Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/1/323830343a323031303a3a2f33322d3438203d3e20323634343632.roa
File:                     323830343a323031303a3a2f33322d3438203d3e20323634343632.roa (raw, json)
Hash identifier:          2SZEcznRZU2yQ1gDH9TJAm4UD/3Cid12ArBEUeu85dc=
Subject key identifier:   48:F7:2A:EF:78:99:08:9F:EA:02:57:72:81:C6:F9:16:2B:DD:CC:B3
Certificate issuer:       /CN=DFDF417F1FA3347AD7D01DCA6C1918478A3297B0
Certificate serial:       1D92D195C9D16C1D9B07E4250BE0E897F2750FFE
Authority key identifier: DF:DF:41:7F:1F:A3:34:7A:D7:D0:1D:CA:6C:19:18:47:8A:32:97:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFDF417F1FA3347AD7D01DCA6C1918478A3297B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/1/323830343a323031303a3a2f33322d3438203d3e20323634343632.roa
Signing time:             Wed 10 Apr 2024 19:42:21 +0000
ROA not before:           Wed 10 Apr 2024 19:37:21 +0000
ROA not after:            Wed 09 Apr 2025 19:42:21 +0000
asID:                     264462
IP address blocks:        2804:2010::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:92:d1:95:c9:d1:6c:1d:9b:07:e4:25:0b:e0:e8:97:f2:75:0f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFDF417F1FA3347AD7D01DCA6C1918478A3297B0
        Validity
            Not Before: Apr 10 19:37:21 2024 GMT
            Not After : Apr  9 19:42:21 2025 GMT
        Subject: CN=48F72AEF7899089FEA02577281C6F9162BDDCCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:18:a0:27:22:e3:b1:e3:08:93:79:74:ae:
                    1f:4b:62:dd:13:61:e0:25:7d:11:c6:82:ec:58:d9:
                    3c:2e:5c:46:73:61:22:84:bf:0a:d4:13:17:0b:21:
                    39:18:d4:e3:10:fc:18:db:2f:99:20:f8:f4:2b:c0:
                    80:43:9b:91:5c:63:d1:82:3d:48:d4:60:97:22:c7:
                    7d:1a:3b:99:b9:a7:1a:b6:4f:54:04:6e:6e:d0:e8:
                    b3:f3:a8:3c:09:47:eb:1d:4c:29:7d:6d:df:f0:90:
                    a0:3a:3f:25:f1:81:47:c0:4b:01:a8:00:d0:0d:4d:
                    40:88:c8:8c:ba:f8:e4:c3:50:ac:ad:0d:28:c9:2c:
                    47:39:a4:9f:8d:04:bb:cd:38:87:7d:b9:cd:57:f3:
                    ce:bf:0e:2b:08:ce:78:b0:d6:d5:8a:c4:a1:40:ef:
                    69:1a:09:37:8c:52:f4:a5:b2:95:c5:f5:02:be:78:
                    af:bc:2d:92:f6:44:41:ca:dd:85:fb:0f:1c:54:69:
                    d9:54:e9:6a:be:0a:34:b3:f4:36:b6:b4:6e:34:f6:
                    1a:5b:c1:84:96:0c:55:fe:ed:b1:0a:51:da:02:a0:
                    b1:e3:53:5f:bf:2e:6b:71:01:6a:25:25:79:dd:ba:
                    a5:b2:90:69:25:0f:c8:72:78:ae:08:94:4e:f2:6b:
                    d8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F7:2A:EF:78:99:08:9F:EA:02:57:72:81:C6:F9:16:2B:DD:CC:B3
            X509v3 Authority Key Identifier:
                keyid:DF:DF:41:7F:1F:A3:34:7A:D7:D0:1D:CA:6C:19:18:47:8A:32:97:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/1/DFDF417F1FA3347AD7D01DCA6C1918478A3297B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFDF417F1FA3347AD7D01DCA6C1918478A3297B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/1/323830343a323031303a3a2f33322d3438203d3e20323634343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2010::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:35:68:00:d9:af:74:7b:58:ac:fd:6c:81:75:5a:85:64:0b:
         35:6b:c8:4c:e3:52:03:5b:1a:09:60:0c:a5:8d:85:55:94:01:
         bc:fb:71:25:73:83:e2:3a:b1:db:a1:54:0d:63:0b:aa:3e:d1:
         59:78:3b:4a:72:5c:f0:25:09:54:47:ac:bf:c8:80:a1:ad:69:
         51:4f:bb:41:e1:cf:a6:cd:1a:8e:49:4e:7d:06:94:e6:8f:18:
         e6:f4:50:96:98:14:bc:8e:9a:75:03:1f:e0:54:98:4a:b0:33:
         58:7d:d9:9b:c9:e1:5b:f4:f7:f5:f6:0c:3f:b8:e1:aa:79:64:
         9f:1b:87:9f:67:f6:b0:9f:bf:2e:d4:01:ad:bf:7b:26:ec:03:
         be:46:11:83:3d:40:8c:dd:95:c1:9b:d6:c9:09:0c:e2:4e:7a:
         cf:1f:0f:2d:77:0f:c8:35:e1:b7:0a:22:be:df:6a:41:f4:c1:
         5e:69:33:90:73:c4:44:25:5d:5c:4d:e0:13:c7:91:e8:1e:16:
         bc:50:d7:34:9d:4e:68:f5:85:63:ac:37:81:6a:b2:d2:b9:bd:
         0e:41:d4:87:2d:1f:99:23:7f:b7:81:99:5d:6f:48:af:6f:0d:
         d5:67:a3:06:5a:43:cd:ad:51:35:73:a8:a3:64:d4:48:88:7d:
         f1:1c:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----