Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/323830343a323066383a3a2f33322d3634203d3e20323634353234.roa
File:                     323830343a323066383a3a2f33322d3634203d3e20323634353234.roa (raw, json)
Hash identifier:          b2hYPdkRJKcIRHSG8siVO72lkzB4k3nQDRFlRIICFJw=
Subject key identifier:   A1:6E:6E:EF:E6:8A:88:7C:60:2F:12:2E:EC:5E:19:84:DC:8E:A9:67
Certificate issuer:       /CN=BAFB33D9061B33CAA164C814D099857A153B7E40
Certificate serial:       44600170F8435362603827EA44A57C8B5B67F7F8
Authority key identifier: BA:FB:33:D9:06:1B:33:CA:A1:64:C8:14:D0:99:85:7A:15:3B:7E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAFB33D9061B33CAA164C814D099857A153B7E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/323830343a323066383a3a2f33322d3634203d3e20323634353234.roa
Signing time:             Mon 13 Jun 2022 23:51:16 +0000
ROA not before:           Mon 13 Jun 2022 23:46:16 +0000
ROA not after:            Mon 12 Jun 2023 23:51:16 +0000
asID:                     264524
IP address blocks:        2804:20f8::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:60:01:70:f8:43:53:62:60:38:27:ea:44:a5:7c:8b:5b:67:f7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAFB33D9061B33CAA164C814D099857A153B7E40
        Validity
            Not Before: Jun 13 23:46:16 2022 GMT
            Not After : Jun 12 23:51:16 2023 GMT
        Subject: CN=A16E6EEFE68A887C602F122EEC5E1984DC8EA967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:4f:20:f1:d3:5d:40:85:d1:e2:c3:5e:b3:
                    5a:e2:f7:df:46:82:a8:10:e7:0e:2b:af:08:c5:4e:
                    27:d5:41:5a:33:65:47:6d:1f:7b:27:ad:ee:81:7b:
                    4c:ec:b5:a2:50:56:fc:18:c4:e0:7a:1c:74:be:09:
                    78:3b:41:27:5a:61:02:e7:5f:af:b4:71:4e:c4:b8:
                    65:1e:0e:0d:a7:fa:46:90:67:3f:f0:77:39:6b:04:
                    c3:b2:d7:8b:11:e8:7a:0f:5f:88:22:46:21:77:01:
                    b7:56:4b:8c:56:b7:37:da:c7:35:84:88:b1:e9:27:
                    76:60:2b:d4:72:f4:79:99:db:1e:a5:bd:6a:ca:cf:
                    8a:c5:81:13:e3:bc:05:06:84:22:d0:a3:f1:64:42:
                    8b:5a:a6:c2:d7:87:a2:1e:9c:b7:81:e9:e1:7c:b8:
                    70:ae:df:ea:49:cd:fc:b0:bb:15:7f:aa:8a:78:b0:
                    1b:1a:52:a0:50:3b:e1:7a:fd:af:44:ca:b1:9c:db:
                    ed:ea:96:20:9a:34:77:b7:f5:58:c0:f9:e0:10:6f:
                    96:12:fd:58:31:a1:56:f1:06:56:e7:a9:ac:c4:b9:
                    21:dd:85:72:94:58:40:af:22:46:d5:fa:7a:86:c6:
                    ba:9d:7a:5b:43:68:0c:69:88:44:21:c1:f5:5b:5d:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6E:6E:EF:E6:8A:88:7C:60:2F:12:2E:EC:5E:19:84:DC:8E:A9:67
            X509v3 Authority Key Identifier:
                keyid:BA:FB:33:D9:06:1B:33:CA:A1:64:C8:14:D0:99:85:7A:15:3B:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/BAFB33D9061B33CAA164C814D099857A153B7E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAFB33D9061B33CAA164C814D099857A153B7E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/323830343a323066383a3a2f33322d3634203d3e20323634353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:c3:7b:e5:21:95:f0:1c:5f:71:55:6c:3c:47:81:d6:ed:33:
         e7:a5:bf:59:0d:c5:41:5a:0b:dc:cc:b9:3b:dd:a3:da:7f:e6:
         85:62:24:6d:95:cb:4c:73:c5:05:b7:c2:08:ae:f0:f1:54:5c:
         33:1b:a0:b0:a1:5e:39:4c:ea:a5:94:05:cc:d0:6e:aa:dd:62:
         a9:2a:cb:78:bb:d8:b1:d2:18:1b:9c:82:a6:2f:b0:de:3e:dd:
         0a:68:43:17:71:41:9c:dd:88:2a:70:e4:73:85:ae:33:02:99:
         e0:14:f3:e8:5e:b6:54:8a:9d:73:5b:b9:f0:4f:52:87:4c:48:
         27:50:e3:cf:ae:7f:bb:3b:d0:26:a8:fc:7b:aa:0e:27:30:ce:
         26:c4:78:9d:d8:3d:61:7b:f2:dc:3f:0d:71:44:23:ce:e6:a7:
         76:c0:4d:14:86:12:32:ab:24:5f:80:c0:9f:bb:37:c1:ce:06:
         da:b5:29:ad:0f:76:ed:f6:16:65:e6:75:28:b7:1f:5f:39:91:
         91:6f:3e:71:1b:3a:06:ae:dd:6d:5f:2c:ac:cd:30:bb:77:b6:
         85:c8:e8:e7:6a:d3:ab:d5:dc:73:b2:c8:bc:bb:7e:f0:a4:c9:
         48:23:76:1f:6c:e2:02:7e:b5:09:50:07:4c:21:28:c6:ec:2e:
         87:82:df:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----