Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a63303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a63303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          yEHPk7cHkxsS9O9E919cYFNOEQy5Mua0tbknKCb9Ykg=
Subject key identifier:   D4:B3:C4:DF:51:B8:0C:C4:7E:1E:2D:7A:88:AA:14:65:B8:02:BD:45
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       1CDEA4B3AF9A746383A22155A5878A75B362E3B2
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a63303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:55 +0000
ROA not before:           Tue 20 Dec 2022 15:04:55 +0000
ROA not after:            Tue 19 Dec 2023 15:09:55 +0000
asID:                     262468
IP address blocks:        2804:e94:c0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:de:a4:b3:af:9a:74:63:83:a2:21:55:a5:87:8a:75:b3:62:e3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:55 2022 GMT
            Not After : Dec 19 15:09:55 2023 GMT
        Subject: CN=D4B3C4DF51B80CC47E1E2D7A88AA1465B802BD45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:64:d9:3c:fc:26:96:b7:ae:2a:7e:94:83:
                    35:e0:0a:3c:80:49:2e:9e:91:f7:88:fe:4e:7e:75:
                    96:3d:14:db:b9:60:f9:49:1b:9b:30:26:fb:a6:af:
                    8d:de:9a:73:fe:6e:3a:9f:82:d9:bf:86:23:f4:7e:
                    17:a6:b4:c2:96:dd:9c:3b:b7:60:d6:ca:69:51:82:
                    2c:bc:9a:98:06:23:01:3f:86:cc:0a:b0:d6:e5:de:
                    a7:c7:1e:47:36:86:f6:98:0a:0d:1b:bd:53:64:95:
                    6e:ee:01:d9:b8:7a:8e:1a:a7:2f:8e:70:80:46:74:
                    70:e9:0a:1e:f0:ae:17:0c:24:b0:c0:0d:53:c5:f5:
                    1a:19:3a:d8:8a:dd:12:ab:04:97:ab:b4:00:f1:94:
                    55:1c:cb:de:dd:78:dc:31:78:85:b2:54:a9:01:00:
                    29:40:67:0a:1d:e0:b7:8f:4f:39:ee:7b:1f:7e:62:
                    f4:56:35:ea:52:8f:aa:c2:71:5e:a5:2d:48:6c:05:
                    b5:df:58:70:7f:bc:83:93:47:be:e8:8f:8b:ab:f0:
                    af:aa:9f:a0:ab:9f:65:12:55:8a:d3:aa:ed:8c:03:
                    5d:4a:a0:61:6f:33:5c:a4:13:d7:ae:43:1a:2a:1f:
                    a6:3b:1f:a7:8d:b7:d0:83:f2:bd:e5:ab:42:30:ea:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B3:C4:DF:51:B8:0C:C4:7E:1E:2D:7A:88:AA:14:65:B8:02:BD:45
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a63303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:00:7e:94:0d:b0:99:e7:ea:c3:f2:f6:b1:c5:f8:46:61:e0:
         0d:76:b5:f2:b4:dc:cb:95:e9:44:04:95:52:5b:57:c6:d9:d2:
         26:03:16:24:9d:c4:b7:84:e5:07:58:b1:20:1b:1c:93:f9:2c:
         4b:40:55:6e:a1:6b:c9:ab:73:e7:56:91:3c:bf:8b:e3:65:0d:
         b2:43:08:21:62:95:dd:5a:02:65:b6:6f:a0:7d:92:89:68:1b:
         9d:6e:ca:36:52:2e:60:aa:f5:a0:dd:03:13:a1:76:44:cf:a2:
         65:f0:00:f7:00:57:1b:66:2a:69:ff:79:cc:db:19:0c:de:55:
         1c:30:4b:f7:85:eb:80:34:fa:1b:f4:1b:a9:19:00:c6:d1:4c:
         74:96:20:f5:95:e6:1c:ec:7b:59:5b:a3:41:cf:61:d9:d7:a1:
         01:af:bd:eb:e2:b3:6c:32:36:3e:4c:54:bc:04:78:b7:20:d2:
         98:3e:d1:7f:20:b2:14:ff:b6:6f:2a:23:af:cd:de:65:38:e2:
         f1:87:43:d0:11:b3:0a:e2:21:4b:a2:66:82:37:fa:6e:12:db:
         51:19:ad:8d:eb:d0:30:a6:6b:a9:63:28:48:27:e1:c7:db:d8:
         96:d0:9b:cb:92:59:b0:35:9e:d6:2f:00:d4:d6:da:8d:a1:26:
         d3:11:19:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----