Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3738303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a3738303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          kOAYYiJt9bmwLrx/6/fqnXbyXkVOfeufU9MuPnk7EjM=
Subject key identifier:   6D:58:F8:C5:80:02:D1:EA:68:A2:1A:35:BA:81:88:48:AE:AE:0A:6C
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       549D1300C8745D3F9C5AA355E807361B7827E8C4
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3738303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:52 +0000
ROA not before:           Tue 20 Dec 2022 15:04:52 +0000
ROA not after:            Tue 19 Dec 2023 15:09:52 +0000
asID:                     262468
IP address blocks:        2804:e94:780::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9d:13:00:c8:74:5d:3f:9c:5a:a3:55:e8:07:36:1b:78:27:e8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:52 2022 GMT
            Not After : Dec 19 15:09:52 2023 GMT
        Subject: CN=6D58F8C58002D1EA68A21A35BA818848AEAE0A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:05:a7:9e:a3:3b:41:97:58:9a:d1:45:c2:
                    5c:a3:b9:2a:29:60:91:2c:c3:82:22:59:0f:ef:51:
                    d4:c3:82:2b:96:73:bb:0f:ab:af:55:45:c4:6e:92:
                    2b:86:50:59:ba:b5:ad:e2:01:c3:39:a8:6a:56:65:
                    26:9d:e2:a3:55:76:12:28:e8:16:98:86:5b:4a:80:
                    0a:4d:c5:65:bc:b6:9a:3f:03:7d:69:8f:3a:d7:c2:
                    09:85:b4:3b:ff:46:8f:83:41:f8:a1:4b:53:91:dc:
                    60:57:06:c1:b4:35:a8:4a:14:f8:3e:22:53:a1:31:
                    d9:67:76:6e:f3:12:c5:17:e9:db:4c:6e:ef:c0:fa:
                    0a:f3:12:ae:1b:cf:9b:2b:7e:d8:c5:c2:97:c7:aa:
                    a5:6b:a3:a4:20:cb:c3:7c:82:57:96:ac:c7:5b:a7:
                    97:99:af:fc:6d:7e:c2:7a:17:a8:cb:66:80:36:51:
                    a9:0f:b0:66:d3:c7:5d:cd:11:a1:9f:7e:8b:9b:4a:
                    fe:84:35:72:7a:5f:8f:90:bc:c9:1a:4d:4b:c7:25:
                    ab:e5:4c:bf:e5:cd:31:7b:a5:47:88:68:80:14:9a:
                    f4:7b:eb:73:24:8f:56:af:32:2c:33:e3:8a:d5:1e:
                    8a:06:70:94:b9:c5:cc:42:35:68:91:de:00:96:b0:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:58:F8:C5:80:02:D1:EA:68:A2:1A:35:BA:81:88:48:AE:AE:0A:6C
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3738303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:780::/44

    Signature Algorithm: sha256WithRSAEncryption
         30:b5:c9:cc:0c:cf:10:b8:7a:c9:33:2f:1d:6c:3e:52:fd:51:
         8b:b3:2a:5a:bc:83:30:2e:47:97:5d:ac:1c:a0:49:98:30:8c:
         bd:2e:20:f0:11:ee:89:27:69:a3:75:d1:68:00:7c:52:77:92:
         46:c9:9a:0e:78:62:36:bd:19:7c:4c:b1:22:5c:e5:21:56:a9:
         a3:cc:25:95:8a:68:71:82:77:1f:ae:f1:6c:a8:ad:2a:60:07:
         84:2d:90:c3:a7:ad:0d:03:f8:d3:4e:69:2a:97:5d:43:cd:bd:
         1f:62:47:44:bd:c0:bd:20:9a:14:a8:6e:e1:28:3f:d7:53:2f:
         13:0a:04:70:30:2a:f5:32:da:63:32:1d:7f:e8:0a:eb:c3:5b:
         a8:18:11:1a:a6:b8:50:d2:f5:3f:fa:0e:b3:9e:4d:a5:68:92:
         b5:59:da:ef:9c:83:f5:54:44:2e:33:11:0d:45:7f:81:c7:42:
         74:1b:39:5c:08:da:63:a6:42:07:5a:82:5f:91:c0:1b:3a:3e:
         d0:4a:0c:f5:82:40:d3:b9:7d:bf:c4:cd:06:9b:e7:a8:ef:6c:
         ce:76:c2:67:fc:20:d4:c5:b6:e7:e9:a8:46:d6:67:47:d9:32:
         e9:cd:af:47:12:53:8d:49:80:bc:14:97:ce:7c:34:d2:33:8c:
         31:3b:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----