Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33322d3430203d3e20323636303636.roa
File:                     323830343a336130383a3a2f33322d3430203d3e20323636303636.roa (raw, json)
Hash identifier:          z+XR11+wxRrhrwq/6d49FsJRPhi21jvOPIsRaoQpwcE=
Subject key identifier:   0D:58:6D:15:0A:E3:52:BF:91:04:CE:78:B2:D4:68:74:8A:BD:BB:3E
Certificate issuer:       /CN=69AB1667EEAD9E66268EBDF47637F35A8450C9EA
Certificate serial:       6F20ED74D1D1B4CDEE749847CF5DBE42DD0087F4
Authority key identifier: 69:AB:16:67:EE:AD:9E:66:26:8E:BD:F4:76:37:F3:5A:84:50:C9:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AB1667EEAD9E66268EBDF47637F35A8450C9EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33322d3430203d3e20323636303636.roa
Signing time:             Thu 27 Oct 2022 19:13:23 +0000
ROA not before:           Thu 27 Oct 2022 19:08:23 +0000
ROA not after:            Thu 26 Oct 2023 19:13:23 +0000
asID:                     266066
IP address blocks:        2804:3a08::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:20:ed:74:d1:d1:b4:cd:ee:74:98:47:cf:5d:be:42:dd:00:87:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AB1667EEAD9E66268EBDF47637F35A8450C9EA
        Validity
            Not Before: Oct 27 19:08:23 2022 GMT
            Not After : Oct 26 19:13:23 2023 GMT
        Subject: CN=0D586D150AE352BF9104CE78B2D468748ABDBB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:e2:30:9a:28:b4:ad:33:c2:0e:4c:c1:21:
                    19:92:54:dc:07:f4:45:d3:39:f4:52:13:ad:c8:3a:
                    40:cd:61:ac:53:b3:76:7e:23:3a:d8:8a:25:0c:13:
                    d9:50:8c:3f:12:3c:14:00:9b:fa:ef:29:5f:1b:4a:
                    26:90:8f:15:15:0b:f3:05:57:b1:1f:f0:e9:68:72:
                    4e:ac:6b:83:44:45:d9:66:e2:a3:0a:23:07:f9:8a:
                    d6:5c:96:72:73:78:53:7b:61:b5:ee:a7:60:e9:87:
                    31:85:37:ec:ee:a3:2e:e7:66:80:57:4c:1f:96:7a:
                    88:be:5b:f5:ae:82:6d:d7:63:d7:69:f3:a9:e3:c0:
                    c9:5e:17:7c:ba:a5:82:18:8f:8a:d9:3c:ae:6e:b2:
                    1f:0f:bd:be:1a:8b:a5:9c:c0:09:40:4f:51:25:09:
                    1f:ab:46:de:38:a8:2c:9d:b7:be:a2:cb:2d:9e:e3:
                    70:5e:13:02:f5:ae:78:dd:b8:d8:7d:9b:13:a5:96:
                    36:46:c2:8e:b5:79:26:95:bb:06:e9:ab:cb:ca:d5:
                    30:fc:f3:4a:41:e3:4c:35:f3:71:ed:ef:8b:cb:01:
                    4a:87:71:b8:66:14:fb:73:2e:a6:b9:28:1b:73:48:
                    a9:b9:ef:b1:0c:f8:77:c9:ca:d5:47:bc:03:26:71:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:58:6D:15:0A:E3:52:BF:91:04:CE:78:B2:D4:68:74:8A:BD:BB:3E
            X509v3 Authority Key Identifier:
                keyid:69:AB:16:67:EE:AD:9E:66:26:8E:BD:F4:76:37:F3:5A:84:50:C9:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/69AB1667EEAD9E66268EBDF47637F35A8450C9EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AB1667EEAD9E66268EBDF47637F35A8450C9EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33322d3430203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a08::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:da:83:68:77:48:07:20:91:4a:da:f2:1d:67:83:cc:ad:65:
         b6:d7:41:7a:fc:df:72:91:8a:e6:1b:eb:56:b1:5c:1e:e5:12:
         9f:6e:b6:e4:80:1e:31:6c:2c:44:d9:39:76:9c:24:ff:7c:bb:
         8f:c0:a9:59:24:3a:10:1e:f2:dc:e9:56:95:47:62:6b:6e:cf:
         96:e1:35:cc:6a:a1:30:64:22:85:98:11:dc:bd:da:7e:84:3f:
         d0:d7:31:69:04:9e:07:68:19:0e:81:a3:f5:03:9b:04:a5:69:
         34:27:ec:20:ff:cb:31:2f:29:f9:65:c0:90:30:a9:cd:20:9a:
         54:f3:94:d1:d7:c1:d6:50:ff:78:c9:64:d5:bc:f7:c4:9e:8c:
         f3:e2:65:75:5d:48:c3:6d:23:14:90:05:64:f4:b8:0b:46:95:
         8a:79:6d:99:66:2f:0c:25:f4:08:9f:95:bd:e0:ca:b9:51:d0:
         21:fe:a4:12:df:da:fe:20:c9:1a:74:10:cf:af:8e:78:6d:e7:
         cc:a9:11:a5:78:56:b9:7a:0b:c8:e6:3a:03:1d:88:30:bb:d3:
         c3:d0:76:72:f0:9b:77:c5:a7:70:e5:31:5d:f0:51:ec:3e:09:
         1a:34:45:2d:ba:79:bd:3b:37:e1:56:b0:62:e3:c8:6e:fd:5c:
         af:38:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----