Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383930303a3a2f34302d3430203d3e20323633363631.roa
File:                     323830343a313132383a383930303a3a2f34302d3430203d3e20323633363631.roa (raw, json)
Hash identifier:          +ZaYbvzJGeFCNPzA8uUC3KtuJqsPJ6oTEfOQoQDSssk=
Subject key identifier:   35:0C:3C:BA:1B:99:B5:4B:13:52:77:39:72:43:17:C4:F2:64:B9:F9
Certificate issuer:       /CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
Certificate serial:       0EBD5D5F4B4F20CF4E94DEA91030FA812D14311D
Authority key identifier: 43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383930303a3a2f34302d3430203d3e20323633363631.roa
Signing time:             Mon 06 Jun 2022 14:32:44 +0000
ROA not before:           Mon 06 Jun 2022 14:27:44 +0000
ROA not after:            Mon 05 Jun 2023 14:32:44 +0000
asID:                     263661
IP address blocks:        2804:1128:8900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bd:5d:5f:4b:4f:20:cf:4e:94:de:a9:10:30:fa:81:2d:14:31:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
        Validity
            Not Before: Jun  6 14:27:44 2022 GMT
            Not After : Jun  5 14:32:44 2023 GMT
        Subject: CN=3082010A0282010100EE29604257E07F0270F43475796FB9F71C8DF30703D925DCECBA08CF7A762781C9905F7EF7029DCC768145998EA849564EF284762DF4734CED3DB9AB43C2562C563D9A1B9E20EE016428AAE40764C44D2E7E423F8F3746F1EFA271B4A105075A0FE4D234A0DB5DAA92F7382EB58F924AB32DD0308471CEC1A4A9F0C630D9F47E3BA2BA84FBD01DB3C2F139441020D3FE336317CE8BA14D22E94AFB4B64008C41688F77BA2A6D3AD170D74E6B44DA49F9A1791EA1BF34F5F0F8C2EA98BE3360E9F19D01E95D2ABFF44BE010F607F7805028D1539253738E59A6B5CF552DE94B9A3F58BD58F05387A5718EBF7836FF206DA66FF272E334B1807C705E7DC9FC19710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:29:60:42:57:e0:7f:02:70:f4:34:75:79:6f:
                    b9:f7:1c:8d:f3:07:03:d9:25:dc:ec:ba:08:cf:7a:
                    76:27:81:c9:90:5f:7e:f7:02:9d:cc:76:81:45:99:
                    8e:a8:49:56:4e:f2:84:76:2d:f4:73:4c:ed:3d:b9:
                    ab:43:c2:56:2c:56:3d:9a:1b:9e:20:ee:01:64:28:
                    aa:e4:07:64:c4:4d:2e:7e:42:3f:8f:37:46:f1:ef:
                    a2:71:b4:a1:05:07:5a:0f:e4:d2:34:a0:db:5d:aa:
                    92:f7:38:2e:b5:8f:92:4a:b3:2d:d0:30:84:71:ce:
                    c1:a4:a9:f0:c6:30:d9:f4:7e:3b:a2:ba:84:fb:d0:
                    1d:b3:c2:f1:39:44:10:20:d3:fe:33:63:17:ce:8b:
                    a1:4d:22:e9:4a:fb:4b:64:00:8c:41:68:8f:77:ba:
                    2a:6d:3a:d1:70:d7:4e:6b:44:da:49:f9:a1:79:1e:
                    a1:bf:34:f5:f0:f8:c2:ea:98:be:33:60:e9:f1:9d:
                    01:e9:5d:2a:bf:f4:4b:e0:10:f6:07:f7:80:50:28:
                    d1:53:92:53:73:8e:59:a6:b5:cf:55:2d:e9:4b:9a:
                    3f:58:bd:58:f0:53:87:a5:71:8e:bf:78:36:ff:20:
                    6d:a6:6f:f2:72:e3:34:b1:80:7c:70:5e:7d:c9:fc:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0C:3C:BA:1B:99:B5:4B:13:52:77:39:72:43:17:C4:F2:64:B9:F9
            X509v3 Authority Key Identifier:
                keyid:43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383930303a3a2f34302d3430203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:fb:f9:f6:bf:c1:01:8d:de:83:24:60:82:fd:00:d8:49:26:
         2a:05:20:6e:f7:6a:9d:13:13:05:05:49:11:0e:e2:92:45:a6:
