Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/323830343a343064343a3a2f33322d3332203d3e20323635393834.roa
File:                     323830343a343064343a3a2f33322d3332203d3e20323635393834.roa (raw, json)
Hash identifier:          Lqp0xtGJQOK+GbzODm11mCxKTUz50YObNVMBybGDM1w=
Subject key identifier:   8F:BC:CE:BB:99:F1:BB:54:4D:6A:63:17:22:05:92:12:B4:D6:40:CC
Certificate issuer:       /CN=8A0675049E75A43515562A7F8B3BEE3E74C4F50C
Certificate serial:       6B35724DE2402EADA1B749D83C0F195A17A35B26
Authority key identifier: 8A:06:75:04:9E:75:A4:35:15:56:2A:7F:8B:3B:EE:3E:74:C4:F5:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A0675049E75A43515562A7F8B3BEE3E74C4F50C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/323830343a343064343a3a2f33322d3332203d3e20323635393834.roa
Signing time:             Fri 09 Feb 2024 22:11:49 +0000
ROA not before:           Fri 09 Feb 2024 22:06:49 +0000
ROA not after:            Fri 07 Feb 2025 22:11:49 +0000
asID:                     265984
IP address blocks:        2804:40d4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:35:72:4d:e2:40:2e:ad:a1:b7:49:d8:3c:0f:19:5a:17:a3:5b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A0675049E75A43515562A7F8B3BEE3E74C4F50C
        Validity
            Not Before: Feb  9 22:06:49 2024 GMT
            Not After : Feb  7 22:11:49 2025 GMT
        Subject: CN=8FBCCEBB99F1BB544D6A631722059212B4D640CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:90:b6:b4:05:a4:1b:6c:90:c7:32:4b:4c:46:
                    8a:e1:c7:32:e5:50:ff:d5:0e:cc:e6:73:81:95:41:
                    60:19:85:bc:cf:75:00:15:24:c3:76:d6:a4:c7:fa:
                    2c:ed:93:f3:24:08:42:45:d9:a4:29:85:0b:d7:fc:
                    8c:cf:b3:6b:d7:48:a3:30:4b:49:fc:9f:19:10:f6:
                    5a:16:66:87:f9:b5:27:21:f3:4c:6e:4d:4e:34:8b:
                    3c:db:76:ef:49:9e:1c:09:08:69:db:8f:18:b2:4f:
                    cc:dc:4c:e7:b3:12:26:a1:2e:22:68:8c:64:d7:52:
                    61:71:ce:0f:00:7d:bf:ae:95:30:10:19:b3:0e:48:
                    50:09:36:ed:a0:05:46:ff:88:10:9e:86:8c:b4:c9:
                    7a:a8:c4:cc:96:cb:62:4a:8e:bb:8f:27:80:36:af:
                    11:d8:ec:d5:46:a5:d7:d5:1b:97:2a:6e:53:db:30:
                    89:e5:a4:10:bd:fa:d5:17:2c:84:69:d0:76:32:15:
                    98:4e:b3:30:6d:dc:c1:e5:2a:8e:d0:2b:a7:12:3b:
                    f1:55:6b:c7:a2:5b:e8:3a:ff:d4:fc:5b:e7:9e:a3:
                    23:74:b5:a8:d9:d0:07:fb:6c:a3:e8:18:d1:e0:86:
                    33:a4:81:56:b5:23:98:49:ec:64:fe:18:6e:0e:e5:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BC:CE:BB:99:F1:BB:54:4D:6A:63:17:22:05:92:12:B4:D6:40:CC
            X509v3 Authority Key Identifier:
                keyid:8A:06:75:04:9E:75:A4:35:15:56:2A:7F:8B:3B:EE:3E:74:C4:F5:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/8A0675049E75A43515562A7F8B3BEE3E74C4F50C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A0675049E75A43515562A7F8B3BEE3E74C4F50C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/323830343a343064343a3a2f33322d3332203d3e20323635393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:7d:f9:1a:36:72:ce:12:8a:ae:4c:b9:68:b5:e6:b9:1d:5d:
         8a:1d:0c:4b:6b:37:49:4b:e1:48:f6:42:b0:27:70:0f:18:75:
         a3:a2:0d:99:6c:05:28:b1:e4:8e:50:74:73:73:9a:53:17:89:
         0f:55:91:1c:d9:3f:cf:46:68:77:fb:a9:a7:4c:0e:e1:6b:10:
         9b:ca:ba:39:36:20:4b:f3:ee:18:6f:d1:f5:8b:36:f4:77:f8:
         dd:7d:20:00:23:ae:7e:8a:88:27:74:fd:0d:96:b9:10:68:71:
         a8:43:33:fa:04:a9:4f:14:58:2d:a5:d0:a9:2a:dd:a7:d6:08:
         99:c3:2b:ec:3f:e3:ea:ab:43:d4:85:b2:72:51:80:06:73:16:
         10:d3:21:71:af:ff:86:1e:ef:f8:b5:1c:15:e4:80:ae:48:dd:
         fa:9b:40:c7:53:52:a2:18:30:3e:a4:8e:16:20:d6:8b:99:e9:
         41:20:3e:cc:bc:bf:c5:22:bb:c4:24:8f:16:1d:6c:b3:64:29:
         9c:dd:ab:bf:63:9b:17:e9:d1:9d:c4:75:c2:94:e8:06:b4:cf:
         ce:10:c9:c6:8f:07:4e:17:d1:2a:42:dd:b9:a9:60:61:71:c5:
         cc:b6:11:4a:b5:6f:b5:79:34:6d:21:95:49:b2:2f:12:28:55:
         01:14:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----