Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/323830343a363130343a3a2f33322d3334203d3e20323639323036.roa
File:                     323830343a363130343a3a2f33322d3334203d3e20323639323036.roa (raw, json)
Hash identifier:          1JzTNcXqGah/ZUM1SE1KXUXhJahrcmhpWgVwfQS3c4k=
Subject key identifier:   48:37:D4:49:F9:F7:61:58:74:98:6A:59:6D:DB:56:5A:E5:26:1E:69
Certificate issuer:       /CN=A7C3DB42D65FD92F501A75E7BA78B2E247E579DC
Certificate serial:       462BFF6B641480309D5C763CD63C18772EE3D9CA
Authority key identifier: A7:C3:DB:42:D6:5F:D9:2F:50:1A:75:E7:BA:78:B2:E2:47:E5:79:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7C3DB42D65FD92F501A75E7BA78B2E247E579DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/323830343a363130343a3a2f33322d3334203d3e20323639323036.roa
Signing time:             Mon 07 Feb 2022 15:46:00 +0000
ROA not before:           Mon 07 Feb 2022 15:41:00 +0000
ROA not after:            Mon 06 Feb 2023 15:46:00 +0000
asID:                     269206
IP address blocks:        2804:6104::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2b:ff:6b:64:14:80:30:9d:5c:76:3c:d6:3c:18:77:2e:e3:d9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C3DB42D65FD92F501A75E7BA78B2E247E579DC
        Validity
            Not Before: Feb  7 15:41:00 2022 GMT
            Not After : Feb  6 15:46:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:0d:d9:d3:63:e0:1a:1e:2c:d8:5f:81:54:
                    95:a1:8f:b3:f8:8d:bc:9e:fb:51:22:bf:ff:2a:54:
                    79:4f:ad:72:b0:69:e8:26:07:ff:e8:99:00:95:79:
                    c3:c2:a9:c8:bc:77:c3:f3:17:a3:40:62:69:82:c6:
                    f0:f0:04:df:11:36:f9:e7:a3:a9:d1:76:9d:15:cf:
                    34:d8:cc:87:2b:e9:d2:0b:7f:fc:6f:70:81:b1:f7:
                    a7:90:3c:df:b7:cc:38:58:2c:47:38:b5:70:9e:fa:
                    4a:15:f6:e7:c4:19:48:41:dd:3f:db:e4:80:f1:7d:
                    e6:a2:5f:fd:ad:a1:74:a2:1e:6c:83:a1:d8:93:12:
                    95:2f:f0:9f:75:52:ef:4d:e4:c1:26:d3:37:aa:09:
                    fb:d6:14:bd:5f:c0:46:a2:fe:52:4a:ad:ca:3f:95:
                    e5:e1:88:ab:a1:ea:22:54:8c:67:99:cd:41:67:e9:
                    1c:47:0f:ae:93:c1:17:26:b7:08:cd:8d:e6:88:90:
                    d5:89:c2:a0:7d:b1:f9:89:e6:ac:21:39:e7:36:8e:
                    f9:3a:3d:61:2e:26:3b:45:d2:b8:7a:14:48:5f:76:
                    ef:1d:5e:29:4a:46:d3:f8:ce:7c:ec:d6:29:0a:e5:
                    95:7e:c8:45:fb:19:8b:11:7e:e2:05:17:b8:87:14:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:37:D4:49:F9:F7:61:58:74:98:6A:59:6D:DB:56:5A:E5:26:1E:69
            X509v3 Authority Key Identifier:
                keyid:A7:C3:DB:42:D6:5F:D9:2F:50:1A:75:E7:BA:78:B2:E2:47:E5:79:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/A7C3DB42D65FD92F501A75E7BA78B2E247E579DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7C3DB42D65FD92F501A75E7BA78B2E247E579DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/323830343a363130343a3a2f33322d3334203d3e20323639323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6104::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:04:7e:ae:93:12:04:e1:25:f7:62:fb:32:3b:04:4f:a4:1d:
         22:9b:d7:82:11:07:e4:a8:cc:97:85:ba:12:e3:3e:7d:a4:94:
         4f:ee:5c:73:00:46:b9:ca:56:a9:4f:2e:25:99:9e:8e:22:6c:
         fa:2f:e8:d6:58:10:d6:41:07:e5:d1:10:21:5d:f5:65:52:24:
         d1:b9:f3:a1:25:ca:9e:a0:ea:89:d9:e7:49:b1:fc:47:99:19:
         4d:5a:bb:74:71:e3:db:b4:47:bb:45:20:5c:08:84:f6:4a:fb:
         df:92:a4:9f:32:fc:a3:89:52:ca:f0:7c:d2:c1:be:be:b0:bb:
         0c:cb:5d:31:b3:54:43:91:53:f8:07:4a:cf:e7:49:03:d3:7f:
         53:cf:78:91:83:bc:bc:52:89:b4:40:85:d8:52:50:45:de:b6:
         67:52:39:82:e0:60:a5:4e:62:1e:9a:15:4f:81:0e:8a:d5:ba:
         09:01:c4:52:1e:3d:62:ff:b8:f3:57:fa:4f:99:c6:fc:7d:bb:
         eb:c6:94:88:43:9a:17:49:9b:c1:7b:11:b3:d3:6e:dc:7a:44:
         27:7b:12:30:0a:81:7f:a8:04:c1:63:d7:8f:10:4a:4a:e1:5a:
         30:0b:37:8a:c4:63:b3:c5:0d:ca:dc:d2:8a:99:43:8b:00:e9:
         4c:72:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----