Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a34303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a34303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          hzvvO6nXfo/1ufxOxhqbfezjWGir3NDlrQsbhmPF95I=
Subject key identifier:   4E:CD:A8:13:08:02:46:17:05:49:13:FB:17:42:B4:5D:27:EE:90:CE
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       1FA85F78548C6D407473A9CB88AEE09ED92FB2AE
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a34303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:10:00 +0000
ROA not before:           Tue 20 Dec 2022 15:05:00 +0000
ROA not after:            Tue 19 Dec 2023 15:10:00 +0000
asID:                     262468
IP address blocks:        2804:e94:40::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a8:5f:78:54:8c:6d:40:74:73:a9:cb:88:ae:e0:9e:d9:2f:b2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:05:00 2022 GMT
            Not After : Dec 19 15:10:00 2023 GMT
        Subject: CN=4ECDA81308024617054913FB1742B45D27EE90CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:a3:91:42:1d:b3:40:fa:05:8a:ae:e5:b7:
                    7c:4d:dd:ac:07:c2:f2:71:91:a9:6d:b1:4f:63:21:
                    db:52:f1:23:73:48:33:eb:a6:87:2e:16:d7:d9:39:
                    c5:2b:8f:5b:43:e4:d3:e5:2f:a8:a1:0a:25:f7:00:
                    39:e0:23:49:9d:25:20:fc:19:99:d9:f6:33:a4:42:
                    8d:82:4b:f4:52:e9:a2:7e:ef:a9:9d:75:c0:50:1d:
                    1b:29:05:8c:ce:62:c1:02:e3:3f:18:c7:fe:2d:51:
                    30:d9:b8:1d:54:f9:6e:b0:22:d4:4a:36:e9:04:af:
                    9e:80:c1:ba:ca:53:35:49:e4:b8:63:ca:31:db:ae:
                    56:ad:5e:d0:87:a2:5e:47:2e:f0:f0:bf:4d:ea:c7:
                    c6:ce:25:c1:e4:09:75:94:3b:d1:f8:6d:fe:bc:f0:
                    c1:17:ba:2f:af:d8:94:d1:fe:f8:f9:91:09:cf:74:
                    44:4e:0c:e7:57:f4:56:f2:83:0a:a8:aa:94:43:3b:
                    e4:77:f1:7a:f5:03:21:a6:df:a3:65:cc:7f:bc:52:
                    48:1d:af:55:ee:ba:1e:f1:0d:f0:54:21:8d:b1:1d:
                    c7:45:fc:da:d5:b2:0e:6c:6f:6e:aa:c5:8e:15:9e:
                    99:d7:29:2c:5e:74:ef:17:10:4b:8d:88:50:8d:52:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CD:A8:13:08:02:46:17:05:49:13:FB:17:42:B4:5D:27:EE:90:CE
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a34303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         a7:ca:4c:59:c1:5f:cd:83:25:d6:ca:d1:d4:47:45:85:54:1f:
         48:ab:08:1a:99:1a:dd:f0:d7:51:62:a7:37:c7:20:c0:86:19:
         9e:f7:e8:19:e5:3b:04:29:7b:fc:dd:8b:3e:b0:d9:49:0e:fb:
         e0:6e:48:53:ab:d0:c0:58:a7:1e:bb:fb:2a:31:cf:a3:aa:c2:
         5f:14:f6:08:73:76:8a:c3:10:be:bf:f4:c6:91:b5:65:f6:f4:
         c6:b7:af:9a:2b:d1:f5:b0:23:65:0e:85:18:53:4b:98:fb:ea:
         2c:ab:cd:f1:5d:ec:14:a8:d8:13:be:b6:1d:b5:f9:fc:f2:4a:
         d8:b4:79:fd:25:f9:86:c6:db:31:38:c0:be:28:c4:27:db:01:
         9d:bd:7d:7f:0a:05:31:5e:cd:40:41:37:9d:52:91:c3:2d:d8:
         42:9c:39:6c:87:da:3b:02:b0:27:10:b8:31:3c:9d:cb:8c:1e:
         0d:66:e8:3c:d9:72:ea:a9:28:3b:db:97:e6:e3:37:a3:0b:be:
         df:7c:ca:ae:48:c3:00:62:5f:58:c1:d3:d1:9c:e5:2a:9e:c0:
         3d:0b:62:1e:54:87:1e:6f:ea:b3:3c:49:3f:d8:9d:b7:90:b2:
         ef:7e:14:58:3f:9e:98:46:27:77:7b:1c:d0:b5:b6:71:5f:52:
         bc:22:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----