Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/323830343a313737343a3a2f33332d3333203d3e20323633313435.roa
File:                     323830343a313737343a3a2f33332d3333203d3e20323633313435.roa (raw, json)
Hash identifier:          34PVS2hbDqQyv+w8WbkDgxsH9qgxUim6LVdgq9NSzQQ=
Subject key identifier:   12:C4:B7:58:36:0C:9D:EC:28:C7:A5:4B:11:26:67:3F:43:7C:66:A2
Certificate issuer:       /CN=57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE
Certificate serial:       6A6D443AE7FF06E0EC2291C8D1F6882F40C80621
Authority key identifier: 57:C4:F1:A5:DE:60:EF:A1:14:F6:4F:1D:EA:32:CF:29:8B:F9:BF:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/323830343a313737343a3a2f33332d3333203d3e20323633313435.roa
Signing time:             Tue 14 Jun 2022 02:14:53 +0000
ROA not before:           Tue 14 Jun 2022 02:09:53 +0000
ROA not after:            Tue 13 Jun 2023 02:14:53 +0000
asID:                     263145
IP address blocks:        2804:1774::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6d:44:3a:e7:ff:06:e0:ec:22:91:c8:d1:f6:88:2f:40:c8:06:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE
        Validity
            Not Before: Jun 14 02:09:53 2022 GMT
            Not After : Jun 13 02:14:53 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:3e:5f:01:a3:a1:b9:34:13:c5:6b:f3:a0:
                    5e:9c:70:51:a1:e5:e5:b0:4c:f7:6f:57:26:98:71:
                    cf:15:30:5a:c0:72:db:84:19:2c:ee:71:f8:ed:04:
                    17:fd:aa:18:51:4d:0d:7a:38:8f:35:7d:fc:33:9e:
                    77:e6:c7:71:62:90:c5:78:fa:84:d9:34:5a:8a:1d:
                    6b:d5:7d:d5:44:28:9a:ba:30:e1:b2:59:66:20:70:
                    c0:ff:f6:bd:a4:d0:97:08:bd:0c:e7:84:f0:cd:1d:
                    22:69:5b:92:32:4b:0b:a5:0d:f6:cb:18:0b:3f:ca:
                    62:b5:1a:dc:57:2a:33:55:07:97:49:4c:6c:ad:48:
                    f2:ce:54:35:a9:c7:a8:bd:24:83:95:16:db:c6:86:
                    7a:2b:14:74:b7:46:b1:bd:67:75:c7:f6:fc:cd:5b:
                    a8:be:04:0d:58:30:21:a4:3f:9b:68:df:b1:ff:e7:
                    32:fc:87:70:04:05:25:b7:5e:22:3a:9c:06:9d:fd:
                    37:b5:ee:c9:ba:10:06:2a:7d:3a:99:bf:b3:5c:28:
                    0f:50:a3:64:72:b8:b9:52:dd:ad:e3:95:88:d5:97:
                    a7:3f:9e:20:f1:38:31:1c:dc:99:04:af:d0:cb:1a:
                    82:68:84:98:ba:37:4d:9a:d8:53:59:88:64:e5:ca:
                    ba:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C4:B7:58:36:0C:9D:EC:28:C7:A5:4B:11:26:67:3F:43:7C:66:A2
            X509v3 Authority Key Identifier:
                keyid:57:C4:F1:A5:DE:60:EF:A1:14:F6:4F:1D:EA:32:CF:29:8B:F9:BF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/323830343a313737343a3a2f33332d3333203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1774::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:fe:94:32:0f:5f:2f:4d:ec:66:eb:88:f5:f5:8a:40:d6:04:
         fe:46:88:0c:ae:cf:fa:f9:24:76:fa:31:87:27:47:cb:06:4f:
         fd:f1:78:ab:4d:0b:cb:99:d2:17:67:49:25:bc:c6:3b:c3:b9:
         65:d0:ce:a8:bb:2d:4e:eb:82:23:7c:33:81:4b:8e:6c:f9:bd:
