Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a3a2f33322d3334203d3e203631363039.roa
File:                     323830343a383762633a3a2f33322d3334203d3e203631363039.roa (raw, json)
Hash identifier:          skpskmNCR+lstrX6udkXVMg6Hay+tjwcu5lkkF+Lodg=
Subject key identifier:   84:B1:73:D1:D9:B8:83:69:12:AA:12:D1:91:9D:97:1B:74:9D:8F:E8
Certificate issuer:       /CN=2D8A1F6ACB16D7AD5662707F421152571E266585
Certificate serial:       67CA2E8428D807B57698914CC017AA641FF9FF13
Authority key identifier: 2D:8A:1F:6A:CB:16:D7:AD:56:62:70:7F:42:11:52:57:1E:26:65:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D8A1F6ACB16D7AD5662707F421152571E266585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a3a2f33322d3334203d3e203631363039.roa
Signing time:             Thu 29 Dec 2022 18:09:03 +0000
ROA not before:           Thu 29 Dec 2022 18:04:03 +0000
ROA not after:            Thu 28 Dec 2023 18:09:03 +0000
asID:                     61609
IP address blocks:        2804:87bc::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ca:2e:84:28:d8:07:b5:76:98:91:4c:c0:17:aa:64:1f:f9:ff:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8A1F6ACB16D7AD5662707F421152571E266585
        Validity
            Not Before: Dec 29 18:04:03 2022 GMT
            Not After : Dec 28 18:09:03 2023 GMT
        Subject: CN=84B173D1D9B8836912AA12D1919D971B749D8FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:89:c8:7b:87:4c:36:76:d9:29:6b:7b:82:
                    b6:71:68:2b:d0:73:28:72:4e:1b:d3:ac:c1:e1:06:
                    6b:7d:6e:10:d2:4b:2d:de:fe:ee:14:7b:6e:f4:71:
                    39:73:51:34:f5:6b:d4:e3:f9:d3:8a:15:8f:7d:0d:
                    c6:9a:5b:3d:72:f5:eb:cd:b8:ba:12:58:2a:49:6d:
                    fc:40:c5:e7:2a:4a:bc:00:a1:57:58:bf:35:a8:ec:
                    0b:09:2d:7f:3d:93:bf:c5:a4:ea:c7:76:ca:24:61:
                    f6:a1:6b:c2:aa:a6:b5:9b:3e:08:01:36:33:21:96:
                    5d:63:cf:0e:00:5b:61:03:b4:8d:7b:52:0f:6e:3a:
                    43:1a:82:93:d1:46:7c:3d:e0:79:e1:b1:eb:66:0a:
                    63:1f:d1:5b:2e:e3:95:85:a0:20:f3:24:9b:03:9e:
                    6b:b1:66:b0:7a:e0:a7:ed:29:b5:52:31:d1:20:72:
                    12:f5:42:d9:72:64:1f:eb:5f:c5:3a:51:bc:ee:2c:
                    04:32:72:2f:3d:54:d1:f5:6a:31:2b:b0:02:db:43:
                    80:fc:71:91:ea:76:1d:51:f4:e1:be:f5:69:c4:33:
                    27:3e:49:10:30:e2:8a:90:40:27:0c:f1:fb:39:6b:
                    ed:af:7f:fa:47:18:83:81:ce:cf:5d:cc:fd:e6:5a:
                    e2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B1:73:D1:D9:B8:83:69:12:AA:12:D1:91:9D:97:1B:74:9D:8F:E8
            X509v3 Authority Key Identifier:
                keyid:2D:8A:1F:6A:CB:16:D7:AD:56:62:70:7F:42:11:52:57:1E:26:65:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/2D8A1F6ACB16D7AD5662707F421152571E266585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D8A1F6ACB16D7AD5662707F421152571E266585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a3a2f33322d3334203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:11:0d:e8:d3:9f:0d:aa:a4:34:7d:49:ae:2b:7c:31:bf:
         33:fd:4d:54:af:22:5e:89:bb:14:71:79:f5:a5:f8:89:fd:71:
         69:ea:d2:75:ec:74:0f:6c:54:f0:ec:22:2e:a3:11:94:36:0a:
         3d:c4:94:4f:07:7f:e1:8b:04:e6:d7:40:93:b9:a8:c0:ba:b6:
         80:91:8b:a8:9f:5e:a3:32:04:f0:92:cf:8e:ff:a4:a2:57:74:
         4d:d2:df:83:6f:eb:3c:92:f0:ec:92:83:fa:18:63:4c:b7:ca:
         64:4a:04:a2:db:59:52:e9:7c:5b:71:ca:7e:b3:6e:ea:82:89:
         aa:f4:15:4c:d5:57:66:2d:2d:8e:4b:a5:db:5a:6d:69:97:a8:
         66:34:80:53:ac:94:77:a5:e5:ba:7a:50:02:b5:7c:90:27:d6:
         5d:7a:d9:7d:c6:c3:ca:85:8d:5e:bd:f2:0e:91:35:06:e8:bf:
         c5:8f:37:1f:8b:24:54:17:3a:fc:c1:7c:52:12:0d:7c:9d:38:
         83:07:ef:e1:34:88:11:32:2b:8a:3f:e4:08:07:1e:b6:1c:b7:
         a0:6e:17:24:bd:f9:05:6b:9d:78:ad:c9:40:be:d5:28:43:a4:
         7c:a7:8a:95:9e:0c:48:3a:7c:7c:9b:2b:64:03:6c:40:1c:80:
         16:f4:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----