Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/323830343a6431343a3a2f33322d3335203d3e203532353936.roa
File:                     323830343a6431343a3a2f33322d3335203d3e203532353936.roa (raw, json)
Hash identifier:          U5R6GzxLtD5sM5Tvp1yFbVhA0ACIdgm+XEssMbOYn+g=
Subject key identifier:   DC:3C:6E:FD:01:69:A1:92:2E:D8:D1:18:A0:C6:83:E6:EC:B5:5F:9D
Certificate issuer:       /CN=90C2688905F91095963A8A3CEA8A3E287892FA51
Certificate serial:       46B8A685B4A5CC6A4513CE4088EA76A83DF9186D
Authority key identifier: 90:C2:68:89:05:F9:10:95:96:3A:8A:3C:EA:8A:3E:28:78:92:FA:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2688905F91095963A8A3CEA8A3E287892FA51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/323830343a6431343a3a2f33322d3335203d3e203532353936.roa
Signing time:             Fri 26 Jan 2024 11:59:27 +0000
ROA not before:           Fri 26 Jan 2024 11:54:27 +0000
ROA not after:            Fri 24 Jan 2025 11:59:27 +0000
asID:                     52596
IP address blocks:        2804:d14::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b8:a6:85:b4:a5:cc:6a:45:13:ce:40:88:ea:76:a8:3d:f9:18:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C2688905F91095963A8A3CEA8A3E287892FA51
        Validity
            Not Before: Jan 26 11:54:27 2024 GMT
            Not After : Jan 24 11:59:27 2025 GMT
        Subject: CN=DC3C6EFD0169A1922ED8D118A0C683E6ECB55F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:95:9f:c2:fe:e6:3d:06:35:8b:7b:bd:8e:
                    e8:9e:15:5e:7a:5c:70:8b:b3:7a:b8:2b:38:9a:46:
                    75:2b:1a:74:9e:86:0e:26:65:9f:22:ae:e3:d0:af:
                    4d:23:98:ce:b9:7c:43:a6:d8:03:5a:23:6b:f5:f8:
                    0d:88:76:3b:ac:83:b1:eb:0c:a7:18:7f:06:0e:a3:
                    ae:0e:8f:b0:8a:ad:70:0f:55:9a:23:18:71:d6:6e:
                    ea:aa:75:e1:41:cd:b2:94:42:04:5e:60:34:e6:7e:
                    63:7e:d0:70:4e:3e:28:6e:4e:94:44:e4:02:26:03:
                    9c:5e:f6:49:1d:d0:18:b2:a4:99:2b:74:2c:89:f8:
                    f7:f6:7e:ae:93:96:c7:2f:ff:9e:5c:b3:1c:fd:c6:
                    45:36:35:ad:ef:d3:ea:a3:73:87:74:84:5e:0f:7d:
                    ac:e3:48:09:74:26:a8:60:4c:f8:87:6f:66:1f:b4:
                    2d:a6:64:df:95:82:0e:1f:99:b5:7a:ca:aa:0b:26:
                    33:83:1d:ea:6d:85:8d:d7:c8:a1:8c:de:10:dc:c7:
                    27:14:54:82:3b:be:bf:03:e1:33:a1:04:fe:c4:09:
                    22:61:77:e2:22:12:23:e1:07:1c:d7:61:7e:0e:80:
                    1d:b4:d1:24:70:20:3c:b5:c6:9f:68:00:25:35:34:
                    11:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3C:6E:FD:01:69:A1:92:2E:D8:D1:18:A0:C6:83:E6:EC:B5:5F:9D
            X509v3 Authority Key Identifier:
                keyid:90:C2:68:89:05:F9:10:95:96:3A:8A:3C:EA:8A:3E:28:78:92:FA:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/90C2688905F91095963A8A3CEA8A3E287892FA51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2688905F91095963A8A3CEA8A3E287892FA51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/323830343a6431343a3a2f33322d3335203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:a9:d7:c2:e8:6b:a1:9b:50:16:26:c8:2f:fb:d3:3c:3b:85:
         74:92:46:5e:8d:99:f4:65:f1:51:b9:2f:04:78:6f:0a:e3:49:
         9b:89:ba:e9:a6:96:bd:2b:7b:aa:28:80:7a:ed:5a:00:ba:c4:
         7f:eb:3a:a1:52:d3:cc:fc:5a:a6:a1:04:77:ea:67:d9:81:b1:
         94:ec:8f:2a:69:0b:33:d3:e3:26:a5:8d:aa:f6:a2:08:16:7d:
         33:f6:86:ca:18:ff:55:a7:02:36:47:cf:2f:e2:2f:92:e3:d4:
         69:7b:8a:fa:6d:4d:73:75:e0:3f:c1:a5:17:bd:da:98:cf:d6:
         fd:26:c3:01:72:82:6d:37:60:f3:0e:d2:b3:dc:45:c4:c5:ee:
         10:53:38:8d:e9:e1:3e:f6:9c:24:d6:89:2a:a3:de:ce:94:5a:
         22:62:98:eb:04:df:d7:22:f1:79:2a:89:f7:9e:93:22:52:71:
         8d:ec:36:84:a1:b6:db:77:36:2e:a7:b3:09:bc:2e:e9:51:78:
         ad:0d:4a:68:1d:18:b7:c1:8b:fb:0d:8a:01:c2:c3:2c:68:86:
         fb:fa:30:2e:e1:77:e4:d7:e0:64:39:da:9f:7b:15:6c:24:34:
         65:41:03:98:7c:66:e5:bf:0d:71:5d:19:eb:5f:8d:5a:57:22:
         a9:84:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----