Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/323830343a346464633a3a2f33322d3332203d3e20323638323234.roa
File:                     323830343a346464633a3a2f33322d3332203d3e20323638323234.roa (raw, json)
Hash identifier:          qv3F2fzldEw09z2gU/psVwcc66ogp6U3kFrEQKwTnqA=
Subject key identifier:   20:C7:C8:EF:01:A3:D9:B2:B5:44:64:D4:E8:D1:07:72:6A:38:73:2F
Certificate issuer:       /CN=C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8
Certificate serial:       04556B80A91EE6FC6A40AE73A92BBFE178FC4E77
Authority key identifier: C8:0D:67:51:3C:3A:37:B1:DE:16:F8:10:AF:6D:B7:8D:6B:8A:35:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/323830343a346464633a3a2f33322d3332203d3e20323638323234.roa
Signing time:             Mon 04 Mar 2024 13:33:56 +0000
ROA not before:           Mon 04 Mar 2024 13:28:56 +0000
ROA not after:            Mon 03 Mar 2025 13:33:56 +0000
asID:                     268224
IP address blocks:        2804:4ddc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:55:6b:80:a9:1e:e6:fc:6a:40:ae:73:a9:2b:bf:e1:78:fc:4e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8
        Validity
            Not Before: Mar  4 13:28:56 2024 GMT
            Not After : Mar  3 13:33:56 2025 GMT
        Subject: CN=20C7C8EF01A3D9B2B54464D4E8D107726A38732F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:c2:81:8f:36:0c:01:93:11:91:48:16:10:
                    c6:6e:c8:b9:e0:d1:b3:22:2b:b9:d1:a8:f0:32:9c:
                    fa:c3:83:81:dc:8c:15:43:28:74:67:49:14:3d:19:
                    a8:6a:62:c3:04:6a:b0:f1:63:5b:a3:9b:19:9e:95:
                    d4:0f:dd:53:04:93:53:4d:1b:d6:7b:32:a6:c9:6b:
                    2b:fc:40:84:ad:d7:ab:2f:dc:33:73:4e:5c:dc:f8:
                    09:40:c5:67:03:4a:6d:b1:e4:59:0a:52:82:3c:f5:
                    e3:1c:b3:48:5f:67:3c:82:a7:57:89:b3:51:45:c0:
                    6f:ea:60:91:4c:20:fb:e7:39:c7:93:5e:2a:c3:f1:
                    2e:eb:ec:b2:f1:2d:92:36:4e:83:ef:e1:e0:d7:cb:
                    d2:b2:44:54:d9:05:58:10:5d:af:30:42:68:bf:63:
                    45:30:76:da:af:50:d7:da:8a:1d:ff:dc:f3:ff:6c:
                    b0:76:d9:a9:6f:ec:7b:da:a5:f1:52:c7:5e:c8:22:
                    9f:77:57:ac:58:8d:fc:d7:ea:05:82:ff:91:c4:b9:
                    7c:e5:e3:c7:6c:4a:06:53:d8:a7:cd:b5:16:d7:97:
                    83:1b:4e:4f:b3:ab:75:5f:1d:ac:aa:54:bc:5a:9e:
                    ee:16:fe:6d:53:45:f8:f5:34:bf:2b:a9:16:f8:48:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C7:C8:EF:01:A3:D9:B2:B5:44:64:D4:E8:D1:07:72:6A:38:73:2F
            X509v3 Authority Key Identifier:
                keyid:C8:0D:67:51:3C:3A:37:B1:DE:16:F8:10:AF:6D:B7:8D:6B:8A:35:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C80D67513C3A37B1DE16F810AF6DB78D6B8A35F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/1/323830343a346464633a3a2f33322d3332203d3e20323638323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ddc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:5a:09:76:f7:48:a6:90:71:c7:df:83:46:45:9b:5b:fd:74:
         02:dc:b6:41:c9:bf:bc:fd:27:c9:4e:7c:a1:27:31:a4:33:f2:
         d9:cb:b5:ce:a3:1a:bf:6b:e9:36:be:f6:03:c2:20:02:4b:3a:
         ac:ab:36:5b:53:37:bd:92:e2:e7:9f:57:7c:5c:80:38:cd:6d:
         b5:9d:e1:92:38:95:78:07:b6:c7:ec:1c:c7:2d:3f:dc:10:a9:
         ab:d3:97:14:a5:99:34:05:60:4e:4b:a5:70:84:d8:6e:db:71:
         44:46:b8:38:c6:af:ac:49:c3:75:5d:91:60:20:a1:92:46:a2:
         4f:ea:65:5e:a3:9a:87:36:ca:1e:44:2e:18:09:a0:43:7b:f9:
         3a:17:6f:88:f5:e2:27:24:09:37:e9:7e:3b:83:18:d2:7c:0d:
         cc:bf:61:76:3a:d7:a1:22:b6:96:cf:0e:ca:e4:26:90:fc:d4:
         b7:10:30:6e:29:41:f7:35:a6:09:f4:e2:67:e4:74:3f:7a:ee:
         a0:ff:28:3b:f2:4c:04:8a:9e:cb:72:d2:dd:98:d0:0d:7e:6e:
         e1:d4:ea:2d:a0:77:42:41:44:2a:52:d5:59:19:20:ae:7d:df:
         36:6c:4e:6e:c7:2e:90:0b:86:cd:7c:e1:4d:7f:fb:99:21:c3:
         fc:16:a8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----