Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/0/323830343a376437633a3a2f33322d3438203d3e20323731353634.roa
File:                     323830343a376437633a3a2f33322d3438203d3e20323731353634.roa (raw, json)
Hash identifier:          Arw8D+U4Vu9AgNSzEITmKBiYeBmsXSQZ3/2dhcd1oYA=
Subject key identifier:   16:C9:D4:74:14:EB:D3:03:D8:92:24:53:7C:FC:E8:A4:C1:F2:54:3B
Certificate issuer:       /CN=F1DACCA6A12D21B00471FADDC409E740FDB5D640
Certificate serial:       11D2FF79642904676AC67333DD1A7548F0B41FDA
Authority key identifier: F1:DA:CC:A6:A1:2D:21:B0:04:71:FA:DD:C4:09:E7:40:FD:B5:D6:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1DACCA6A12D21B00471FADDC409E740FDB5D640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/0/323830343a376437633a3a2f33322d3438203d3e20323731353634.roa
Signing time:             Tue 02 Jan 2024 17:33:38 +0000
ROA not before:           Tue 02 Jan 2024 17:28:38 +0000
ROA not after:            Tue 31 Dec 2024 17:33:38 +0000
asID:                     271564
IP address blocks:        2804:7d7c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d2:ff:79:64:29:04:67:6a:c6:73:33:dd:1a:75:48:f0:b4:1f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1DACCA6A12D21B00471FADDC409E740FDB5D640
        Validity
            Not Before: Jan  2 17:28:38 2024 GMT
            Not After : Dec 31 17:33:38 2024 GMT
        Subject: CN=16C9D47414EBD303D89224537CFCE8A4C1F2543B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:e0:21:b6:7f:07:92:43:38:22:35:56:b7:
                    60:d5:da:92:28:ee:3e:01:e7:5d:09:f5:b4:1c:29:
                    f1:8c:dc:b6:b2:70:50:40:9a:08:f6:41:74:db:d3:
                    c5:85:7a:8a:cc:25:75:7f:b8:84:4c:21:da:5b:e4:
                    3d:b8:5e:5b:3d:25:df:87:0e:f7:4b:ad:5b:e0:03:
                    2f:b3:75:f3:dc:50:db:86:af:8e:d0:7d:05:62:83:
                    1e:a4:f7:63:dc:1b:51:ad:3a:74:d0:6f:08:3e:e9:
                    2b:26:8a:6c:25:e4:f7:72:90:1e:d6:42:34:c0:5b:
                    48:16:ef:5a:b7:85:35:20:93:4a:82:09:38:b1:2c:
                    81:32:b4:34:ef:5a:77:52:1c:21:c2:1f:81:cf:5f:
                    73:2e:e7:a7:2d:9a:d9:24:43:29:1e:41:28:dd:b2:
                    4e:5b:21:34:b0:b2:ad:f4:8b:41:bf:d6:7c:11:04:
                    a2:f9:8d:9f:8b:b0:17:eb:69:cf:a1:68:51:29:82:
                    a2:0e:65:b4:7a:de:17:88:4c:dc:6c:a1:18:8a:62:
                    57:bb:03:e5:66:3f:9c:ea:65:57:75:8c:0d:eb:14:
                    cf:93:aa:3c:56:4a:f7:e0:6b:b3:26:b2:cd:63:7f:
                    f0:ea:67:df:04:9a:22:f2:87:c6:e5:09:50:6b:57:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C9:D4:74:14:EB:D3:03:D8:92:24:53:7C:FC:E8:A4:C1:F2:54:3B
            X509v3 Authority Key Identifier:
                keyid:F1:DA:CC:A6:A1:2D:21:B0:04:71:FA:DD:C4:09:E7:40:FD:B5:D6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/0/F1DACCA6A12D21B00471FADDC409E740FDB5D640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1DACCA6A12D21B00471FADDC409E740FDB5D640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/0/323830343a376437633a3a2f33322d3438203d3e20323731353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:7f:4f:c4:52:71:e3:a6:1c:7d:9d:0a:02:92:32:e9:65:91:
         0f:16:5c:f3:73:9c:52:67:60:8a:7b:53:f8:97:4d:ea:ab:4e:
         26:d4:85:a3:8f:c6:11:9e:5a:b8:5f:ab:10:4c:cd:ff:ce:7b:
         44:98:98:b4:94:cb:ff:56:42:79:a3:3f:e3:77:4c:ef:3d:49:
         33:8d:f0:34:05:cf:0e:9b:00:0b:6d:a4:8f:8b:b8:39:0c:4a:
         01:a2:dd:ca:5c:e6:44:2c:60:ec:6f:a1:2d:c5:73:86:14:1f:
         2b:5d:97:8a:00:2a:99:00:b5:4b:45:2e:3f:17:44:8c:d1:1c:
         36:0a:9f:dd:96:16:21:dd:36:66:03:95:fa:60:b1:d3:f6:48:
         07:d4:d3:ff:91:8e:40:83:12:dd:59:8a:d8:12:c1:23:df:52:
         9f:f0:3e:ab:34:c9:0b:b8:e9:e4:f6:41:55:bc:14:44:a4:21:
         f2:da:99:0d:8f:63:ea:3a:62:e5:a3:6d:7c:25:d0:a3:11:c6:
         06:29:5b:77:d1:21:1b:2b:bd:00:06:61:57:e8:2d:35:11:51:
         35:69:5c:af:5f:e3:c0:43:c9:59:20:90:c3:8e:1f:ef:2c:dc:
         5c:a0:f6:47:11:6a:23:c1:13:14:ac:ad:13:4f:a7:b7:a3:7e:
         f4:99:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----