Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/323830343a336637633a3a2f33322d3335203d3e20323635383936.roa
File:                     323830343a336637633a3a2f33322d3335203d3e20323635383936.roa (raw, json)
Hash identifier:          aRsYzUZcBYimU3grgCJ/BSKrdFzARy+6Wwqptga06kA=
Subject key identifier:   9A:3E:64:5B:FF:C3:D7:9E:35:8E:43:5C:CE:C6:1B:1C:A2:5E:2D:29
Certificate issuer:       /CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
Certificate serial:       0B438DF65942CFAE2BC2BEC19FF6A67B7F53C876
Authority key identifier: 77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/323830343a336637633a3a2f33322d3335203d3e20323635383936.roa
Signing time:             Sat 23 Mar 2024 09:44:38 +0000
ROA not before:           Sat 23 Mar 2024 09:39:38 +0000
ROA not after:            Sat 22 Mar 2025 09:44:38 +0000
asID:                     265896
IP address blocks:        2804:3f7c::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:43:8d:f6:59:42:cf:ae:2b:c2:be:c1:9f:f6:a6:7b:7f:53:c8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
        Validity
            Not Before: Mar 23 09:39:38 2024 GMT
            Not After : Mar 22 09:44:38 2025 GMT
        Subject: CN=9A3E645BFFC3D79E358E435CCEC61B1CA25E2D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:a9:40:bd:f9:63:5d:e8:63:cd:ec:47:71:
                    cb:18:7f:1f:dd:03:cc:98:a2:6a:67:b9:f5:b6:b0:
                    31:33:69:83:61:f4:5b:28:68:53:76:a5:85:3a:b6:
                    71:ec:ed:97:07:1a:38:69:e9:ae:77:55:ed:f9:4f:
                    05:f0:03:3b:a6:df:a0:cb:1c:b8:d7:86:44:cb:dd:
                    54:54:db:d9:cc:f0:06:bd:ac:a2:0d:fd:f0:0b:90:
                    02:5d:e7:a3:c3:40:19:ae:42:9f:03:c4:6a:a2:76:
                    1d:10:1f:b3:a4:29:4f:43:fd:27:6c:1c:40:d5:44:
                    37:77:e6:b7:97:1f:a9:d1:d0:e9:d8:22:b6:c9:01:
                    19:5a:86:02:68:12:2a:34:c1:5a:2e:2f:98:7f:68:
                    29:c6:ed:ac:dc:65:7a:f1:62:5f:5d:e9:53:32:23:
                    c5:b6:b7:1e:21:34:43:ac:98:c2:a7:dd:22:3c:1e:
                    18:9c:75:3a:ad:21:85:24:4b:49:93:a7:f5:1d:3d:
                    d3:cf:a8:cc:03:28:0d:60:31:06:dd:9f:ed:2a:d4:
                    7f:e5:37:d8:b8:b9:5d:d0:f8:9e:6d:3d:86:cf:fa:
                    a2:64:31:ca:d3:9e:3e:69:b8:de:2d:0b:45:c6:09:
                    27:ba:99:fb:c7:8f:d7:af:4c:59:35:cd:ae:da:86:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3E:64:5B:FF:C3:D7:9E:35:8E:43:5C:CE:C6:1B:1C:A2:5E:2D:29
            X509v3 Authority Key Identifier:
                keyid:77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/323830343a336637633a3a2f33322d3335203d3e20323635383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:39:e5:3a:26:8f:74:91:63:8c:8b:25:ea:c2:20:68:97:80:
         59:75:88:7c:ec:4b:82:3f:75:5f:05:d3:91:64:21:d5:be:c9:
         41:54:55:f8:e6:a4:17:4c:4e:9a:68:ef:9d:f9:b0:2f:cf:b7:
         43:34:c5:36:28:c6:f3:7b:47:96:96:6e:69:f1:31:41:7f:89:
         44:a9:73:d6:c4:4b:dc:e9:f9:6f:fb:bc:29:b0:8b:a1:80:81:
         fa:1d:5e:f9:ad:0b:4e:7d:65:c1:98:49:5d:03:21:89:96:53:
         2a:c0:26:0c:8a:b3:d0:a0:2a:44:55:f7:bb:39:5b:33:eb:f4:
         51:5e:27:e5:24:ca:08:1c:bc:58:fd:d8:00:b7:27:95:8a:1c:
         e1:64:06:c6:69:60:ad:ae:20:be:13:9e:09:67:20:2e:ae:8d:
         00:c7:b3:2f:71:10:0c:c5:70:09:81:6b:e7:1f:3f:36:e7:8f:
         70:4f:4f:2f:6d:a3:c3:50:93:96:2b:ba:79:55:1b:ec:c1:d7:
         88:87:6b:c0:6b:9c:a4:00:79:ed:f6:c6:14:ae:15:62:d4:6f:
         78:ea:ad:34:58:ad:c9:1e:4a:b5:13:fe:bf:2d:f8:62:79:1c:
         30:29:11:a3:fe:f9:be:31:e5:28:67:bb:80:ca:88:7f:14:7d:
         7f:3b:24:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----