Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343034303a3a2f34332d3433203d3e20323638383538.roa
File:                     323830343a356239633a343034303a3a2f34332d3433203d3e20323638383538.roa (raw, json)
Hash identifier:          KNvjUYV+1nHxq1EVRZy73OgANKgAt6UALx8grQIYkrM=
Subject key identifier:   F2:32:39:61:50:0C:10:69:05:12:37:74:B1:7F:DD:A4:50:F1:46:3A
Certificate issuer:       /CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
Certificate serial:       2F3E326F033BDBE07A9039CDE311D5125FE273C6
Authority key identifier: C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343034303a3a2f34332d3433203d3e20323638383538.roa
Signing time:             Tue 05 Mar 2024 20:10:28 +0000
ROA not before:           Tue 05 Mar 2024 20:05:28 +0000
ROA not after:            Tue 04 Mar 2025 20:10:28 +0000
asID:                     268858
IP address blocks:        2804:5b9c:4040::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3e:32:6f:03:3b:db:e0:7a:90:39:cd:e3:11:d5:12:5f:e2:73:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Validity
            Not Before: Mar  5 20:05:28 2024 GMT
            Not After : Mar  4 20:10:28 2025 GMT
        Subject: CN=F2323961500C106905123774B17FDDA450F1463A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:81:e2:46:41:b5:16:96:bd:82:3e:b9:e3:
                    3a:c0:fb:6d:2a:29:7c:91:f6:c8:2e:c4:7a:57:0c:
                    35:90:91:7b:e9:87:39:85:0d:31:b9:bc:f5:69:b7:
                    e8:a3:5f:32:f3:83:59:13:07:46:52:43:7e:4f:82:
                    a8:41:c0:b1:04:39:16:3f:69:8f:34:cf:31:cb:5c:
                    dc:80:d5:70:a9:b2:be:7a:25:b5:2f:91:6c:8b:82:
                    18:60:82:5f:8e:d8:df:ab:10:2a:bd:df:c3:a7:79:
                    b9:94:26:7f:9d:a0:66:66:93:22:da:59:fc:30:67:
                    1c:68:37:33:9c:ca:0d:30:74:1b:4d:40:7d:51:f8:
                    10:62:e5:53:d2:ec:46:54:50:df:94:42:24:9c:56:
                    39:7d:2c:f7:4a:4e:e7:c6:74:c0:2f:56:a9:b6:16:
                    5a:7b:36:fc:a6:d4:ab:c3:05:cb:58:b0:00:dd:62:
                    71:a7:8d:8f:da:ff:ea:82:1a:ab:c4:0c:d2:cb:99:
                    70:30:ca:da:01:27:63:6f:f0:ad:bc:7e:61:04:ec:
                    aa:f1:b5:fb:0b:cf:c7:a9:f0:b4:83:5a:66:92:f2:
                    1f:20:9d:4d:c4:51:6f:14:1c:20:48:ba:96:ab:11:
                    8c:e3:45:9f:b4:a6:6a:6e:e8:ff:c2:f7:c4:f1:b9:
                    c3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:32:39:61:50:0C:10:69:05:12:37:74:B1:7F:DD:A4:50:F1:46:3A
            X509v3 Authority Key Identifier:
                keyid:C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/323830343a356239633a343034303a3a2f34332d3433203d3e20323638383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b9c:4040::/43

    Signature Algorithm: sha256WithRSAEncryption
         73:e4:da:41:61:4f:80:a6:df:e9:bf:08:85:1d:e8:87:9c:a6:
         59:68:73:7b:1c:4f:fd:81:0e:21:a5:6b:e5:e7:36:d3:db:d3:
         5a:bc:b1:d8:58:2a:6d:73:17:c3:60:f4:55:e3:39:4c:77:21:
         7f:0f:b9:b1:08:6e:cd:c5:67:9b:2e:36:14:20:e9:9e:df:a9:
         c2:e5:f3:44:33:49:58:49:80:2f:de:5e:0f:85:06:61:62:22:
         c5:b3:81:10:b0:f6:29:22:12:7d:8b:a7:d1:94:d0:56:7a:2b:
         a9:a4:69:cd:8f:61:22:f2:96:4f:8b:10:87:fd:50:bd:2c:ac:
         3d:52:2a:c4:54:72:32:9f:fb:6d:bc:a1:f1:42:9d:ea:a2:0f:
         7e:e3:18:81:a8:5a:a7:51:43:15:fb:f4:5c:7c:23:b6:59:47:
         34:c1:47:a5:9d:9c:86:ab:a4:2d:82:28:e2:4d:3a:a8:41:07:
         8c:d5:d1:7f:bb:70:97:88:3d:f0:8b:44:cc:88:b9:5a:5c:b1:
         69:c4:9b:69:8d:8b:bc:15:1b:77:96:5a:27:dc:cb:73:16:a2:
         53:c7:5d:d9:5f:81:8a:c9:8b:d1:a4:71:4d:e2:52:f3:1f:de:
         97:fb:10:d5:1b:02:74:94:04:9b:0a:00:01:de:ec:f3:0a:57:
         2b:30:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----