Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/323830343a333263633a3a2f33322d3438203d3e20323635303938.roa
File:                     323830343a333263633a3a2f33322d3438203d3e20323635303938.roa (raw, json)
Hash identifier:          lbDlQwUIqqk5vEYsmK/QmYz+duyHUiEJJyvV8jDRpLU=
Subject key identifier:   0A:F3:6D:75:2E:68:FF:D6:F2:B9:04:DA:05:37:D0:19:B4:8C:AF:CD
Certificate issuer:       /CN=3B6FF1683D201F90D697B0A5A29C84440B11C4CD
Certificate serial:       5B6B4777B34104ECDCFF0D0B206A9556B5970B69
Authority key identifier: 3B:6F:F1:68:3D:20:1F:90:D6:97:B0:A5:A2:9C:84:44:0B:11:C4:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B6FF1683D201F90D697B0A5A29C84440B11C4CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/323830343a333263633a3a2f33322d3438203d3e20323635303938.roa
Signing time:             Thu 27 Jan 2022 12:50:50 +0000
ROA not before:           Thu 27 Jan 2022 12:45:50 +0000
ROA not after:            Fri 27 Jan 2023 12:50:50 +0000
asID:                     265098
IP address blocks:        2804:32cc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6b:47:77:b3:41:04:ec:dc:ff:0d:0b:20:6a:95:56:b5:97:0b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B6FF1683D201F90D697B0A5A29C84440B11C4CD
        Validity
            Not Before: Jan 27 12:45:50 2022 GMT
            Not After : Jan 27 12:50:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:58:cf:69:00:09:b5:53:33:52:7f:ce:43:
                    4a:bb:17:9d:6f:25:6a:af:66:61:85:b7:d6:b1:e3:
                    6a:82:de:ce:a8:dc:45:9c:ef:eb:a7:98:74:e4:7a:
                    e4:d2:6e:ca:43:23:16:9f:9a:70:92:5b:d4:a6:a0:
                    bc:75:ca:64:d0:1b:1f:e7:f2:43:f3:8b:81:63:ae:
                    03:0c:24:81:a0:5a:40:41:c0:8f:f2:f5:eb:11:03:
                    3d:30:06:98:b4:29:f2:ec:ef:b0:1f:13:9e:45:cd:
                    c4:71:50:2f:df:0d:bf:83:1c:77:cc:5f:51:5b:d7:
                    d3:b4:d1:6f:57:fa:e0:68:55:22:0f:aa:ed:09:0e:
                    1d:d2:19:ef:09:8d:d3:0c:21:a2:07:29:48:a6:29:
                    ab:19:c5:92:45:dc:26:7e:d5:fd:26:98:e6:8e:41:
                    92:7c:2b:a1:63:2e:de:31:5a:f7:d1:26:62:e7:c4:
                    d8:17:39:c0:de:b4:65:3d:4f:df:82:77:9b:fd:3d:
                    20:e7:64:1d:db:9d:89:d2:6c:6c:46:87:92:36:ee:
                    f2:14:e1:75:36:87:dd:6c:c0:0a:78:fb:96:3f:98:
                    76:ab:4a:7a:c2:40:17:77:3b:f6:e0:ec:4d:43:28:
                    97:70:5b:28:40:f1:21:a3:63:d0:75:0c:33:f9:aa:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F3:6D:75:2E:68:FF:D6:F2:B9:04:DA:05:37:D0:19:B4:8C:AF:CD
            X509v3 Authority Key Identifier:
                keyid:3B:6F:F1:68:3D:20:1F:90:D6:97:B0:A5:A2:9C:84:44:0B:11:C4:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3B6FF1683D201F90D697B0A5A29C84440B11C4CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B6FF1683D201F90D697B0A5A29C84440B11C4CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/323830343a333263633a3a2f33322d3438203d3e20323635303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         dc:23:5f:34:68:38:c4:9c:fa:4a:ce:12:3d:79:3a:cd:77:a5:
         ba:db:cd:ee:9f:74:ea:a1:2b:b0:b0:d6:14:0c:6c:40:fc:7b:
         93:2d:5e:2d:ca:d7:ae:8a:e8:de:a0:5a:f2:1d:d3:cc:96:62:
         2c:78:24:95:ec:2c:5c:7d:73:7c:61:2d:2c:2e:04:4d:c2:07:
         b5:5b:26:99:60:bd:8c:df:3c:c2:02:40:ed:c7:0e:ba:e5:9c:
         2d:5c:b3:ac:37:42:a0:ee:46:95:5d:61:7f:ea:ac:02:88:1f:
         a7:9b:48:bb:43:63:a6:c0:7b:d3:bb:d1:d1:09:6c:3a:68:c8:
         83:ce:2f:95:fd:9e:26:bf:22:ff:cf:ff:c0:81:19:cd:81:51:
         01:90:69:f4:26:b3:46:6e:ad:12:61:3d:79:60:21:a9:75:b0:
         8f:3d:27:43:cf:48:4d:fd:40:2c:fc:7c:b8:75:07:9c:6b:c8:
         d8:35:27:51:c5:f2:08:67:c5:ad:d1:94:54:78:74:b8:d1:1e:
         68:34:de:6b:e4:f4:b1:68:d6:0f:4c:bc:dc:bb:9d:30:39:dc:
         ff:2f:aa:30:db:45:f6:76:7e:66:f3:e2:f6:21:f7:ba:d9:f4:
         c2:ce:f2:d3:1d:c4:0a:c2:ad:10:67:25:33:a2:68:53:2c:f5:
         d2:cc:d4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----