Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/323830343a323936633a3a2f33322d3332203d3e20323634303134.roa
File:                     323830343a323936633a3a2f33322d3332203d3e20323634303134.roa (raw, json)
Hash identifier:          FyqpklBHuGo/w2DJFOEU2R/JTAzMzLG4Laq4EG0x9nc=
Subject key identifier:   E7:CE:22:0C:AF:23:88:90:CD:F7:BD:98:98:FB:5A:12:C4:D3:DB:FC
Certificate issuer:       /CN=00FA2D01D8B63D0877FDEA947F6CAA98B3346C08
Certificate serial:       38450EBD20171C8EE82DBFBB47EE7D958A60230F
Authority key identifier: 00:FA:2D:01:D8:B6:3D:08:77:FD:EA:94:7F:6C:AA:98:B3:34:6C:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FA2D01D8B63D0877FDEA947F6CAA98B3346C08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/323830343a323936633a3a2f33322d3332203d3e20323634303134.roa
Signing time:             Fri 08 Mar 2024 20:14:31 +0000
ROA not before:           Fri 08 Mar 2024 20:09:31 +0000
ROA not after:            Fri 07 Mar 2025 20:14:31 +0000
asID:                     264014
IP address blocks:        2804:296c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:45:0e:bd:20:17:1c:8e:e8:2d:bf:bb:47:ee:7d:95:8a:60:23:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00FA2D01D8B63D0877FDEA947F6CAA98B3346C08
        Validity
            Not Before: Mar  8 20:09:31 2024 GMT
            Not After : Mar  7 20:14:31 2025 GMT
        Subject: CN=E7CE220CAF238890CDF7BD9898FB5A12C4D3DBFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:97:5b:47:46:69:10:53:9b:c3:c4:dc:9f:07:
                    47:db:2e:03:c2:7c:cd:78:14:ac:e9:5c:0a:79:0a:
                    09:b6:b6:b5:f4:f9:cc:f5:f1:64:2a:c4:f5:84:44:
                    8e:b6:a7:d0:5e:af:5b:58:88:d0:73:a7:88:d8:a9:
                    a5:da:0f:46:ef:a6:16:87:60:5a:ee:87:f6:77:bb:
                    eb:d4:d6:69:c1:d4:66:06:26:2f:38:83:c9:26:9f:
                    ee:71:20:9b:69:5b:63:de:fc:70:c0:55:eb:36:f3:
                    3a:bc:c2:f1:44:bd:cc:a8:e3:65:af:c1:63:6e:67:
                    b3:8d:f2:0c:2f:78:40:50:a1:70:ef:90:41:ab:b8:
                    81:70:69:38:43:a2:f9:bf:9a:05:ac:db:04:36:7d:
                    64:13:01:08:e8:1e:35:f5:61:73:54:fd:7f:19:46:
                    15:87:3c:c8:ac:72:fb:80:8b:26:49:c3:78:99:59:
                    c5:2b:1f:ab:c1:ea:bf:ec:17:55:78:88:8a:b9:42:
                    e3:da:2a:e1:13:e7:ab:0b:b5:de:f3:9d:9f:41:80:
                    7c:12:fb:bd:2c:90:c6:80:24:cd:6b:a9:89:94:95:
                    70:b7:96:30:51:7d:3c:c3:9c:42:2c:65:f3:0e:27:
                    ee:12:30:e7:44:79:b1:29:77:60:0b:73:42:a5:dd:
                    ed:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CE:22:0C:AF:23:88:90:CD:F7:BD:98:98:FB:5A:12:C4:D3:DB:FC
            X509v3 Authority Key Identifier:
                keyid:00:FA:2D:01:D8:B6:3D:08:77:FD:EA:94:7F:6C:AA:98:B3:34:6C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/00FA2D01D8B63D0877FDEA947F6CAA98B3346C08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FA2D01D8B63D0877FDEA947F6CAA98B3346C08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/323830343a323936633a3a2f33322d3332203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:296c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:eb:3b:59:85:3f:e6:90:a9:95:a5:e3:95:73:2e:b5:49:c8:
         b5:70:66:c4:e9:c4:3b:23:69:fe:2a:5b:80:66:19:f5:69:3b:
         8e:d7:3b:f2:92:00:3e:49:47:cf:e4:a2:4e:72:ff:24:f4:b1:
         a0:1a:9f:e6:cd:d9:dd:0d:8f:20:9b:08:55:55:a6:9d:e3:cd:
         57:3a:ae:b0:33:42:72:75:7f:09:e4:20:09:eb:88:87:a8:9f:
         50:a4:ab:1e:d2:e9:5c:c8:67:f2:b3:bd:08:f3:94:ae:ff:19:
         f7:85:4b:ae:02:7f:07:5b:3f:7e:78:84:0c:ad:fe:43:fd:1f:
         a1:06:f4:f5:b7:22:6f:bf:0e:2e:fb:df:39:e9:de:6f:16:6c:
         d1:67:e0:ab:72:12:c6:ba:77:37:8c:dd:67:f4:26:2d:30:4b:
         38:9b:ad:d2:96:a3:f3:ea:e8:5a:85:82:c9:a1:56:d3:5f:03:
         63:c1:74:9f:23:14:7a:a4:80:76:c8:87:c4:27:e4:6b:cf:cf:
         d3:a6:75:a6:3f:b6:0c:b3:07:04:84:9c:fc:83:fd:91:d9:71:
         d2:67:3f:e7:89:cb:c4:c4:72:94:f8:da:8f:53:b3:c5:0d:7d:
         e0:e5:38:d2:ac:ee:c2:58:26:dc:ca:79:a1:1a:58:fc:e9:f7:
         62:aa:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----