Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/323830343a333531633a383030303a3a2f33332d3333203d3e20323636323639.roa
File:                     323830343a333531633a383030303a3a2f33332d3333203d3e20323636323639.roa (raw, json)
Hash identifier:          7M9aeYclWq1QAZb+diq6AtWhtwL2QwjZ6IVph1nXsug=
Subject key identifier:   40:7D:BB:B1:1A:30:09:59:79:E3:0B:EA:D6:12:95:66:CA:51:F4:36
Certificate issuer:       /CN=46E3A44C62966D6B8651186BB0877B157D025A80
Certificate serial:       480D0F0436460BCA03431EB0BE3C49A3AF28AAAB
Authority key identifier: 46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/323830343a333531633a383030303a3a2f33332d3333203d3e20323636323639.roa
Signing time:             Sat 14 Jan 2023 14:23:54 +0000
ROA not before:           Sat 14 Jan 2023 14:18:54 +0000
ROA not after:            Sat 13 Jan 2024 14:23:54 +0000
asID:                     266269
IP address blocks:        2804:351c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0d:0f:04:36:46:0b:ca:03:43:1e:b0:be:3c:49:a3:af:28:aa:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E3A44C62966D6B8651186BB0877B157D025A80
        Validity
            Not Before: Jan 14 14:18:54 2023 GMT
            Not After : Jan 13 14:23:54 2024 GMT
        Subject: CN=407DBBB11A30095979E30BEAD6129566CA51F436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:47:2a:23:6f:38:4a:bc:af:6b:94:38:8c:
                    65:ac:55:fc:5b:90:19:07:3d:df:17:41:55:f7:71:
                    d7:cc:ae:bc:51:55:97:56:9a:5e:00:1c:b5:ee:db:
                    7e:9e:5e:7e:54:8e:98:48:9d:22:99:08:3b:c7:41:
                    3e:da:61:e7:b4:7d:9b:71:a7:61:7a:c4:66:41:05:
                    7b:93:b6:15:43:77:04:6a:92:dc:7e:7a:a8:d3:2b:
                    cb:72:e3:f5:42:65:a1:56:bd:0c:9b:9e:7a:e0:fc:
                    f0:54:74:48:eb:04:d5:3c:2d:b6:e2:bc:d3:c1:ce:
                    16:d4:dd:8b:a1:49:d9:5b:c5:e6:06:58:4b:bb:71:
                    30:fe:6c:f9:d2:69:a6:1a:95:1e:d2:c8:02:ec:bb:
                    6b:e2:6c:fc:20:99:1e:b7:52:46:5a:40:5a:9d:c7:
                    31:80:1c:16:9e:6d:ca:4f:33:25:3c:69:84:73:15:
                    95:84:73:98:7f:d3:f4:64:84:4b:1a:9b:9f:97:31:
                    ca:6f:4e:07:5c:e2:aa:80:44:2b:17:89:53:e6:b4:
                    49:5a:d7:d4:b0:8c:2c:c5:ca:8b:e6:fd:60:e9:9a:
                    98:88:7a:42:41:f8:0c:89:f8:05:e5:26:fe:30:0c:
                    a4:38:78:b5:c1:c0:7f:87:b3:6c:a2:f0:24:1f:db:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7D:BB:B1:1A:30:09:59:79:E3:0B:EA:D6:12:95:66:CA:51:F4:36
            X509v3 Authority Key Identifier:
                keyid:46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/46E3A44C62966D6B8651186BB0877B157D025A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/323830343a333531633a383030303a3a2f33332d3333203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:351c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5c:e7:6c:b6:5c:6b:a6:f9:3c:cb:79:c6:79:0c:4d:da:b2:aa:
         74:55:c6:41:b2:03:08:97:6e:b8:be:fe:32:a9:72:3d:a4:f2:
         d0:b3:7f:23:44:a1:6f:ce:d0:73:7c:10:f0:3e:c8:79:4c:30:
         d4:40:76:18:2a:07:0e:75:e3:ee:2c:d3:e7:34:ce:e0:d7:89:
         3b:fc:b5:49:38:2b:4d:f0:ae:6b:cc:6d:d7:ec:1b:86:6d:14:
         59:bf:85:2a:69:21:85:07:f7:ff:d3:70:bf:bf:b8:30:71:a3:
         44:39:fe:fc:93:32:be:97:5d:3e:53:55:86:07:85:eb:71:11:
         e8:1d:92:c2:ee:60:d8:bb:3f:50:53:fc:7f:ad:7c:9f:9b:5e:
         d7:ba:59:9d:ed:1d:86:17:92:69:e1:42:f6:0e:d9:0c:2c:b7:
         89:5d:28:f7:74:60:41:83:e1:2e:36:af:9a:70:86:eb:02:2c:
         5e:80:85:a1:f8:6b:2e:1b:29:11:fe:61:8a:52:16:da:d7:e7:
         c6:28:24:48:e5:32:55:19:ca:68:15:4d:43:69:41:97:9a:e9:
         50:50:be:20:07:4e:26:b9:8c:ce:31:32:a1:19:08:96:91:72:
         82:9d:97:f7:f7:b8:20:1b:d9:ab:ef:60:e3:ca:52:cf:f4:f4:
         78:ee:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----