Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/323830343a346338303a383030303a3a2f33332d3333203d3e20323637333734.roa
File:                     323830343a346338303a383030303a3a2f33332d3333203d3e20323637333734.roa (raw, json)
Hash identifier:          h9utqyKe0/4Sndpm/lUj9eXaMS9dA/tvvKq+MTK++AQ=
Subject key identifier:   AB:49:EF:46:BC:A9:3C:97:0D:13:B0:FC:1F:3F:03:B1:D7:4E:17:B7
Certificate issuer:       /CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
Certificate serial:       162D75B040479602941A64234A57BEE744788AC7
Authority key identifier: C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/323830343a346338303a383030303a3a2f33332d3333203d3e20323637333734.roa
Signing time:             Tue 27 Jun 2023 18:39:04 +0000
ROA not before:           Tue 27 Jun 2023 18:34:04 +0000
ROA not after:            Tue 25 Jun 2024 18:39:04 +0000
asID:                     267374
IP address blocks:        2804:4c80:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2d:75:b0:40:47:96:02:94:1a:64:23:4a:57:be:e7:44:78:8a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
        Validity
            Not Before: Jun 27 18:34:04 2023 GMT
            Not After : Jun 25 18:39:04 2024 GMT
        Subject: CN=AB49EF46BCA93C970D13B0FC1F3F03B1D74E17B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:10:a6:ad:f8:ce:aa:ab:5e:62:98:4f:e9:
                    88:e9:2f:a4:78:a9:9c:3e:3f:aa:1f:73:8b:cc:94:
                    03:bc:0b:7e:81:d7:8d:38:7b:9b:b2:06:6b:37:a3:
                    76:59:7f:45:2f:23:14:34:3a:35:37:c2:7e:8d:f8:
                    47:04:ca:0f:c0:f9:f9:a5:4a:a5:5e:1d:42:a0:c8:
                    51:cb:d7:3d:89:9b:68:40:cf:67:bd:ea:c9:d7:e2:
                    21:64:17:bc:64:1d:81:03:a2:cd:67:f3:da:68:eb:
                    5e:4d:23:55:cc:20:59:d4:cf:e5:df:51:19:81:33:
                    73:55:b1:fb:0a:16:62:e9:1f:71:11:f5:01:ff:a4:
                    da:a0:e5:6c:c5:c6:63:41:e3:e8:9f:82:e4:31:50:
                    44:14:8c:37:1f:38:4e:06:5b:76:d3:6e:aa:c9:7c:
                    55:6a:37:bb:f7:30:9b:e4:9c:c6:ba:89:b5:00:9e:
                    18:f7:9d:18:1f:04:94:37:e5:03:4e:ee:21:3a:30:
                    c4:d3:5f:3a:84:2f:8f:54:98:b6:2b:72:b1:26:b6:
                    12:e5:b3:3a:16:4b:cf:b1:ae:e4:23:6a:dd:aa:98:
                    28:7f:a3:03:3e:dc:87:d4:7c:1b:25:ec:a6:9b:a4:
                    4a:6b:67:6d:9d:b5:9b:7b:db:60:ad:17:ff:a6:85:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:49:EF:46:BC:A9:3C:97:0D:13:B0:FC:1F:3F:03:B1:D7:4E:17:B7
            X509v3 Authority Key Identifier:
                keyid:C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/323830343a346338303a383030303a3a2f33332d3333203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c80:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         07:49:f0:de:03:66:b0:52:92:09:3d:61:bb:89:df:b5:7c:4c:
         4d:51:5c:96:15:bd:8f:96:62:4e:c9:b2:6c:20:28:d5:cd:8b:
         0d:91:b2:f6:53:cb:cf:62:ef:a7:f0:61:89:14:6e:88:f8:82:
         be:b9:a2:6a:c2:fe:71:cc:6d:e8:9a:6b:05:21:9e:1b:0d:9b:
         c3:07:4d:d5:10:05:10:3f:71:0d:ff:32:33:53:9b:c3:c5:07:
         65:14:59:82:82:b5:65:1d:02:26:0a:d7:81:71:3b:d3:a7:8b:
         f8:99:4c:95:91:40:fe:66:bf:f4:78:3d:74:45:30:e2:eb:bf:
         1f:b1:c4:a8:70:59:44:b0:6b:15:b9:3e:46:a1:48:7e:51:7b:
         4a:32:73:02:f3:e7:67:a5:17:d7:a2:f9:b1:96:15:81:93:a5:
         89:8b:29:60:db:f4:f8:9f:40:fd:02:a9:08:ed:f6:6e:c9:ef:
         54:07:48:cd:ce:27:fe:8d:55:22:73:25:2a:50:db:b9:cf:44:
         a9:84:33:e8:6f:fb:6c:40:e7:b7:3c:ef:e0:60:e4:51:ec:63:
         66:f7:3c:7c:eb:2e:35:84:76:b0:7f:6a:68:23:08:f7:47:08:
         f3:b1:68:14:61:0a:91:aa:29:56:c3:a7:96:41:d1:8b:32:4f:
         4e:23:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----