Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          leRso8aCPQvU1/aisVXzDUjPx7/jKSgpE4VKie1skY0=
Subject key identifier:   AD:DA:3D:EC:39:6E:55:BF:8D:F9:CA:53:CE:88:D2:B7:02:2D:A7:4A
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       5AFC5C32A3C3D1FB63A821DA8BD1F3396872DE62
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:22:17 +0000
ROA not before:           Thu 20 Jul 2023 14:17:17 +0000
ROA not after:            Thu 18 Jul 2024 14:22:17 +0000
asID:                     52706
IP address blocks:        2804:c70:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fc:5c:32:a3:c3:d1:fb:63:a8:21:da:8b:d1:f3:39:68:72:de:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:17:17 2023 GMT
            Not After : Jul 18 14:22:17 2024 GMT
        Subject: CN=ADDA3DEC396E55BF8DF9CA53CE88D2B7022DA74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:80:21:f6:fc:8a:9f:6c:be:94:62:9e:62:
                    f5:eb:16:b7:f3:0e:3f:21:8c:ae:a0:78:3e:b3:40:
                    7f:44:ef:2d:0c:98:bf:a3:c9:0a:71:f5:f9:a2:4e:
                    cb:c5:cb:4f:ce:da:d7:a2:20:eb:ce:b5:18:1b:76:
                    ed:34:de:74:b0:34:f5:dc:c2:a0:dc:5d:f9:7c:af:
                    da:c2:f5:13:39:cc:f5:43:01:4e:0a:92:0e:6d:da:
                    7c:e7:e2:93:18:02:0a:68:6d:ba:c4:23:60:9d:42:
                    9c:cd:84:b1:c0:3b:26:b5:68:4b:ca:d7:c1:5a:f8:
                    44:09:ae:97:ed:b2:8b:bb:f3:8b:55:22:e6:f4:f8:
                    45:1d:98:51:ad:b3:7c:dd:0e:4b:d0:ec:94:eb:44:
                    3d:e6:a2:31:59:96:80:26:3d:88:2c:79:b6:22:0f:
                    3f:70:04:53:51:cf:63:c0:e5:0f:f3:d5:e4:f9:19:
                    29:2c:f5:d2:70:ea:b4:35:61:c6:5b:78:c8:c3:04:
                    28:e3:16:7b:d8:ae:45:54:27:02:f1:c2:a1:d3:06:
                    39:d3:00:9b:97:9d:96:19:ae:53:71:6b:c8:a5:5e:
                    af:9f:01:1e:cc:47:89:82:39:b5:93:a0:35:46:33:
                    de:ce:f2:dc:b3:74:a5:94:1e:28:17:cc:e9:5e:97:
                    1a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DA:3D:EC:39:6E:55:BF:8D:F9:CA:53:CE:88:D2:B7:02:2D:A7:4A
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:62:ea:46:2d:cf:7a:71:0c:c1:50:58:3e:50:cc:fb:bb:
         de:5f:a5:e2:b1:e8:72:87:d5:d9:df:14:67:9e:42:f5:78:20:
         28:3a:eb:eb:89:86:5b:48:51:1a:06:aa:a9:55:c2:ae:24:42:
         19:38:af:6a:84:9f:d6:e1:0f:da:27:7b:41:e6:98:db:c6:d0:
         19:94:a3:27:db:bb:6b:13:bc:81:92:4b:50:44:d6:2b:21:74:
         5f:57:b2:2d:e2:3c:a0:7c:d8:81:2a:c0:57:c3:e4:cf:fe:f7:
         fd:86:f9:ee:e4:a5:a2:a7:03:55:2a:8e:97:be:a2:6d:96:0c:
         30:83:77:7a:49:88:d2:e4:b3:68:ef:cb:bb:9f:a0:97:5c:f8:
         28:ac:42:a1:17:8f:5d:3c:73:39:71:d4:eb:9d:88:66:22:5a:
         dc:2a:c9:a3:d6:a7:b1:d7:c4:09:a4:09:a2:8b:b9:06:cb:17:
         6d:f1:5f:2b:31:75:3c:bf:f5:f0:54:b4:17:11:38:2e:1a:f2:
         0d:76:db:9d:b6:e0:17:ed:b0:9a:14:f1:bd:8c:00:f1:c8:7b:
         2d:03:e9:81:2f:fb:0e:0f:df:be:2f:69:ed:3a:33:d2:b7:fe:
         21:42:10:3d:88:43:d3:7c:84:f0:23:91:7b:b4:8b:ef:6e:70:
         fa:82:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----