         4f:f0:75:83:18:b8:13:3b:1a:15:11:ab:ce:a5:3b:52:53:02:
         af:93:30:8d:3c:2b:5f:a6:6c:80:5e:b5:c5:8e:8a:90:ff:4f:
         91:13:f0:7f:0e:1a:3a:40:66:98:6f:e9:ac:6d:eb:f8:0a:84:
         35:31:51:f8:17:3c:91:5b:06:06:80:61:bd:92:93:f5:14:e6:
         d6:70:db:1b:d7:a3:ac:89:2e:ac:b4:69:15:64:c5:98:69:07:
         37:4f:14:fe:61:cd:09:39:22:ca:a6:21:f8:e3:a0:f9:0b:7f:
         33:19:37:0e:73:9c:84:8b:87:92:30:e0:64:aa:e0:a2:fd:77:
         a9:b8:3a:59:a5:10:40:91:15:ef:4c:09:cf:6a:1d:a1:f0:3b:
         88:b1:bc:ad:a7:09:b6:a1:1e:da:9f:d9:18:db:61:5a:44:16:
         f1:b9:a3:5b:a7:27:a2:c7:fe:ea:09:6f:f5:9d:c7:f0:09:fd:
         33:d4:3f:8e:57:5a:b6:d8:06:db:ef:c2:e1:b3:d3:4f:28:69:
         19:56:6d:54:86:e4:3e:cd:e9:6a:bf:81:d0:a5:0f:e5:6e:ee:
         5b:fa:3d:b3
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUDr1dX0tPIM9OlN6pEDD6gS0UMR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBRjFGMjc1RDQxQ0FCQTMxNjRBQzNEMUJBN0RERDJF
M0UwQUM0NzAeFw0yMjA2MDYxNDI3NDRaFw0yMzA2MDUxNDMyNDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUUyOTYwNDI1N0UwN0YwMjcw
RjQzNDc1Nzk2RkI5RjcxQzhERjMwNzAzRDkyNURDRUNCQTA4Q0Y3QTc2Mjc4MUM5
OTA1RjdFRjcwMjlEQ0M3NjgxNDU5OThFQTg0OTU2NEVGMjg0NzYyREY0NzM0Q0VE
M0RCOUFCNDNDMjU2MkM1NjNEOUExQjlFMjBFRTAxNjQyOEFBRTQwNzY0QzQ0RDJF
N0U0MjNGOEYzNzQ2RjFFRkEyNzFCNEExMDUwNzVBMEZFNEQyMzRBMERCNURBQTky
RjczODJFQjU4RjkyNEFCMzJERDAzMDg0NzFDRUMxQTRBOUYwQzYzMEQ5RjQ3RTNC
QTJCQTg0RkJEMDFEQjNDMkYxMzk0NDEwMjBEM0ZFMzM2MzE3Q0U4QkExNEQyMkU5
NEFGQjRCNjQwMDhDNDE2ODhGNzdCQTJBNkQzQUQxNzBENzRFNkI0NERBNDlGOUEx
NzkxRUExQkYzNEY1RjBGOEMyRUE5OEJFMzM2MEU5RjE5RDAxRTk1RDJBQkZGNDRC
RTAxMEY2MDdGNzgwNTAyOEQxNTM5MjUzNzM4RTU5QTZCNUNGNTUyREU5NEI5QTNG
NThCRDU4RjA1Mzg3QTU3MThFQkY3ODM2RkYyMDZEQTY2RkYyNzJFMzM0QjE4MDdD
NzA1RTdEQzlGQzE5NzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7ilgQlfgfwJw9DR1eW+59xyN8wcD2SXc7LoIz3p2J4HJkF9+9wKd
zHaBRZmOqElWTvKEdi30c0ztPbmrQ8JWLFY9mhueIO4BZCiq5AdkxE0ufkI/jzdG
8e+icbShBQdaD+TSNKDbXaqS9zgutY+SSrMt0DCEcc7BpKnwxjDZ9H47orqE+9Ad
s8LxOUQQINP+M2MXzouhTSLpSvtLZACMQWiPd7oqbTrRcNdOa0TaSfmheR6hvzT1
8PjC6pi+M2Dp8Z0B6V0qv/RL4BD2B/eAUCjRU5JTc45ZprXPVS3pS5o/WL1Y8FOH
pXGOv3g2/yBtpm/ycuM0sYB8cF59yfwZcQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FDUMPLobmbVLE1J3OXJDF8TyZLn5MB8GA1UdIwQYMBaAFEOvHyddQcq6MWSsPRun
3dLj4KxHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VabXpoRmZrNWtLYXcx
S3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzAvNDNBRjFGMjc1RDQxQ0FC
QTMxNjRBQzNEMUJBN0RERDJFM0UwQUM0Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80M0FGMUYyNzVENDFDQUJBMzE2NEFDM0QxQkE3REREMkUzRTBB
QzQ3LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FWm16aEZmazVrS2F3MUtwN0xt
SkIxRzN5OHpacDhpSjZ3NzY2TXllYW51ai8wLzMyMzgzMDM0M2EzMTMxMzIzODNh
MzgzOTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzMzNjM2MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBBEoiTANBgkqhkiG9w0BAQsFAAOCAQEAh/v59r/BAY3egyRggv0A
2EkmKgUgbvdqnRMTBQVJEQ7ikkWmT/B1gxi4EzsaFRGrzqU7UlMCr5MwjTwrX6Zs
gF61xY6KkP9PkRPwfw4aOkBmmG/prG3r+AqENTFR+Bc8kVsGBoBhvZKT9RTm1nDb
G9ejrIkurLRpFWTFmGkHN08U/mHNCTkiyqYh+OOg+Qt/Mxk3DnOchIuHkjDgZKrg
ov13qbg6WaUQQJEV70wJz2odofA7iLG8racJtqEe2p/ZGNthWkQW8bmjW6cnosf+
6glv9Z3H8An9M9Q/jldattgG2+/C4bPTTyhpGVZtVIbkPs3par+B0KUP5W7uW/o9
sw==
-----END CERTIFICATE-----