Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/323830343a346638343a3a2f33322d3332203d3e20323638333331.roa
File:                     323830343a346638343a3a2f33322d3332203d3e20323638333331.roa (raw, json)
Hash identifier:          e2BwbTAgsjoVwLuAJ2BotDKGwdoRdRKYVq+HtKJWqz0=
Subject key identifier:   BF:CB:CD:0F:FB:98:B7:8B:D3:21:70:D0:87:43:EB:B2:47:69:A2:35
Certificate issuer:       /CN=FB55391412BDE10B53428AACB9E329201BF68D11
Certificate serial:       68F4BA31A3003EBDCB68DDB6C54F7EEB15215CB7
Authority key identifier: FB:55:39:14:12:BD:E1:0B:53:42:8A:AC:B9:E3:29:20:1B:F6:8D:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB55391412BDE10B53428AACB9E329201BF68D11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/323830343a346638343a3a2f33322d3332203d3e20323638333331.roa
Signing time:             Wed 28 Feb 2024 18:43:05 +0000
ROA not before:           Wed 28 Feb 2024 18:38:05 +0000
ROA not after:            Wed 26 Feb 2025 18:43:05 +0000
asID:                     268331
IP address blocks:        2804:4f84::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f4:ba:31:a3:00:3e:bd:cb:68:dd:b6:c5:4f:7e:eb:15:21:5c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB55391412BDE10B53428AACB9E329201BF68D11
        Validity
            Not Before: Feb 28 18:38:05 2024 GMT
            Not After : Feb 26 18:43:05 2025 GMT
        Subject: CN=BFCBCD0FFB98B78BD32170D08743EBB24769A235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:24:16:f3:93:5f:f7:e8:ca:58:9d:9e:43:5b:
                    e6:52:fa:63:eb:24:3c:57:68:11:6f:88:f4:6c:3b:
                    99:f0:60:98:c4:67:4a:01:a2:bb:c0:e3:d5:51:f4:
                    62:37:c2:9b:f5:88:8d:99:1d:82:31:4a:e5:0b:0d:
                    f1:d6:f1:43:59:cd:7c:44:74:03:12:cc:37:ee:30:
                    56:28:c5:d0:e7:91:96:aa:1b:76:9c:a5:da:de:06:
                    5d:b0:1e:98:42:ec:a3:e2:ad:49:ec:71:6f:5a:ec:
                    e5:ee:cc:48:30:81:39:7a:65:c5:3b:ef:70:20:56:
                    3f:ef:a9:64:20:e1:3a:bc:e5:5f:59:4f:49:7a:17:
                    fa:33:90:df:d6:70:7a:2e:1f:05:86:37:a9:ef:ec:
                    b6:e8:58:14:2d:ff:83:a2:18:7a:cf:00:60:1c:cb:
                    7c:2e:08:cb:03:59:07:1d:b4:cc:3a:b0:2f:db:bb:
                    fb:62:15:88:18:3d:c5:af:45:a9:34:7b:e2:27:58:
                    92:d3:14:c5:68:eb:7d:3d:7a:d6:63:10:15:33:10:
                    c3:58:fb:4d:05:c8:32:76:5b:b1:8b:a9:85:70:7d:
                    0a:8e:49:f5:f8:5d:e2:4e:5f:00:13:ac:d8:ae:a2:
                    73:40:8f:8e:57:49:93:a0:ab:f9:16:a0:cf:6d:c0:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CB:CD:0F:FB:98:B7:8B:D3:21:70:D0:87:43:EB:B2:47:69:A2:35
            X509v3 Authority Key Identifier:
                keyid:FB:55:39:14:12:BD:E1:0B:53:42:8A:AC:B9:E3:29:20:1B:F6:8D:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/FB55391412BDE10B53428AACB9E329201BF68D11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB55391412BDE10B53428AACB9E329201BF68D11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/323830343a346638343a3a2f33322d3332203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f84::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:93:57:4d:cb:c0:d0:c2:ec:fc:d7:80:49:07:00:11:f4:20:
         b0:61:5e:68:b4:43:0e:c4:da:c3:8a:bf:de:20:1b:5e:c0:a6:
         35:49:ea:c8:2b:a5:a9:54:b4:6f:15:77:a0:73:b9:00:4c:00:
         40:81:a7:a0:3b:07:80:5f:43:01:88:0c:98:57:b8:6b:21:96:
         99:79:ec:64:ba:54:c0:80:c8:dd:88:1f:5a:2b:91:08:1e:16:
         e3:4b:61:46:97:30:11:ef:8a:c8:cf:7b:fc:b8:0d:f1:fc:16:
         d1:4b:e9:98:d4:a9:79:58:e6:da:d5:f3:e0:23:f8:a6:f4:94:
         a9:90:73:19:f7:58:1c:fd:7e:25:99:90:d3:84:4c:f7:a2:1b:
         d3:73:32:f4:3d:10:10:f8:9a:ea:11:d3:8b:1b:5d:d6:b0:ee:
         31:e9:ca:57:f1:d7:e2:e2:75:36:d4:83:69:9f:37:07:87:a9:
         93:42:20:16:45:66:69:b9:58:5e:d0:9c:ba:f6:bf:50:cf:cd:
         7e:ed:e7:ff:2b:1f:a5:e0:f5:b5:1b:51:47:28:a8:7b:85:39:
         91:48:29:8f:08:ff:e4:7d:00:f8:d4:9d:3e:75:3c:b6:2c:5d:
         1e:27:55:69:b2:95:fa:d2:6c:68:e5:e0:e7:f6:f6:07:e2:28:
         6d:7b:c6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----