Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/323830343a353932633a383030303a3a2f33332d3333203d3e20323638313733.roa
File:                     323830343a353932633a383030303a3a2f33332d3333203d3e20323638313733.roa (raw, json)
Hash identifier:          h0GWENWMUFZAcVNnftVHBP6f5yMmgVlAl25fkZr9Oa0=
Subject key identifier:   22:F4:2C:CC:B1:82:F3:2D:4E:FC:9E:0A:94:6D:C0:FC:04:48:5B:C2
Certificate issuer:       /CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
Certificate serial:       54944373D3AACA198496F86E7FA541E21B0463DC
Authority key identifier: 35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/323830343a353932633a383030303a3a2f33332d3333203d3e20323638313733.roa
Signing time:             Tue 15 Aug 2023 18:23:07 +0000
ROA not before:           Tue 15 Aug 2023 18:18:07 +0000
ROA not after:            Tue 13 Aug 2024 18:23:07 +0000
asID:                     268173
IP address blocks:        2804:592c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:94:43:73:d3:aa:ca:19:84:96:f8:6e:7f:a5:41:e2:1b:04:63:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
        Validity
            Not Before: Aug 15 18:18:07 2023 GMT
            Not After : Aug 13 18:23:07 2024 GMT
        Subject: CN=22F42CCCB182F32D4EFC9E0A946DC0FC04485BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:ab:b9:f6:bb:80:52:fb:fb:12:76:74:73:
                    7e:8a:54:0f:45:36:13:10:fd:db:6f:8e:1d:22:b8:
                    eb:76:05:cd:e7:15:00:8a:c5:f9:2c:64:25:e6:11:
                    5f:65:92:e0:91:9d:29:bf:d2:19:0d:d7:7b:53:10:
                    ac:d7:9f:99:de:4b:3b:2f:08:e0:2d:35:e1:45:41:
                    67:6f:1b:e5:a8:8d:ae:c9:2e:6e:19:e6:94:8e:f8:
                    d4:3b:12:b6:15:52:4d:42:0d:5d:a2:a6:5a:b9:67:
                    8f:e9:e0:23:53:8b:51:76:41:55:1f:94:5c:f1:69:
                    55:92:ae:14:7e:a3:d5:76:cc:68:ac:91:67:3c:24:
                    c8:4c:0f:8b:ec:14:13:4b:47:e3:58:85:e6:a6:41:
                    dd:06:11:59:01:84:f5:0f:65:ba:20:ff:65:4d:28:
                    40:54:49:1d:74:50:60:bb:63:09:a6:18:70:5a:5d:
                    49:d5:79:08:e4:d9:b8:e5:25:75:fe:60:2f:6b:86:
                    ce:88:61:ce:37:68:ae:58:1b:aa:75:5d:81:73:fc:
                    1a:98:de:d8:ce:d5:54:a4:bb:67:82:0d:b8:2e:e6:
                    90:76:00:62:8d:8e:c9:62:b7:49:a7:1d:a1:34:9d:
                    48:0e:82:59:e2:b2:c4:53:6f:08:93:09:91:f6:a2:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:2C:CC:B1:82:F3:2D:4E:FC:9E:0A:94:6D:C0:FC:04:48:5B:C2
            X509v3 Authority Key Identifier:
                keyid:35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/323830343a353932633a383030303a3a2f33332d3333203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:592c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:f3:11:92:63:01:78:d7:69:01:ab:6d:d5:76:44:12:c8:ac:
         90:7b:f4:33:11:a7:56:5c:21:86:7a:74:41:04:32:f1:8d:ab:
         db:ec:e3:2e:cd:b8:37:c1:42:2b:03:c4:f3:66:28:d7:8d:85:
         76:9a:c9:2b:62:20:df:c2:36:01:97:94:d4:c8:00:b9:8f:41:
         9d:d7:53:0f:cd:dd:9a:f1:09:3a:8c:03:3c:b4:8e:27:a5:20:
         e1:60:97:bb:d0:c1:25:30:ec:18:0c:d6:e8:03:21:6c:89:44:
         bf:7a:9b:52:6c:be:0d:d2:e7:9d:1e:46:61:cf:e7:38:1d:b0:
         15:33:bc:3d:e3:fc:1a:78:3d:00:e4:77:e4:11:db:4d:51:73:
         0a:54:89:45:ac:24:64:0e:68:17:a6:ac:90:fd:59:83:fa:b2:
         a8:5f:1a:96:5e:21:f4:df:e1:3d:d2:f0:5c:15:02:cf:fd:08:
         e2:2c:7b:69:1a:40:5d:69:dc:81:c7:bf:a3:ee:4e:ab:36:b8:
         dd:9c:bc:39:77:fd:82:25:84:70:ed:59:11:9f:5a:1f:54:40:
         b3:f9:83:6d:d8:b1:a8:93:84:13:e3:ef:9f:bb:19:d8:67:67:
         be:26:1e:98:cc:9c:cf:a4:0c:0b:bb:54:db:be:36:b9:b0:c5:
         56:e5:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----