Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030303a3a2f34382d3438203d3e20323633363631.roa
File:                     323830343a313132383a343030303a3a2f34382d3438203d3e20323633363631.roa (raw, json)
Hash identifier:          r6y0eKMy48Es69Ke6ChdYypSxsKzrhgRQewJMNzvJFw=
Subject key identifier:   37:E7:89:28:98:0D:B7:5C:FA:E5:3A:F5:D9:9C:6F:5F:04:85:49:02
Certificate issuer:       /CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
Certificate serial:       502BFE0C6A5891155C7F8897B8E1AFE32ACD7C77
Authority key identifier: 43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030303a3a2f34382d3438203d3e20323633363631.roa
Signing time:             Fri 01 Apr 2022 14:12:00 +0000
ROA not before:           Fri 01 Apr 2022 14:07:00 +0000
ROA not after:            Fri 31 Mar 2023 14:12:00 +0000
asID:                     263661
IP address blocks:        2804:1128:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2b:fe:0c:6a:58:91:15:5c:7f:88:97:b8:e1:af:e3:2a:cd:7c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
        Validity
            Not Before: Apr  1 14:07:00 2022 GMT
            Not After : Mar 31 14:12:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1b:ba:42:32:79:6f:28:b9:b8:02:50:25:55:
                    22:71:ff:e5:2e:fd:86:69:a7:67:2e:b0:1c:c8:51:
                    09:04:09:ad:20:6c:f7:dd:f1:a3:93:aa:ca:52:e9:
                    0a:f4:91:79:82:50:3b:3f:a8:2b:52:5b:f5:fa:d1:
                    0f:e0:fd:38:36:17:82:a1:c0:97:c6:00:07:b7:d3:
                    91:50:0a:33:92:55:33:6f:10:87:77:8b:ab:28:85:
                    fb:c6:a8:31:0e:34:b5:f1:14:2e:82:c4:ae:90:6a:
                    13:13:e7:90:42:ef:e2:cc:b9:43:d8:1d:57:5c:dd:
                    0c:1d:ad:47:18:2a:e4:03:0f:e8:eb:24:55:74:0a:
                    94:b4:3e:32:58:8f:c6:ad:13:eb:e7:2a:9c:27:b8:
                    b8:e0:17:ac:d6:3c:c0:c8:dd:42:9c:8a:09:6e:ff:
                    75:21:51:c3:e3:d2:c3:9c:1a:f4:a6:4b:36:38:f7:
                    f1:f3:b1:64:1a:fb:8a:dd:c5:52:0a:ec:13:c1:3c:
                    4e:5d:5c:c1:0b:dc:1c:53:aa:75:00:4d:b3:ad:78:
                    68:05:18:b4:88:7e:39:25:36:64:3b:4f:97:7f:77:
                    d0:46:8e:25:2d:2f:a8:9b:d4:7e:6d:87:0b:4b:aa:
                    12:d6:2b:d4:0e:f6:a7:9a:f4:cf:54:4b:98:eb:e0:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E7:89:28:98:0D:B7:5C:FA:E5:3A:F5:D9:9C:6F:5F:04:85:49:02
            X509v3 Authority Key Identifier:
                keyid:43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030303a3a2f34382d3438203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:23:39:cc:a0:6b:cb:d9:a5:7d:49:92:ae:32:12:30:1f:27:
         40:9d:c0:59:76:e7:0e:71:0e:bc:00:1e:4f:10:f9:c1:52:e2:
         95:c7:f5:e1:01:c4:47:26:9d:2c:23:22:91:74:52:ca:0b:44:
         14:49:3c:31:eb:23:dc:ad:17:54:55:84:5a:86:e1:09:c5:f7:
         38:1a:8b:31:ce:cb:34:34:a5:ef:74:51:f4:e1:d7:e6:24:69:
         1e:cb:89:39:79:61:53:d1:f0:e4:a6:14:b5:c4:82:eb:7e:04:
         8d:80:26:d2:a8:76:74:a0:90:80:ea:0c:56:36:0c:64:a3:18:
         5b:0c:82:68:ab:26:b0:4b:61:eb:d9:01:55:16:2c:1e:22:2b:
         a1:73:6b:a3:3a:13:2a:79:89:11:2f:38:74:c6:44:13:c4:2b:
         65:38:bd:87:4b:32:d3:dc:81:80:1c:c0:05:8f:d3:10:4f:0d:
         65:ea:b2:dc:62:3d:09:9d:c5:93:1a:0e:c1:c8:d8:5b:2e:09:
         79:26:47:a9:a2:2c:31:cb:58:ae:b1:bf:c9:c7:71:1b:1c:e7:
         b9:80:3b:c7:a0:b5:e0:93:20:43:80:a5:e3:13:c5:d8:52:9a:
         6b:a6:50:49:2d:d5:9b:e4:a7:e1:72:1c:00:91:6b:58:03:c7:
         a5:15:fd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----