Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/323830343a323837303a3a2f33322d3438203d3e203532383633.roa
File:                     323830343a323837303a3a2f33322d3438203d3e203532383633.roa (raw, json)
Hash identifier:          OxunkGxYMqgBOWSLLFuzklGVLQzYMv5qqFWJigWZtic=
Subject key identifier:   60:63:43:5A:AA:82:6C:39:74:A4:96:A3:3E:E2:30:7C:CC:5A:0D:D8
Certificate issuer:       /CN=B110FC9A0C8E264375E85C314B1FC94C5746603D
Certificate serial:       41B101F899A300D52AEEA7CF727A4FBDE3EE8D78
Authority key identifier: B1:10:FC:9A:0C:8E:26:43:75:E8:5C:31:4B:1F:C9:4C:57:46:60:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/323830343a323837303a3a2f33322d3438203d3e203532383633.roa
Signing time:             Sun 17 Mar 2024 16:00:00 +0000
ROA not before:           Sun 17 Mar 2024 15:55:00 +0000
ROA not after:            Mon 17 Mar 2025 16:00:00 +0000
asID:                     52863
IP address blocks:        2804:2870::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b1:01:f8:99:a3:00:d5:2a:ee:a7:cf:72:7a:4f:bd:e3:ee:8d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B110FC9A0C8E264375E85C314B1FC94C5746603D
        Validity
            Not Before: Mar 17 15:55:00 2024 GMT
            Not After : Mar 17 16:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:cf:78:6e:be:fa:8f:fd:4f:a4:46:df:aa:
                    3d:ec:bf:8a:ba:82:15:a3:b9:be:e7:da:e4:3c:68:
                    73:19:bc:39:39:76:1d:8b:39:cd:a5:0e:6b:9d:37:
                    02:3b:d4:77:7a:c8:cc:1d:15:eb:3f:46:43:e1:0c:
                    bd:ea:93:72:aa:ce:72:3d:36:c8:56:d4:d4:4f:e4:
                    f1:f0:2a:68:03:ab:b1:f4:a8:93:98:55:45:08:dc:
                    a4:d8:28:bd:83:5d:52:5e:a0:3b:2d:72:7e:2b:60:
                    b4:96:8c:74:2a:21:ec:66:86:73:63:38:45:57:ae:
                    38:10:f1:42:2f:f6:fe:de:a0:e2:4e:59:8c:c1:45:
                    2a:2c:e8:1c:08:15:96:f2:69:ae:3e:d8:4b:a6:f9:
                    ba:c3:92:71:cb:d9:ea:9b:99:a7:13:52:bc:4a:db:
                    84:3b:3b:80:3c:83:0d:33:f3:99:9f:ac:fc:29:cb:
                    c9:af:1f:75:a0:09:44:ee:57:e3:6d:48:41:77:11:
                    fc:d0:a1:8a:57:46:ae:58:19:52:b6:45:42:26:ec:
                    7c:c8:25:25:88:83:5c:b8:41:e7:9a:00:fe:e4:a7:
                    22:17:91:4e:87:9e:94:87:f8:49:24:e2:02:76:6b:
                    7a:61:85:1b:21:2c:8a:36:9a:dc:5b:9a:09:1e:f3:
                    a0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:63:43:5A:AA:82:6C:39:74:A4:96:A3:3E:E2:30:7C:CC:5A:0D:D8
            X509v3 Authority Key Identifier:
                keyid:B1:10:FC:9A:0C:8E:26:43:75:E8:5C:31:4B:1F:C9:4C:57:46:60:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/323830343a323837303a3a2f33322d3438203d3e203532383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2870::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:3d:e4:b1:d6:65:d0:6a:8d:b8:67:8f:b0:ce:46:45:f5:3b:
         47:9b:7a:54:8c:97:7d:cf:49:ca:d8:98:11:5a:21:65:45:7f:
         fb:1c:e8:fe:a3:d0:78:63:cb:ea:4a:36:8e:6a:3a:57:b6:0d:
         7f:ae:3b:a4:74:23:f7:28:33:bf:d1:dd:c1:d9:92:66:63:1e:
         37:0c:2f:c1:5a:d6:94:5a:c6:24:76:21:a8:bb:a4:60:1c:b1:
         f9:5a:20:5c:5a:25:06:8c:1f:83:fe:b6:bf:ea:58:62:4a:8c:
         62:e7:da:d8:ab:b0:72:07:8d:ed:c3:f1:1b:2b:e8:d0:a5:6d:
         dd:c4:15:a2:a2:2b:c5:17:bd:c2:5d:73:29:bf:8a:b3:39:41:
         76:bf:d9:bf:75:0b:e6:25:71:37:4c:c7:d9:90:2d:bb:dd:c1:
         bd:25:10:23:5c:e4:5f:1c:72:d9:5e:05:9b:13:1a:25:b3:c9:
         a4:c1:c2:b1:92:4e:79:18:db:95:ff:39:74:47:3f:e0:1e:28:
         8a:6a:d0:4e:60:8c:54:bf:88:8a:af:fa:f4:99:39:47:25:d1:
         c3:e1:10:93:5a:2d:a6:af:ec:05:b8:7b:7d:d3:28:55:9c:c2:
         87:83:fb:b3:06:10:94:32:e5:40:14:40:a9:61:63:00:69:76:
         72:86:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----