Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383330303a3a2f34302d3430203d3e20323633393234.roa
File:                     323830343a323764343a383330303a3a2f34302d3430203d3e20323633393234.roa (raw, json)
Hash identifier:          gZfYxrpXCB7abgqck4TB4GiKkgC8acGVHuwq6XNNPq0=
Subject key identifier:   79:B9:57:C9:7A:5F:BA:F6:F5:C0:E7:AD:F2:23:FA:DA:19:86:4E:25
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       5CFB76F48E5EFEF61684A9AFC6411EC97B59B233
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383330303a3a2f34302d3430203d3e20323633393234.roa
Signing time:             Mon 07 Feb 2022 12:09:17 +0000
ROA not before:           Mon 07 Feb 2022 12:04:17 +0000
ROA not after:            Mon 06 Feb 2023 12:09:17 +0000
asID:                     263924
IP address blocks:        2804:27d4:8300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fb:76:f4:8e:5e:fe:f6:16:84:a9:af:c6:41:1e:c9:7b:59:b2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:17 2022 GMT
            Not After : Feb  6 12:09:17 2023 GMT
        Subject: CN=79B957C97A5FBAF6F5C0E7ADF223FADA19864E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:bd:73:62:bf:a3:c6:6b:85:6c:b2:a1:9e:
                    8a:9d:82:a5:75:d1:c5:5a:b2:f6:80:dc:c5:b9:10:
                    db:ec:4c:50:73:04:2a:f7:8b:3e:f0:72:eb:a8:24:
                    f3:83:51:fc:dd:ee:b1:8a:2a:eb:1f:4d:a2:ee:3f:
                    01:b6:d2:b4:b1:66:1b:86:ad:91:e4:e2:0f:6e:e5:
                    30:ce:3f:d8:f4:39:5f:7d:1b:8b:c6:ca:83:cf:1d:
                    2e:d9:3a:8e:11:81:0b:dd:04:bd:40:71:76:db:f4:
                    08:94:10:1f:91:19:f5:4a:84:ff:e1:5a:c6:4c:f9:
                    1b:1e:70:a4:96:06:52:47:23:30:b7:c7:a2:2d:62:
                    fe:af:c8:fd:69:81:c4:e6:10:d5:b3:4f:9e:53:5d:
                    5f:ba:ca:16:45:27:cc:80:5c:87:40:ac:69:33:c7:
                    96:5f:35:f5:f1:e5:0b:d7:e8:c9:c3:45:87:9c:3f:
                    66:38:4f:d2:b1:f7:b0:69:09:e5:ef:78:e4:60:67:
                    9a:30:ec:2d:6a:c5:cb:f1:25:6f:68:5f:fc:52:1f:
                    05:67:88:40:7b:14:7c:6e:d6:8a:f7:84:40:ee:ed:
                    f6:fa:1b:c1:39:b9:3d:c3:35:39:b2:e9:cf:00:ff:
                    a7:0d:66:98:70:07:49:c7:ff:93:94:77:41:5a:91:
                    6d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B9:57:C9:7A:5F:BA:F6:F5:C0:E7:AD:F2:23:FA:DA:19:86:4E:25
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383330303a3a2f34302d3430203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27d4:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:09:ad:3b:d1:f3:e5:27:45:26:57:9f:cf:11:51:4b:27:00:
         be:4f:ce:3e:8f:7f:47:23:a6:13:c1:bb:cc:08:45:c7:a3:db:
         ae:8d:a0:63:37:fc:3b:1e:d2:a4:fb:3f:57:17:51:cd:5a:84:
         96:f9:dc:b4:2b:f8:aa:93:95:25:17:b0:c0:5f:9c:b5:e7:b1:
         a8:fc:d8:3b:26:69:98:4a:91:5e:0f:cc:32:17:5a:a7:b5:b4:
         b5:24:bb:55:53:c2:12:99:73:5d:1c:75:d8:3f:b3:b2:4e:08:
         3f:ba:3a:5a:56:8c:2c:d7:d5:df:e0:59:48:e3:ab:01:3c:b5:
         ef:00:c1:df:d6:69:56:89:84:6d:aa:c9:b4:49:7d:ef:ee:28:
         3f:de:74:97:e7:d1:e5:1d:02:81:27:e4:6a:16:bf:9e:b5:15:
         3e:b4:eb:34:80:3f:60:34:8e:61:d7:80:71:47:79:5a:c6:63:
         6b:d7:7b:6b:17:0a:08:80:e5:b2:a1:38:9f:6e:10:0a:5c:2d:
         db:80:73:4c:43:94:2b:42:c3:62:6a:46:61:bf:8b:43:57:d7:
         d6:6d:97:7c:d1:9c:d5:40:f0:9b:2f:30:68:bd:95:12:bc:48:
         f0:09:28:03:db:9e:0f:8b:72:15:1b:a4:90:6a:1e:d1:e3:03:
         24:b5:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----