Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/323830343a336437633a3a2f33322d3438203d3e20323636353334.roa
File:                     323830343a336437633a3a2f33322d3438203d3e20323636353334.roa (raw, json)
Hash identifier:          cA/Er11eUK0yj8nWWdoH6Has5gY0GzZHsRd2hEzkaGw=
Subject key identifier:   2E:8E:DC:76:62:AA:0C:94:8C:40:06:04:3C:E5:AF:2E:86:DD:1A:D9
Certificate issuer:       /CN=A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF
Certificate serial:       5186C14AFBEC5CA50C206B9E57FDC3BF7C6EA305
Authority key identifier: A4:7C:07:A7:16:BE:0D:71:F4:2F:D5:5C:B8:40:8F:D9:B6:3F:8C:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/323830343a336437633a3a2f33322d3438203d3e20323636353334.roa
Signing time:             Thu 14 Sep 2023 20:34:01 +0000
ROA not before:           Thu 14 Sep 2023 20:29:01 +0000
ROA not after:            Thu 12 Sep 2024 20:34:01 +0000
asID:                     266534
IP address blocks:        2804:3d7c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:86:c1:4a:fb:ec:5c:a5:0c:20:6b:9e:57:fd:c3:bf:7c:6e:a3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF
        Validity
            Not Before: Sep 14 20:29:01 2023 GMT
            Not After : Sep 12 20:34:01 2024 GMT
        Subject: CN=2E8EDC7662AA0C948C4006043CE5AF2E86DD1AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:81:14:56:d0:dd:eb:d8:f2:02:47:0d:41:96:
                    fd:d9:29:28:5b:78:46:f6:44:ad:b8:4f:b7:bc:25:
                    a3:ef:40:ee:07:6b:b3:75:5f:fa:6e:c7:a3:cf:16:
                    fa:67:c8:07:f6:f1:5e:b3:59:c5:df:9c:9c:ea:b5:
                    28:2c:d5:5d:f2:43:03:6e:a8:10:ff:8b:e0:ba:f7:
                    fc:f1:1b:99:f2:33:92:24:06:1b:de:f6:ba:22:44:
                    72:67:cc:3e:16:81:87:c6:c5:20:ff:36:a1:89:02:
                    66:a0:25:69:17:cf:52:68:ae:c9:b6:7f:8e:a5:54:
                    a3:52:d0:ec:3a:79:b1:c2:d9:32:99:a5:01:e6:e5:
                    f7:9d:14:fd:b4:93:7f:af:f3:98:20:41:d5:02:10:
                    97:48:65:68:f3:c2:2d:cc:f8:a1:47:75:a0:18:97:
                    23:5f:69:c5:7b:f4:ac:3d:a2:11:86:6a:ad:06:e2:
                    b8:95:14:d1:84:dc:b5:ef:77:f4:15:2a:c7:48:a0:
                    24:be:06:2b:9d:18:5a:11:d7:9d:c8:90:db:24:f1:
                    6c:dc:34:48:cd:9e:73:cc:38:84:cf:37:61:09:52:
                    87:08:dd:17:9b:55:12:27:b1:f3:38:df:81:00:11:
                    a1:52:ac:0a:be:1d:18:bc:48:43:66:d9:b5:c7:1e:
                    1e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8E:DC:76:62:AA:0C:94:8C:40:06:04:3C:E5:AF:2E:86:DD:1A:D9
            X509v3 Authority Key Identifier:
                keyid:A4:7C:07:A7:16:BE:0D:71:F4:2F:D5:5C:B8:40:8F:D9:B6:3F:8C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/323830343a336437633a3a2f33322d3438203d3e20323636353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:34:3a:21:3d:07:7c:e0:5a:3a:fe:1e:4b:2d:dc:58:ce:48:
         d0:2f:4b:b2:ed:22:7f:5b:3a:f9:0a:0a:7f:65:3f:7c:78:5a:
         76:8e:a4:28:b0:2a:36:af:1c:27:04:ab:b5:cc:9a:07:ba:fc:
         3c:71:61:62:e0:d6:5c:f6:b1:43:3a:0d:49:ca:b9:2e:07:eb:
         02:ac:e9:5d:99:40:bc:7d:b7:16:50:79:a9:72:5f:25:3f:83:
         f2:c1:0c:52:e3:4f:11:aa:3a:22:0b:10:1d:b4:ca:89:13:57:
         3b:c5:e6:0d:f4:b4:6b:2e:da:03:d2:3f:64:62:11:66:1b:57:
         4c:5c:af:b4:96:9f:19:b8:ec:39:fe:40:4c:aa:dc:55:5e:d9:
         5f:24:4d:b8:ef:16:8e:b5:6c:a8:43:63:82:74:50:94:50:78:
         04:b7:3f:d5:a1:b2:80:db:55:3a:d6:f9:7c:1c:9a:4d:05:de:
         6a:04:09:a8:92:fc:d6:42:4c:fa:88:f2:7f:67:f5:86:26:25:
         a6:3e:02:1b:93:ea:af:a5:3e:88:0a:5f:d7:58:2c:19:65:ad:
         cd:0f:5d:3c:fb:79:90:0a:12:be:ce:16:3e:3e:a2:17:a7:cd:
         eb:5b:81:37:8a:e7:d0:4b:f9:3d:f6:5e:af:25:a0:3b:c0:4d:
         af:6d:a1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----