Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/323830343a333132633a3a2f33322d3438203d3e20323634393938.roa
File:                     323830343a333132633a3a2f33322d3438203d3e20323634393938.roa (raw, json)
Hash identifier:          y4es4XSpAYPfudtYkLEnD8DXinFkaW9z/kwbPb4Lt7o=
Subject key identifier:   7A:84:8B:83:95:71:47:3E:5D:91:FB:A4:21:20:9B:C2:CD:BE:5A:DC
Certificate issuer:       /CN=2B8C048D5678769A63BDDF77C151B142C39211C1
Certificate serial:       5DE6EFD981F60053F38342333D8AAC06A34436C4
Authority key identifier: 2B:8C:04:8D:56:78:76:9A:63:BD:DF:77:C1:51:B1:42:C3:92:11:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B8C048D5678769A63BDDF77C151B142C39211C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/323830343a333132633a3a2f33322d3438203d3e20323634393938.roa
Signing time:             Sat 23 Apr 2022 19:35:51 +0000
ROA not before:           Sat 23 Apr 2022 19:30:51 +0000
ROA not after:            Sat 22 Apr 2023 19:35:51 +0000
asID:                     264998
IP address blocks:        2804:312c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e6:ef:d9:81:f6:00:53:f3:83:42:33:3d:8a:ac:06:a3:44:36:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B8C048D5678769A63BDDF77C151B142C39211C1
        Validity
            Not Before: Apr 23 19:30:51 2022 GMT
            Not After : Apr 22 19:35:51 2023 GMT
        Subject: CN=7A848B839571473E5D91FBA421209BC2CDBE5ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:d2:5a:f3:28:f1:66:ca:f7:04:8a:4d:65:
                    26:e8:39:70:ca:75:bd:d6:40:f7:6f:53:27:5d:13:
                    dd:2a:c4:f5:d6:63:28:1d:fc:3e:3f:1f:b8:8b:8b:
                    58:10:8a:2f:9b:a4:a5:34:16:08:0b:9f:dc:f8:99:
                    6e:9a:23:8e:cd:a9:af:1c:5e:bb:c4:b0:dd:64:68:
                    a0:2b:f1:cf:cd:c3:e7:23:56:69:5c:ae:52:3a:ff:
                    16:b9:33:74:4e:26:20:c5:58:3c:8d:66:10:8c:4b:
                    63:dd:34:61:b2:bf:16:72:62:39:bc:b8:49:9c:b6:
                    c6:45:8e:6a:9b:78:ae:cc:39:87:a9:0e:09:b0:98:
                    09:f7:11:6c:bf:b1:14:87:15:be:e8:54:10:70:cf:
                    bd:df:ea:3c:7d:07:ca:ba:90:29:84:59:8e:76:fc:
                    59:73:9d:28:ad:18:0e:18:53:70:46:cd:fd:17:45:
                    84:d0:d9:cd:8e:53:0c:cc:a7:01:ef:1f:c7:02:c4:
                    25:17:0d:a1:92:ba:7e:7b:9f:8b:59:27:f9:d6:4d:
                    fe:a8:fb:68:34:22:67:4d:e1:ea:1a:9f:f0:b8:63:
                    b4:12:06:d8:da:27:d8:0c:78:4b:83:07:3f:b8:0f:
                    ab:42:a7:d1:ff:b5:48:75:01:22:78:8f:05:35:6a:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:84:8B:83:95:71:47:3E:5D:91:FB:A4:21:20:9B:C2:CD:BE:5A:DC
            X509v3 Authority Key Identifier:
                keyid:2B:8C:04:8D:56:78:76:9A:63:BD:DF:77:C1:51:B1:42:C3:92:11:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/2B8C048D5678769A63BDDF77C151B142C39211C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B8C048D5678769A63BDDF77C151B142C39211C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/323830343a333132633a3a2f33322d3438203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:312c::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:e7:85:64:c3:fe:b4:a8:3e:b9:e0:be:9e:1a:e8:f1:4a:2d:
         d7:62:ce:d3:44:0d:e6:0d:87:81:95:61:f7:38:be:ad:16:84:
         6a:4d:b3:6b:09:0c:36:0d:9a:9d:08:61:1f:96:42:af:39:46:
         c2:a4:fa:8b:36:15:21:8a:5e:af:fa:63:2d:78:3e:f6:89:fe:
         bd:0f:37:cb:ce:95:7d:e9:9c:30:f9:f6:46:4a:9e:2d:83:f1:
         06:bd:a0:b1:44:ba:50:29:3d:db:83:2e:88:98:f4:ae:48:cb:
         60:91:cc:38:0c:34:31:95:8a:33:28:09:06:18:eb:fc:91:50:
         6b:81:c5:64:51:3d:59:13:c5:95:81:37:4d:36:87:e5:b6:6a:
         d7:60:27:1a:53:5f:56:05:bc:0a:33:ca:40:3c:fc:61:94:70:
         60:c1:90:d6:08:d7:9f:39:18:0b:f8:a6:4d:a4:c3:6e:c8:7e:
         59:c7:70:31:3e:a4:a1:5b:e4:28:2d:9d:27:3c:bf:ff:03:19:
         d1:99:67:a3:77:f3:f5:dd:74:b1:f8:09:f8:e6:51:c9:dd:52:
         f9:29:b1:fd:a2:6f:a7:77:e7:b7:89:b5:18:a6:a4:d1:5c:23:
         42:de:81:f0:2c:90:cb:ba:aa:97:d1:6f:dd:0c:27:69:91:df:
         c7:e3:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----