         d0:29:22:67:1d:ab:95:14:ff:e7:d4:be:02:3d:2d:9f:18:e2:
         ca:ab:30:a6:33:6e:26:b2:da:02:79:2b:01:59:53:01:77:a4:
         55:ff:6d:aa:6d:08:68:d3:01:88:51:72:e3:0a:26:db:62:fb:
         db:b6:73:fa:8a:8a:dd:36:72:07:52:76:62:c7:c5:7f:a8:ff:
         78:b0:8f:8e:04:85:c8:b4:7f:5d:8e:d9:4e:5b:8c:92:aa:29:
         3c:44:77:36:c1:69:47:65:fc:99:f5:e1:79:a3:46:1a:93:60:
         00:d6:5a:f7:f0:7f:54:61:96:c4:da:4f:4f:16:c1:04:ca:9e:
         06:0c:3f:07:ee:d8:40:f5:ba:15:6b:55:d1:91:05:9c:37:06:
         fd:a7:a5:bc:03:65:41:46:25:58:d1:65:b0:96:cb:42:ae:0a:
         df:50:46:ce:a7:72:bd:30:dc:89:ff:91:b8:c9:92:38:d8:17:
         2e:16:d9:5f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUam1EOuf/BuDsIpHI0faIL0DIBiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdDNEYxQTVERTYwRUZBMTE0RjY0RjFERUEzMkNGMjk4
QkY5QkZERTAeFw0yMjA2MTQwMjA5NTNaFw0yMzA2MTMwMjE0NTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzYyODNFNUYwMUEzQTFCOTM0
MTNDNTZCRjNBMDVFOUM3MDUxQTFFNUU1QjA0Q0Y3NkY1NzI2OTg3MUNGMTUzMDVB
QzA3MkRCODQxOTJDRUU3MUY4RUQwNDE3RkRBQTE4NTE0RDBEN0EzODhGMzU3REZD
MzM5RTc3RTZDNzcxNjI5MEM1NzhGQTg0RDkzNDVBOEExRDZCRDU3REQ1NDQyODlB
QkEzMEUxQjI1OTY2MjA3MEMwRkZGNkJEQTREMDk3MDhCRDBDRTc4NEYwQ0QxRDIy
Njk1QjkyMzI0QjBCQTUwREY2Q0IxODBCM0ZDQTYyQjUxQURDNTcyQTMzNTUwNzk3
NDk0QzZDQUQ0OEYyQ0U1NDM1QTlDN0E4QkQyNDgzOTUxNkRCQzY4NjdBMkIxNDc0
Qjc0NkIxQkQ2Nzc1QzdGNkZDQ0Q1QkE4QkUwNDBENTgzMDIxQTQzRjlCNjhERkIx
RkZFNzMyRkM4NzcwMDQwNTI1Qjc1RTIyM0E5QzA2OURGRDM3QjVFRUM5QkExMDA2
MkE3RDNBOTlCRkIzNUMyODBGNTBBMzY0NzJCOEI5NTJEREFERTM5NTg4RDU5N0E3
M0Y5RTIwRjEzODMxMUNEQzk5MDRBRkQwQ0IxQTgyNjg4NDk4QkEzNzREOUFEODUz
NTk4ODY0RTVDQUJBQUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxig+XwGjobk0E8Vr86BenHBRoeXlsEz3b1cmmHHPFTBawHLbhBks
7nH47QQX/aoYUU0NejiPNX38M5535sdxYpDFePqE2TRaih1r1X3VRCiaujDhsllm
IHDA//a9pNCXCL0M54TwzR0iaVuSMksLpQ32yxgLP8pitRrcVyozVQeXSUxsrUjy
zlQ1qceovSSDlRbbxoZ6KxR0t0axvWd1x/b8zVuovgQNWDAhpD+baN+x/+cy/Idw
BAUlt14iOpwGnf03te7JuhAGKn06mb+zXCgPUKNkcri5Ut2t45WI1ZenP54g8Tgx
HNyZBK/QyxqCaISYujdNmthTWYhk5cq6rwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FBLEt1g2DJ3sKMelSxEmZz9DfGaiMB8GA1UdIwQYMBaAFFfE8aXeYO+hFPZPHeoy
zymL+b/eMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ1MTFzSFcxQXB3S1JZ
RUFmSGdFTWExQ3pzZ3c4NzFIcDRTTXBYM3BLc1JMLzAvNTdDNEYxQTVERTYwRUZB
MTE0RjY0RjFERUEzMkNGMjk4QkY5QkZERS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81N0M0RjFBNURFNjBFRkExMTRGNjRGMURFQTMyQ0YyOThCRjlC
RkRFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80NTExc0hXMUFwd0tSWUVBZkhn
RU1hMUN6c2d3ODcxSHA0U01wWDNwS3NSTC8wLzMyMzgzMDM0M2EzMTM3MzczNDNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMzMxMzQzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
F3QAMA0GCSqGSIb3DQEBCwUAA4IBAQBT/pQyD18vTexm64j19YpA1gT+RogMrs/6
+SR2+jGHJ0fLBk/98XirTQvLmdIXZ0klvMY7w7ll0M6ouy1O64IjfDOBS45s+b3Q
KSJnHauVFP/n1L4CPS2fGOLKqzCmM24mstoCeSsBWVMBd6RV/22qbQho0wGIUXLj
CibbYvvbtnP6iordNnIHUnZix8V/qP94sI+OBIXItH9djtlOW4ySqik8RHc2wWlH
ZfyZ9eF5o0Yak2AA1lr38H9UYZbE2k9PFsEEyp4GDD8H7thA9boVa1XRkQWcNwb9
p6W8A2VBRiVY0WWwlstCrgrfUEbOp3K9MNyJ/5G4yZI42BcuFtlf
-----END CERTIFICATE-----