Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a313430303a3a2f34302d3430203d3e20323638313036.roa
File:                     323830343a353831383a313430303a3a2f34302d3430203d3e20323638313036.roa (raw, json)
Hash identifier:          l73+dEB1i45jYhZOg2FcJ0Ra/uGmx2wk+BSSosCqFUQ=
Subject key identifier:   EA:62:4D:1D:5A:6D:7C:B9:9E:C4:3F:B1:C6:B0:04:12:25:ED:6B:62
Certificate issuer:       /CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
Certificate serial:       7BB75D958F555F2401F184E27A291F2DAB6CFBD2
Authority key identifier: B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a313430303a3a2f34302d3430203d3e20323638313036.roa
Signing time:             Mon 07 Feb 2022 12:09:16 +0000
ROA not before:           Mon 07 Feb 2022 12:04:16 +0000
ROA not after:            Mon 06 Feb 2023 12:09:16 +0000
asID:                     268106
IP address blocks:        2804:5818:1400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b7:5d:95:8f:55:5f:24:01:f1:84:e2:7a:29:1f:2d:ab:6c:fb:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
        Validity
            Not Before: Feb  7 12:04:16 2022 GMT
            Not After : Feb  6 12:09:16 2023 GMT
        Subject: CN=EA624D1D5A6D7CB99EC43FB1C6B0041225ED6B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:60:82:64:d9:58:18:ba:63:da:0f:36:c4:
                    81:6d:e3:7b:51:15:9b:6e:47:55:a6:a8:30:9d:1f:
                    d6:fd:86:c9:9f:3b:38:fa:bb:c6:eb:f9:6b:d4:09:
                    4b:1c:e8:37:6a:50:cf:f6:42:ab:32:00:c2:e1:50:
                    38:14:1f:78:37:01:63:03:ab:36:b0:24:ed:45:c4:
                    e4:ee:96:42:43:f2:64:3c:0f:a6:07:69:f5:16:10:
                    4d:cd:0c:d7:c0:ce:42:bd:1f:dc:c8:d6:b6:1f:46:
                    01:a9:e5:dc:1a:93:bb:db:b2:ff:85:7e:8a:f2:1f:
                    bb:24:49:19:9f:f6:5e:8d:32:7f:4c:7d:6b:91:8c:
                    47:41:22:d4:59:b1:dd:7b:63:58:4b:84:34:e5:f1:
                    ee:a7:7f:a5:6a:d4:cb:ec:f9:82:25:b4:81:a0:6e:
                    6a:64:d0:e0:cc:2d:93:f1:f0:3d:d1:66:7e:bd:aa:
                    69:53:a0:31:66:ce:c6:9c:2d:8f:be:9f:02:9c:d4:
                    95:7d:1d:3b:3b:60:68:56:22:61:e4:c1:da:49:18:
                    25:0f:66:84:28:8f:58:a7:3e:a5:ca:f1:ec:b0:ef:
                    03:23:e6:09:14:da:2b:54:44:56:6b:69:b2:f3:37:
                    ff:54:a4:53:09:26:29:66:05:f6:74:55:9a:fa:e4:
                    d6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:62:4D:1D:5A:6D:7C:B9:9E:C4:3F:B1:C6:B0:04:12:25:ED:6B:62
            X509v3 Authority Key Identifier:
                keyid:B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a313430303a3a2f34302d3430203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5818:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:90:2b:2e:7a:30:dd:5a:83:3f:8a:84:80:83:da:23:e7:52:
         a2:a3:ad:ee:98:b5:f8:e5:ae:b7:30:20:3d:5a:8f:f1:71:a4:
         d6:12:10:a0:45:01:1c:53:79:15:27:2d:d4:91:7b:df:27:bc:
         3f:ad:2c:2f:06:e6:86:16:55:eb:e5:54:3d:c3:be:85:6f:a9:
         51:a1:54:38:e8:01:94:a1:a5:f3:14:3d:50:d6:f0:c2:6b:2f:
         a0:f4:52:9f:74:d3:d1:69:60:5b:b9:be:74:ae:7a:44:67:c9:
         fb:e9:43:84:04:95:11:39:8f:31:5b:38:05:76:fe:0a:97:5c:
         f6:88:b5:ce:29:60:dc:d1:a4:c6:30:f2:a7:0b:9a:bf:ca:34:
         2d:ca:64:85:e4:c5:e0:b8:d8:46:9d:9b:68:c3:f9:73:50:0b:
         9a:6d:8f:ff:46:f4:2f:3c:11:21:72:a1:7c:02:e4:78:72:29:
         bf:6c:61:d8:f8:e7:5f:0e:f1:9f:77:dd:5e:ad:b4:4c:2f:c0:
         1c:98:06:e2:c5:0e:57:18:0a:dd:6c:1c:dd:65:f8:ab:50:3c:
         c8:bc:80:8f:ab:c1:b7:9d:13:60:11:11:74:80:a3:e2:8a:7d:
         2a:82:0e:16:80:a2:de:6e:35:18:9e:d9:f2:ff:43:43:1d:6a:
         2c:bc:bc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----