Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030313a3a2f34382d3438203d3e20323633363631.roa
File:                     323830343a313132383a343030313a3a2f34382d3438203d3e20323633363631.roa (raw, json)
Hash identifier:          c0gGaVERLS7NLfLTEuJQ1cyo0ZnHIwGRSf0ZilMH4HU=
Subject key identifier:   7F:2F:C4:5F:09:13:F0:30:44:74:73:CD:03:99:16:33:70:F8:91:A4
Certificate issuer:       /CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
Certificate serial:       1B2E47276729C070C0EB74F96854C2BD5382EB23
Authority key identifier: 43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030313a3a2f34382d3438203d3e20323633363631.roa
Signing time:             Mon 06 Jun 2022 14:31:44 +0000
ROA not before:           Mon 06 Jun 2022 14:26:44 +0000
ROA not after:            Mon 05 Jun 2023 14:31:44 +0000
asID:                     263661
IP address blocks:        2804:1128:4001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2e:47:27:67:29:c0:70:c0:eb:74:f9:68:54:c2:bd:53:82:eb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
        Validity
            Not Before: Jun  6 14:26:44 2022 GMT
            Not After : Jun  5 14:31:44 2023 GMT
        Subject: CN=3082010A0282010100C28D71BC5879EC876F8BB3F536612FCFDDE9744513ADE136F55DFC450962BAF66F4EE9F051CD07F01CF9A4D08EBB734229BEFC8E2D5C83019BD047502E48FD45E2D78249A44FBE3C26B20273C040321E9D2F6306BC460BAD0C0AD320B47DC1FD18096E1DECF6708AB4F9A6ECDC574B369A078BA6DD7480E0EF1445FF2EA52F616DC3955EF6359E99217AB79870094D940F00270DEC372D33C4775672381D1E85D0325A80D1D41221C0829B8EE81A57D1D63136B9A8CCA56F957BA08928C431D492091447E1037B95FF96175F550F2F7899E5A2B89ED1B2C9793399BB78C0AAF09D64C79006ED1A9274580B91F973E54F5C74EC9BE6C9B9D3BE177FF28B9BA6AD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:71:bc:58:79:ec:87:6f:8b:b3:f5:36:61:
                    2f:cf:dd:e9:74:45:13:ad:e1:36:f5:5d:fc:45:09:
                    62:ba:f6:6f:4e:e9:f0:51:cd:07:f0:1c:f9:a4:d0:
                    8e:bb:73:42:29:be:fc:8e:2d:5c:83:01:9b:d0:47:
                    50:2e:48:fd:45:e2:d7:82:49:a4:4f:be:3c:26:b2:
                    02:73:c0:40:32:1e:9d:2f:63:06:bc:46:0b:ad:0c:
                    0a:d3:20:b4:7d:c1:fd:18:09:6e:1d:ec:f6:70:8a:
                    b4:f9:a6:ec:dc:57:4b:36:9a:07:8b:a6:dd:74:80:
                    e0:ef:14:45:ff:2e:a5:2f:61:6d:c3:95:5e:f6:35:
                    9e:99:21:7a:b7:98:70:09:4d:94:0f:00:27:0d:ec:
                    37:2d:33:c4:77:56:72:38:1d:1e:85:d0:32:5a:80:
                    d1:d4:12:21:c0:82:9b:8e:e8:1a:57:d1:d6:31:36:
                    b9:a8:cc:a5:6f:95:7b:a0:89:28:c4:31:d4:92:09:
                    14:47:e1:03:7b:95:ff:96:17:5f:55:0f:2f:78:99:
                    e5:a2:b8:9e:d1:b2:c9:79:33:99:bb:78:c0:aa:f0:
                    9d:64:c7:90:06:ed:1a:92:74:58:0b:91:f9:73:e5:
                    4f:5c:74:ec:9b:e6:c9:b9:d3:be:17:7f:f2:8b:9b:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2F:C4:5F:09:13:F0:30:44:74:73:CD:03:99:16:33:70:F8:91:A4
            X509v3 Authority Key Identifier:
                keyid:43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a343030313a3a2f34382d3438203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:86:f3:c6:f3:fe:ba:27:a2:dd:15:20:4f:54:c0:24:c4:28:
         b4:bc:27:41:21:70:d0:8b:85:3f:1d:cc:ed:db:50:fa:5b:7e:
         a0:a6:b9:e7:c4:c9:24:c1:7e:a6:eb:1e:bc:cc:5f:fb:88:81:
         b5:37:79:de:a3:2a:67:c8:73:85:21:5d:44:20:34:3a:14:1a:
         1c:b0:2a:45:59:2a:d8:13:da:54:75:46:3a:81:c3:38:51:5e:
         de:93:9e:51:2b:26:ca:8f:ef:fb:d5:86:29:cf:73:ca:55:e3:
         2b:9d:24:1e:d2:08:2d:9e:18:d1:81:dd:5c:ab:45:8a:33:cd:
         77:9c:66:2c:a2:2c:9f:17:80:76:46:6d:8d:cb:7b:eb:63:77:
         10:c9:63:4b:c2:c5:84:b0:9e:fc:9e:c5:ac:a5:fd:6e:9a:cb:
         de:c9:e7:77:12:77:b0:e5:05:85:a8:cb:f7:a8:92:7e:07:22:
         dd:0d:dc:6b:b4:39:ce:fd:3f:8a:6c:c7:bd:b8:cf:eb:2b:ae:
         83:64:d8:32:46:23:e2:67:d9:8b:cc:5b:61:83:82:e6:a5:43:
         d5:9b:7f:a0:fb:ec:01:0a:51:0c:62:28:ba:19:00:de:78:96:
         09:a0:ca:58:71:b8:e0:8c:f1:0e:92:14:ec:3e:a1:bb:44:07:
         d1:1c:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----