Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/323830343a373738633a3a2f33322d3332203d3e20323731313835.roa
File:                     323830343a373738633a3a2f33322d3332203d3e20323731313835.roa (raw, json)
Hash identifier:          DyDc0Ph4jkdLS7rrw2mSWGj6pwlreW8CHLo8vrXzwz4=
Subject key identifier:   20:FC:4A:BA:18:0E:C9:18:B3:D8:6E:FA:B8:6A:83:06:D2:7E:A6:37
Certificate issuer:       /CN=8929036E724281BF4E20D98AD92E7E6645147A68
Certificate serial:       3AF8DCA73BBE0BF9E5039844CF2036B7182C5EBD
Authority key identifier: 89:29:03:6E:72:42:81:BF:4E:20:D9:8A:D9:2E:7E:66:45:14:7A:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8929036E724281BF4E20D98AD92E7E6645147A68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/323830343a373738633a3a2f33322d3332203d3e20323731313835.roa
Signing time:             Fri 23 Feb 2024 17:47:37 +0000
ROA not before:           Fri 23 Feb 2024 17:42:37 +0000
ROA not after:            Fri 21 Feb 2025 17:47:37 +0000
asID:                     271185
IP address blocks:        2804:778c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f8:dc:a7:3b:be:0b:f9:e5:03:98:44:cf:20:36:b7:18:2c:5e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8929036E724281BF4E20D98AD92E7E6645147A68
        Validity
            Not Before: Feb 23 17:42:37 2024 GMT
            Not After : Feb 21 17:47:37 2025 GMT
        Subject: CN=20FC4ABA180EC918B3D86EFAB86A8306D27EA637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9c:ee:e4:49:ab:2a:ba:61:74:72:09:88:62:
                    f2:87:bd:b6:80:07:55:88:00:30:8e:40:20:30:d7:
                    ff:59:8b:41:ea:49:7f:80:6d:ee:f0:40:f9:35:1c:
                    d7:fa:99:5a:1e:7d:1e:33:40:31:b6:e2:e8:c8:27:
                    b5:dc:0d:3c:6f:8b:65:47:e2:d2:dd:b8:c8:7c:a3:
                    0d:15:a7:13:c6:34:a8:c6:38:d7:36:53:76:cb:8c:
                    e2:3c:1e:31:cd:c8:55:02:91:25:66:a0:22:e4:3c:
                    ee:2b:af:7d:4b:f0:9c:cb:1a:43:9e:c1:98:6d:9c:
                    a4:e5:11:9a:1f:6b:23:99:de:0e:d6:0c:14:a9:c2:
                    6f:35:be:c2:19:83:49:25:90:34:d2:69:d1:3d:40:
                    cf:80:66:1c:0a:bb:ad:f2:8b:c2:e0:07:71:b2:da:
                    f5:8c:ad:7e:75:e7:23:a1:84:0f:17:ba:ea:f4:ff:
                    3c:8f:ca:32:72:d8:c1:6b:a7:59:e2:85:66:f1:3b:
                    d0:8c:2f:29:eb:72:d7:28:d8:21:9f:e1:f7:fa:08:
                    20:a3:76:7d:8b:dd:79:da:e1:aa:67:fa:f3:4f:bf:
                    be:a3:2d:8f:b1:67:19:72:f6:da:6a:31:08:8f:c3:
                    fa:b6:6c:0b:8a:2c:77:fb:8b:df:58:34:8c:23:45:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FC:4A:BA:18:0E:C9:18:B3:D8:6E:FA:B8:6A:83:06:D2:7E:A6:37
            X509v3 Authority Key Identifier:
                keyid:89:29:03:6E:72:42:81:BF:4E:20:D9:8A:D9:2E:7E:66:45:14:7A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/8929036E724281BF4E20D98AD92E7E6645147A68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8929036E724281BF4E20D98AD92E7E6645147A68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/323830343a373738633a3a2f33322d3332203d3e20323731313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:778c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:fc:9e:5d:49:22:7a:d3:2c:f0:7f:0a:ee:fd:02:c8:da:32:
         b8:26:c9:1b:4c:fe:7b:a7:1f:60:d1:84:70:bb:09:80:2a:11:
         42:ae:13:c3:02:a8:2d:ab:13:7f:fe:79:72:ee:6e:ab:b3:d2:
         57:75:ba:35:67:32:d2:00:cc:7f:9a:d5:79:cd:6b:11:70:4b:
         dd:5e:fb:e6:b1:21:1a:c1:cf:54:46:b1:c1:28:8b:bb:ce:ca:
         d8:72:63:3c:e6:76:bd:d6:4b:77:15:ab:86:2f:26:51:2e:b7:
         78:fb:ab:cf:45:00:6e:98:e3:f9:2b:ea:f0:6d:39:04:15:fa:
         1d:ea:ea:ed:9a:6e:15:72:cd:93:00:06:7e:2e:c9:bf:a7:2b:
         a1:ab:a2:0a:37:04:ad:1c:c3:4a:07:20:e9:87:64:7a:6a:7c:
         94:ed:bd:56:a0:65:0e:4b:93:90:bf:e9:34:bf:dc:30:6c:0c:
         98:38:15:ac:b9:b5:bb:40:fc:ec:13:fb:8c:a5:17:8e:bf:7f:
         dd:7e:0f:dc:bd:31:17:97:a5:99:2c:ed:3c:8d:92:7f:9e:be:
         25:93:ec:fb:5a:ad:31:df:71:d3:95:fc:8b:22:1b:81:61:c6:
         a6:11:83:5d:40:6f:a5:8a:ec:56:0f:f8:9b:3e:60:2f:31:db:
         1a:17:64:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----