Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/323830343a323837303a3a2f33322d3438203d3e203532383633.roa
File:                     323830343a323837303a3a2f33322d3438203d3e203532383633.roa (raw, json)
Hash identifier:          rHoTbvb9iRe/SbwGe0ReSJERn0QK9GcwPwMbgCC13q4=
Subject key identifier:   8F:85:BA:72:C3:80:2F:1D:D4:FB:5A:B4:90:38:DA:F5:B3:B8:32:FA
Certificate issuer:       /CN=D1D8C77A34CB2B0044058D74160F7A20912778C1
Certificate serial:       6105B939B8BA2E696882CA5C1F1AFD65CF355352
Authority key identifier: D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/323830343a323837303a3a2f33322d3438203d3e203532383633.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     52863
IP address blocks:        2804:2870::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:05:b9:39:b8:ba:2e:69:68:82:ca:5c:1f:1a:fd:65:cf:35:53:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1D8C77A34CB2B0044058D74160F7A20912778C1
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100CAB97B7201DAB64CF1DEF2B8B87325F55A4BE81C8D567E415003F014E154C481B4BAA904943547A14510A6201907E4D87F68E42C59A208556C7D187F2166EC7ECE5DBDB6E6FCC0AC0F3AEDA6916FDCB42588A97998125C880B94BC58EE44A36CEB188E51DB060FACD7A2F91745B20264EF8E63A532E55A71D7CCFD9010C068BFB8CE30DC3B1C35E0112DF97076174BFDA7EBA5DD8B7BE75111F4F1E91327C174238CA4A5172C5DDDC0FCA48A8CA2CE9505173CD5C072BD74377F555E97841537C67C2BD5D665127E81E64E35211B5E49113566AEC431F1FD436BBABEA6F12B008CD3EF3A53DE29965EF7A28BFA03244F4235F7E75AB0270F3B0CA4559B9F2A990203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:7b:72:01:da:b6:4c:f1:de:f2:b8:b8:73:
                    25:f5:5a:4b:e8:1c:8d:56:7e:41:50:03:f0:14:e1:
                    54:c4:81:b4:ba:a9:04:94:35:47:a1:45:10:a6:20:
                    19:07:e4:d8:7f:68:e4:2c:59:a2:08:55:6c:7d:18:
                    7f:21:66:ec:7e:ce:5d:bd:b6:e6:fc:c0:ac:0f:3a:
                    ed:a6:91:6f:dc:b4:25:88:a9:79:98:12:5c:88:0b:
                    94:bc:58:ee:44:a3:6c:eb:18:8e:51:db:06:0f:ac:
                    d7:a2:f9:17:45:b2:02:64:ef:8e:63:a5:32:e5:5a:
                    71:d7:cc:fd:90:10:c0:68:bf:b8:ce:30:dc:3b:1c:
                    35:e0:11:2d:f9:70:76:17:4b:fd:a7:eb:a5:dd:8b:
                    7b:e7:51:11:f4:f1:e9:13:27:c1:74:23:8c:a4:a5:
                    17:2c:5d:dd:c0:fc:a4:8a:8c:a2:ce:95:05:17:3c:
                    d5:c0:72:bd:74:37:7f:55:5e:97:84:15:37:c6:7c:
                    2b:d5:d6:65:12:7e:81:e6:4e:35:21:1b:5e:49:11:
                    35:66:ae:c4:31:f1:fd:43:6b:ba:be:a6:f1:2b:00:
                    8c:d3:ef:3a:53:de:29:96:5e:f7:a2:8b:fa:03:24:
                    4f:42:35:f7:e7:5a:b0:27:0f:3b:0c:a4:55:9b:9f:
                    2a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:85:BA:72:C3:80:2F:1D:D4:FB:5A:B4:90:38:DA:F5:B3:B8:32:FA
            X509v3 Authority Key Identifier:
                keyid:D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/323830343a323837303a3a2f33322d3438203d3e203532383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2870::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:72:3c:1f:f2:2b:9a:e9:20:ec:c2:07:fb:4a:da:67:e5:5d:
         83:1c:6f:99:27:e1:c4:78:e0:9f:63:84:d4:24:ba:84:af:2c:
         7c:c4:b1:6d:13:bb:c9:c1:1e:d7:90:13:a4:86:5c:bf:af:37:
         b9:f3:24:9e:70:92:7b:78:9a:44:6c:e9:9a:d3:c3:b7:89:45:
         af:a2:5a:12:89:55:4e:8d:08:e0:39:f0:4d:c8:89:c3:32:7b:
         2c:f2:bd:ff:b1:6a:da:cd:54:72:b4:20:9f:02:bd:44:cc:10:
         53:1f:f9:29:f4:73:6d:1a:cc:20:63:7f:ec:99:1c:56:de:90:
         35:7f:1f:e6:5a:45:8a:53:de:a8:23:92:6e:54:78:bd:2b:b6:
         38:5d:d1:53:a2:89:20:49:d9:6c:af:1b:a6:9c:d5:a2:6f:e7:
         2b:b8:d0:fe:fb:da:60:b0:1f:f7:0f:d7:b3:f3:21:96:0c:3e:
         ff:ae:80:aa:e5:4c:66:9b:cb:87:03:ad:18:81:b1:fc:77:35:
         eb:75:17:bc:8b:76:b4:7d:85:39:f1:a4:32:ec:a7:30:5c:68:
         42:43:0c:b4:7e:04:3d:61:48:2a:f3:d6:48:c8:ce:ab:7d:90:
         c4:00:4d:de:45:55:a3:1f:4f:bd:cc:f1:06:0f:05:a2:a4:24:
         91:92:3b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----