Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a3a2f33332d3333203d3e20323639363437.roa
File:                     323830343a363762633a3a2f33332d3333203d3e20323639363437.roa (raw, json)
Hash identifier:          E8iDWugh72q8mvzWPyhrrEnuuUnrRi+GkkSBNneQNNM=
Subject key identifier:   8E:48:99:72:80:26:28:A5:A9:09:24:84:43:93:CE:B3:4D:01:D0:E6
Certificate issuer:       /CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
Certificate serial:       7CF7C784076B0F6B8DBA96941D8DAB057C62DE7C
Authority key identifier: 7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a3a2f33332d3333203d3e20323639363437.roa
Signing time:             Wed 20 Mar 2024 18:37:08 +0000
ROA not before:           Wed 20 Mar 2024 18:32:08 +0000
ROA not after:            Wed 19 Mar 2025 18:37:08 +0000
asID:                     269647
IP address blocks:        2804:67bc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f7:c7:84:07:6b:0f:6b:8d:ba:96:94:1d:8d:ab:05:7c:62:de:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
        Validity
            Not Before: Mar 20 18:32:08 2024 GMT
            Not After : Mar 19 18:37:08 2025 GMT
        Subject: CN=8E489972802628A5A90924844393CEB34D01D0E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:2d:d0:3c:d8:19:81:ac:3c:06:0a:ff:cf:
                    4c:d5:a2:10:53:bb:6b:71:ae:0e:eb:4d:72:d6:7e:
                    40:94:a5:82:5b:30:ad:ce:37:21:2e:10:54:43:38:
                    f1:e4:db:56:4a:b2:a8:97:f4:d7:be:ac:e8:1b:df:
                    1c:b6:2d:4e:4c:7f:04:e0:2d:33:f7:93:58:47:e6:
                    b4:4d:e5:7d:36:91:84:fe:a0:70:65:18:54:3d:0c:
                    3b:0c:ea:1b:3a:00:61:d3:44:3e:2f:01:ed:ad:48:
                    dd:a4:0d:5e:c9:5c:72:b9:61:d2:5f:ce:87:8b:f4:
                    80:17:23:49:9f:f9:4a:78:94:2e:75:72:fc:08:4e:
                    f3:c1:58:9e:5a:f7:81:26:2c:e3:9d:eb:0c:14:c5:
                    52:b4:8c:d7:92:9f:9d:0c:01:d1:03:98:b5:a9:64:
                    98:63:c1:83:be:57:a4:80:01:fe:0b:92:43:10:18:
                    4a:dd:89:cb:e7:25:55:5f:b1:2d:e0:9d:e6:e5:5a:
                    fb:0b:ee:22:1d:b8:23:8f:d3:69:30:42:34:5d:32:
                    1c:67:7b:7a:d6:1c:fb:d8:0e:c3:f3:c9:e4:f6:52:
                    9c:42:c8:78:c2:87:62:6f:e7:72:3e:4b:6f:1d:83:
                    10:1d:6b:37:3c:f1:f1:c2:3b:fa:00:17:ed:92:9b:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:48:99:72:80:26:28:A5:A9:09:24:84:43:93:CE:B3:4D:01:D0:E6
            X509v3 Authority Key Identifier:
                keyid:7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a3a2f33332d3333203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc::/33

    Signature Algorithm: sha256WithRSAEncryption
         62:04:72:aa:4d:ed:ba:46:7a:6c:f8:4a:f8:ae:a0:f3:cc:54:
         b6:e0:96:83:29:05:a9:e2:ad:3f:39:97:a8:53:9e:4d:e8:7b:
         c8:a4:dc:b2:da:35:21:6b:49:20:23:f3:d0:63:c5:9b:93:fc:
         03:3c:ec:43:d6:34:5c:6b:23:46:22:c8:79:a6:92:c6:fc:ad:
         02:a0:fa:81:b7:00:01:ec:0c:2e:4d:66:16:57:6e:ba:5c:df:
         24:ad:ea:97:ba:8a:6a:19:0c:be:47:f5:5b:63:48:21:54:6a:
         c2:9b:5b:70:96:ac:03:43:c8:1f:f9:13:09:e1:e0:b0:1f:71:
         e5:2d:d3:ca:6d:c9:17:42:be:e3:a6:f2:73:9e:4c:76:94:dd:
         f5:c6:af:57:21:06:5a:8f:d0:c9:a4:77:da:65:db:42:eb:85:
         d2:41:0c:1f:40:1a:fc:02:6e:f7:26:1e:e5:5a:9d:4e:14:6d:
         d1:0c:f8:89:71:2a:91:db:5f:54:c9:7f:11:15:9a:e6:70:38:
         54:75:0d:35:a8:34:87:56:8f:3b:7f:c1:91:56:f2:7c:07:cd:
         4a:dd:97:52:e6:cd:cc:77:99:5b:db:07:d6:41:cd:96:96:04:
         94:0a:ed:97:64:21:2d:6b:d9:c6:0d:ad:92:ae:56:4a:e0:2a:
         e3:34:76:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----