Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a3a2f33322d3333203d3e20323638353239.roa
File:                     323830343a353239633a3a2f33322d3333203d3e20323638353239.roa (raw, json)
Hash identifier:          PAYhX5kIQzNOaFN8LD3JO0Ve8er2c2UJQKdOfsn9oPM=
Subject key identifier:   11:BA:4C:88:EF:6D:8C:7A:46:61:4A:28:BA:EA:43:FC:08:F9:38:F8
Certificate issuer:       /CN=B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91
Certificate serial:       10AB94A2F72E11B1A2C63A453C0E7B3E3A7D0D03
Authority key identifier: B8:DE:D0:BB:11:A7:9F:1A:40:E8:D4:D5:A7:BF:83:BC:EF:BE:4F:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a3a2f33322d3333203d3e20323638353239.roa
Signing time:             Fri 16 Dec 2022 17:51:10 +0000
ROA not before:           Fri 16 Dec 2022 17:46:10 +0000
ROA not after:            Fri 15 Dec 2023 17:51:10 +0000
asID:                     268529
IP address blocks:        2804:529c::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ab:94:a2:f7:2e:11:b1:a2:c6:3a:45:3c:0e:7b:3e:3a:7d:0d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91
        Validity
            Not Before: Dec 16 17:46:10 2022 GMT
            Not After : Dec 15 17:51:10 2023 GMT
        Subject: CN=11BA4C88EF6D8C7A46614A28BAEA43FC08F938F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:96:9b:fa:36:c3:95:4d:76:6a:cc:fe:90:
                    49:4b:d4:f8:43:13:18:95:78:df:94:e1:ec:40:b9:
                    a1:22:56:ee:af:47:9c:1b:5b:90:33:ba:e1:1f:a4:
                    34:46:29:ac:f5:ec:7e:01:d8:22:40:44:1c:ca:73:
                    e0:9d:7a:1c:d7:0a:6f:5c:3d:d0:f4:16:1d:7a:9a:
                    58:cd:1f:b6:f8:9f:72:b9:29:86:7d:10:a4:0f:c1:
                    61:94:82:34:6e:1d:9c:9c:20:58:ef:fd:68:f9:3a:
                    59:c3:e2:bd:50:a9:cb:aa:f2:90:65:6e:4d:12:10:
                    0f:22:0c:92:a8:aa:da:c7:7c:a8:fa:a9:ec:67:af:
                    84:f5:97:c5:91:e1:e7:ed:8d:0e:17:52:5b:f8:0f:
                    dc:1c:92:ef:91:4c:8f:25:e1:62:38:78:50:45:74:
                    bd:90:0a:e1:a4:39:51:7f:3c:c3:1f:cc:15:dc:90:
                    a1:ec:cb:be:12:3e:c6:5b:45:7b:0f:59:75:0c:f2:
                    0e:58:75:5d:e7:61:53:42:da:bc:c5:ac:ae:60:21:
                    12:5f:71:42:24:b3:90:0e:31:3f:2f:27:a5:13:fb:
                    ad:5c:98:65:07:f6:82:0a:6f:d2:05:99:00:de:2b:
                    70:d5:31:3c:2e:bb:7c:46:5b:d7:6c:40:16:bc:1b:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BA:4C:88:EF:6D:8C:7A:46:61:4A:28:BA:EA:43:FC:08:F9:38:F8
            X509v3 Authority Key Identifier:
                keyid:B8:DE:D0:BB:11:A7:9F:1A:40:E8:D4:D5:A7:BF:83:BC:EF:BE:4F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/323830343a353239633a3a2f33322d3333203d3e20323638353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:529c::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:17:69:22:99:5e:ff:0e:bc:a8:a2:9e:de:de:0a:e1:4d:71:
         b2:17:39:d8:3a:d7:2f:43:4d:cf:78:03:cf:9c:b1:fd:b8:55:
         78:4c:f9:80:0f:59:ef:f2:15:37:da:3f:50:17:09:e3:fb:7d:
         68:bc:ca:8f:9e:a0:79:25:a4:c6:c0:02:e8:6e:5e:52:f0:d2:
         78:87:2a:88:6e:b6:da:14:7a:15:de:89:1c:35:81:0d:40:82:
         92:40:93:5f:98:7d:94:37:68:2c:58:a9:68:3b:a7:e7:e8:7f:
         c2:f7:de:38:f7:47:69:f1:d3:1b:5a:1d:b2:af:64:2b:bf:ec:
         09:4c:bb:c3:63:b9:0c:5b:73:75:61:e1:34:59:dc:37:ee:8f:
         a6:a0:c1:af:44:0d:71:3c:88:5d:3a:62:1f:90:e9:64:5b:32:
         03:96:0c:2d:ed:e1:e3:ed:8e:c8:db:9d:eb:52:3e:d8:d1:50:
         66:6b:34:1a:7b:1e:34:92:bd:7b:69:79:82:cf:95:13:3f:4c:
         83:92:18:88:6b:ac:57:e3:f0:59:4d:65:3f:f1:8e:c2:42:61:
         38:60:ed:cc:87:44:4d:55:24:3d:81:50:b9:d0:42:2b:3f:92:
         2b:b4:e7:f7:92:48:4f:32:10:a9:68:48:db:86:15:02:cb:4e:
         24:8c:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----