Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/323830343a383262343a3a2f33322d3438203d3e20323732353335.roa
File:                     323830343a383262343a3a2f33322d3438203d3e20323732353335.roa (raw, json)
Hash identifier:          vQiN4IOdrRfQOBWqryuWEIZNT/3Lvi9Lfi3/ufhw98w=
Subject key identifier:   33:99:DD:B2:94:6D:5A:58:9A:FC:B1:F6:16:C1:4C:AA:D7:B0:C9:EA
Certificate issuer:       /CN=3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98
Certificate serial:       7CED7BD15372B2D30CE62FE156E1C92981FD87FB
Authority key identifier: 3D:92:BD:1D:86:D9:53:1F:C6:4C:CA:64:8B:A9:AA:D0:FE:20:DC:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/323830343a383262343a3a2f33322d3438203d3e20323732353335.roa
Signing time:             Sun 23 Apr 2023 16:44:56 +0000
ROA not before:           Sun 23 Apr 2023 16:39:56 +0000
ROA not after:            Sun 21 Apr 2024 16:44:56 +0000
asID:                     272535
IP address blocks:        2804:82b4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ed:7b:d1:53:72:b2:d3:0c:e6:2f:e1:56:e1:c9:29:81:fd:87:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98
        Validity
            Not Before: Apr 23 16:39:56 2023 GMT
            Not After : Apr 21 16:44:56 2024 GMT
        Subject: CN=3399DDB2946D5A589AFCB1F616C14CAAD7B0C9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:53:8d:ca:e2:84:a0:40:82:1c:25:4b:7b:
                    34:0a:6c:0c:9a:f5:eb:37:d1:d8:d6:12:9f:f7:c9:
                    24:f9:88:a5:fb:d3:e2:04:97:92:5f:23:33:79:33:
                    20:ed:e3:a7:22:b0:5a:c8:f1:f6:df:9c:fa:8e:b9:
                    5d:a5:d3:82:dc:0c:bd:e3:d4:25:7d:8a:be:ec:08:
                    3d:2e:4b:0c:20:b2:29:87:7d:f0:48:c4:5f:97:8d:
                    ae:72:93:34:d9:55:ef:02:f6:43:46:5f:cc:bf:cb:
                    fb:95:86:f3:45:0c:3f:f4:89:a9:33:95:8f:38:39:
                    2b:07:fa:8f:d1:d0:1b:cb:4f:0d:71:4b:6a:e8:d5:
                    b8:47:83:c8:54:b2:74:2d:80:0e:f7:e2:6f:12:da:
                    82:f9:0e:5f:d0:be:1d:60:6f:04:9b:76:e8:f8:54:
                    9f:fb:f5:18:b8:9a:6b:16:18:d5:05:ec:fd:71:1c:
                    0d:26:81:7e:bb:3d:f9:f7:26:89:b4:3a:5e:6d:3b:
                    68:7c:e9:e9:b7:95:8b:8c:83:61:52:eb:4c:b9:43:
                    5c:4c:2e:35:a9:12:40:98:e9:24:32:b0:b9:f0:1f:
                    b8:f6:d0:61:b3:c2:ec:7c:44:1e:3b:5f:b7:7d:e3:
                    ae:b2:5a:88:51:c1:d4:72:9d:22:d8:55:a9:8f:06:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:99:DD:B2:94:6D:5A:58:9A:FC:B1:F6:16:C1:4C:AA:D7:B0:C9:EA
            X509v3 Authority Key Identifier:
                keyid:3D:92:BD:1D:86:D9:53:1F:C6:4C:CA:64:8B:A9:AA:D0:FE:20:DC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/323830343a383262343a3a2f33322d3438203d3e20323732353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:4c:6a:05:cc:f2:33:02:3d:40:8b:42:74:f5:ed:9b:dc:f6:
         f0:0b:4a:b9:68:79:a7:e6:f1:16:0c:d1:56:81:92:bf:42:8b:
         d3:84:cf:d5:d0:2b:b1:2e:a5:31:be:0c:a4:57:f5:86:b8:95:
         6f:da:94:46:d7:8e:97:de:b7:b5:cf:d1:e4:72:c7:ef:81:c7:
         6c:1a:70:2c:45:d2:03:50:ed:18:49:cf:cd:e8:ed:3d:24:78:
         51:63:4d:41:64:57:6b:bc:1c:20:b1:f9:d1:d2:41:82:62:88:
         d7:27:20:51:d6:9d:4e:6e:44:9f:57:43:39:55:3b:e6:41:d6:
         47:42:fa:0a:d5:6a:d6:15:1c:5b:ed:70:de:e6:c8:3c:57:b7:
         aa:c1:c5:a6:47:7d:69:32:d8:32:40:42:1d:85:28:ef:f5:26:
         fe:be:f7:63:f5:42:eb:1c:5e:0a:a8:71:0d:9b:f6:b8:4b:ab:
         1f:70:d2:eb:65:ed:07:99:50:05:92:e2:b1:7b:e4:28:06:98:
         74:32:0b:bd:e9:bb:77:75:8e:24:31:a8:1e:1e:09:6c:83:57:
         29:fa:f6:d5:17:68:96:9c:31:b5:ce:c4:7e:06:bc:03:05:ae:
         04:79:d9:69:90:41:4f:03:97:47:83:ee:a5:16:2a:67:3f:62:
         1e:1f:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----