31 +0000
ROA not after:            Sat 15 Mar 2025 13:25:31 +0000
asID:                     272193
IP address blocks:        2804:835c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:17:8d:73:f4:26:fd:4f:ef:03:54:df:d4:fc:e0:ec:17:44:28:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F38B9A9DB9C979FA8DE949E660050126FB77039
        Validity
            Not Before: Mar 16 13:20:31 2024 GMT
            Not After : Mar 15 13:25:31 2025 GMT
        Subject: CN=0D5D20FB8EA14FC564096CE9637F710E063971AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f5:0f:35:d8:59:7a:e7:f5:51:7a:6e:a9:30:
                    92:9a:a0:2d:a4:ae:33:f8:eb:cf:b2:64:14:15:13:
                    41:89:0c:ff:75:15:53:9c:18:fa:b5:6a:34:2e:c5:
                    83:ab:89:ed:04:1d:4c:7f:07:d6:74:f6:b8:ab:ab:
                    19:33:81:86:59:2f:e5:65:62:91:7c:6a:5d:70:bc:
                    99:27:2b:18:72:4c:77:97:4d:35:f3:79:bf:0a:89:
                    1f:ea:bf:d8:16:4a:c4:4a:8e:78:59:ed:75:2f:1c:
                    40:d7:95:62:88:50:1e:e9:1f:37:a8:b1:7d:e4:d8:
                    89:01:e5:91:7b:52:67:a6:12:0e:ce:30:b6:f5:1f:
                    ac:b5:e0:d9:5c:db:92:58:b7:1a:f5:33:69:8b:05:
                    8f:01:87:98:7d:8b:e4:87:5d:54:e1:24:74:a6:98:
                    24:e8:f4:9f:da:73:79:b5:86:a0:0d:14:79:93:b4:
                    29:c4:9c:a1:76:78:22:53:da:a6:36:98:8d:c6:a8:
                    9a:1f:68:4a:cd:4a:19:80:f0:d2:44:a5:ef:b4:f6:
                    ed:48:e8:c5:35:2d:15:52:a2:2b:34:0f:d6:f1:50:
                    62:69:58:3a:64:bd:95:95:98:29:d1:3c:7c:1b:7f:
                    6b:cf:f6:fd:4e:f2:2c:52:8f:95:db:a2:07:fd:e7:
                    20:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5D:20:FB:8E:A1:4F:C5:64:09:6C:E9:63:7F:71:0E:06:39:71:AD
            X509v3 Authority Key Identifier:
                keyid:4F:38:B9:A9:DB:9C:97:9F:A8:DE:94:9E:66:00:50:12:6F:B7:70:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/4F38B9A9DB9C979FA8DE949E660050126FB77039.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F38B9A9DB9C979FA8DE949E660050126FB77039.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/323830343a383335633a3a2f33322d3438203d3e20323732313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:835c::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:04:f3:30:80:6c:7f:6e:46:28:ea:b6:ad:f4:6b:5f:dc:26:
         44:c0:41:45:a3:6a:13:81:b0:84:a4:4f:22:06:0a:0e:57:b5:
         38:f2:df:06:30:8e:3d:f8:42:d9:22:90:f0:d1:29:f6:eb:2d:
         9b:b0:f9:e9:e3:4c:d3:91:e6:4a:bd:93:34:03:70:91:78:f8:
         15:65:b4:dc:cd:16:4c:8d:11:41:39:14:5e:98:15:fc:37:78:
         34:14:3f:e3:2c:21:59:b0:86:80:72:28:54:6e:82:30:b3:4b:
         9b:b8:e8:42:16:26:7d:8b:62:9f:2c:59:41:01:aa:76:e2:65:
         34:54:3b:7e:81:e2:a5:a8:a8:c2:c9:8a:4b:08:80:37:8d:b6:
         9c:f4:a7:3f:4c:7d:3c:87:e6:9a:c0:8e:80:16:7f:7c:e1:8d:
         f2:3a:bd:a3:f4:c7:12:df:6a:ea:18:bc:bf:48:ae:e3:0b:33:
         49:e0:e2:c0:2d:49:57:d9:e4:38:21:8d:f7:c6:c9:43:06:17:
         5f:de:50:2c:d2:40:14:52:5d:3e:cc:a9:dc:19:79:4d:c5:7e:
         ab:84:04:86:91:c9:60:68:95:df:2a:6e:e0:2f:97:49:76:19:
         6f:54:8a:91:18:d2:8f:b6:f4:7a:6a:c8:4b:f0:0c:ee:5c:a6:
         f6:b0:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----