Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/323830343a323439303a3a2f33322d3438203d3e20323634323330.roa
File:                     323830343a323439303a3a2f33322d3438203d3e20323634323330.roa (raw, json)
Hash identifier:          hpPIzd2ntFrftNxPkPlsyszvk5pxBuRDk5kKZaXyAVQ=
Subject key identifier:   FE:8E:12:84:D6:AB:78:F7:54:39:33:C7:95:F1:8C:CC:01:B2:84:12
Certificate issuer:       /CN=FC96EBB6A0A2968F71730ACB4C004194AFD1085E
Certificate serial:       0BBAD21FED941C32ED47AAF97ACE284CF1F4CA18
Authority key identifier: FC:96:EB:B6:A0:A2:96:8F:71:73:0A:CB:4C:00:41:94:AF:D1:08:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/323830343a323439303a3a2f33322d3438203d3e20323634323330.roa
Signing time:             Wed 13 Mar 2024 14:23:41 +0000
ROA not before:           Wed 13 Mar 2024 14:18:41 +0000
ROA not after:            Wed 12 Mar 2025 14:23:41 +0000
asID:                     264230
IP address blocks:        2804:2490::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ba:d2:1f:ed:94:1c:32:ed:47:aa:f9:7a:ce:28:4c:f1:f4:ca:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC96EBB6A0A2968F71730ACB4C004194AFD1085E
        Validity
            Not Before: Mar 13 14:18:41 2024 GMT
            Not After : Mar 12 14:23:41 2025 GMT
        Subject: CN=FE8E1284D6AB78F7543933C795F18CCC01B28412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:7e:28:b2:80:aa:01:b3:42:47:4d:51:22:
                    92:0a:29:9c:39:a2:a1:0f:47:2a:39:27:c8:3e:69:
                    8a:44:7a:00:0b:2a:f3:ab:35:41:ab:59:75:a9:17:
                    85:ef:51:5d:da:b5:f3:3b:ee:65:c5:1e:b2:8d:fb:
                    77:10:2b:97:18:74:6f:00:39:37:68:44:d5:b2:7b:
                    d4:39:f0:f8:39:1b:71:d0:85:62:63:30:68:10:09:
                    ad:f7:2a:79:4f:26:f4:70:19:f5:1f:9a:b9:42:e0:
                    2a:49:20:b0:eb:25:4c:29:b3:d4:04:43:1d:cc:d5:
                    b0:a6:4e:3b:09:6e:fa:d9:73:3f:16:fc:71:46:61:
                    d2:8e:e4:87:67:45:3c:36:41:4d:ee:07:77:71:16:
                    7b:11:25:d0:70:88:18:34:be:eb:42:4d:6f:09:d4:
                    5a:77:d3:a3:a0:5a:a5:ce:46:32:8a:c5:a2:ac:6c:
                    a8:f9:c5:ff:8c:86:ff:10:ad:c6:28:48:15:a3:85:
                    a8:f3:83:6e:1a:22:60:59:fe:bd:39:a6:3a:0a:80:
                    16:43:95:a6:6d:46:35:5f:2c:95:37:cc:bd:91:32:
                    d0:cb:06:a5:12:ad:bd:bc:e7:b2:d9:9b:99:eb:47:
                    b1:f4:34:5a:e8:9e:14:ab:ee:9b:46:e2:1b:2b:63:
                    f7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8E:12:84:D6:AB:78:F7:54:39:33:C7:95:F1:8C:CC:01:B2:84:12
            X509v3 Authority Key Identifier:
                keyid:FC:96:EB:B6:A0:A2:96:8F:71:73:0A:CB:4C:00:41:94:AF:D1:08:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/323830343a323439303a3a2f33322d3438203d3e20323634323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2490::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:5b:1b:5a:96:20:65:16:7d:b3:4e:ff:a9:a1:01:be:5b:cf:
         4b:3c:b2:51:45:a2:09:b7:77:a2:61:fb:5a:93:00:70:3d:46:
         d6:06:5b:61:b9:5f:2e:b7:3a:bf:31:85:ba:28:41:9c:37:38:
         3e:c6:ea:c8:c7:2c:21:5f:4c:7d:b2:c7:ad:27:76:e9:b5:ac:
         27:3c:9e:d0:87:35:63:1b:ac:64:e5:c5:72:a1:60:84:b8:cc:
         55:18:46:eb:77:65:21:97:03:c7:d6:9b:bf:2c:3c:66:db:7d:
         92:b4:26:ab:ee:1a:13:ea:d9:da:50:a3:89:e0:ee:af:ad:6d:
         42:ea:df:7d:a4:3c:e9:82:1f:7d:f8:6e:64:3e:a1:99:61:84:
         99:0f:7e:66:a5:30:69:14:f5:c9:d0:94:7f:a1:9f:dd:00:0b:
         95:11:96:8f:c3:2a:c7:8d:fd:21:f4:9d:6c:ab:cd:b0:df:30:
         c1:d5:cf:7f:90:41:49:bb:89:f5:ec:33:d1:cf:46:07:c7:4e:
         8e:10:c6:a4:5d:a1:95:e8:d8:dc:f0:a8:99:62:0e:13:f2:f9:
         cc:33:02:e5:86:db:ca:ce:d7:ab:d6:16:c0:e1:cb:66:d0:06:
         f8:f0:63:4e:ef:a3:46:b2:b8:8d:0b:c2:b9:ec:66:c5:c6:32:
         50:a9:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----