Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/323830343a333439343a3a2f33322d3333203d3e20323635343636.roa
File:                     323830343a333439343a3a2f33322d3333203d3e20323635343636.roa (raw, json)
Hash identifier:          NRpnER8XE59nWCLq2z+VcXpCFKIqwfLRI1f1phE2tDs=
Subject key identifier:   BB:E9:68:46:F6:1B:01:DB:EC:CE:10:85:2C:86:C0:55:7A:99:20:95
Certificate issuer:       /CN=21AD11813E5933796A90E41AAF2BB30C2579D0DA
Certificate serial:       12D935F3B6CE4DA2C14B26E28B44BCE3C82AF82C
Authority key identifier: 21:AD:11:81:3E:59:33:79:6A:90:E4:1A:AF:2B:B3:0C:25:79:D0:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/323830343a333439343a3a2f33322d3333203d3e20323635343636.roa
Signing time:             Thu 24 Mar 2022 01:44:00 +0000
ROA not before:           Thu 24 Mar 2022 01:39:00 +0000
ROA not after:            Thu 23 Mar 2023 01:44:00 +0000
asID:                     265466
IP address blocks:        2804:3494::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d9:35:f3:b6:ce:4d:a2:c1:4b:26:e2:8b:44:bc:e3:c8:2a:f8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AD11813E5933796A90E41AAF2BB30C2579D0DA
        Validity
            Not Before: Mar 24 01:39:00 2022 GMT
            Not After : Mar 23 01:44:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:c0:92:d9:d3:93:05:26:dc:bf:8b:34:bf:
                    a8:7b:16:6b:5d:15:e4:9a:5c:d5:f9:a9:ff:a2:b9:
                    18:7c:6e:af:2a:7c:66:43:11:2d:af:5f:a8:00:68:
                    a6:15:f3:84:ff:67:dd:ba:a7:53:bd:47:bd:6b:af:
                    59:c6:b9:be:73:e3:a2:e2:c1:80:57:86:5c:ca:51:
                    8e:09:b4:ae:5a:bc:05:e7:2f:2e:44:c6:b5:95:63:
                    e9:6c:13:ce:e4:e1:02:97:48:02:d4:58:c2:63:5f:
                    41:17:78:84:19:84:b6:bd:03:f5:60:8f:2f:41:bb:
                    f8:76:dd:3c:22:22:15:13:ca:d0:85:f3:2a:96:dc:
                    4a:ba:73:f8:25:45:54:42:3f:7a:e5:1e:82:32:8e:
                    84:8e:d0:a1:4b:a5:7e:cd:d9:5f:8e:fb:f7:b0:55:
                    f7:3c:5d:62:92:4c:8c:c4:2c:8c:09:d1:b6:f6:53:
                    26:4b:bd:82:f4:79:b2:ee:40:ba:f2:8e:c1:f7:5c:
                    33:96:88:c2:af:0a:11:a2:99:a3:fe:8b:12:54:3a:
                    a8:0d:a2:03:ca:b5:cf:ca:8c:03:f3:9c:a6:68:49:
                    83:86:75:21:b1:65:88:9d:ff:4d:b0:2a:02:57:c4:
                    6b:5e:c5:91:97:11:ff:63:14:34:01:ce:7c:14:48:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E9:68:46:F6:1B:01:DB:EC:CE:10:85:2C:86:C0:55:7A:99:20:95
            X509v3 Authority Key Identifier:
                keyid:21:AD:11:81:3E:59:33:79:6A:90:E4:1A:AF:2B:B3:0C:25:79:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21AD11813E5933796A90E41AAF2BB30C2579D0DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/323830343a333439343a3a2f33322d3333203d3e20323635343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3494::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:b6:29:a6:c0:ce:d2:4a:f6:45:9a:2b:ad:e2:e0:0a:87:71:
         c1:ec:55:af:26:d3:f8:f7:51:6d:ad:2e:7b:36:4c:2c:12:40:
         5e:37:38:40:8e:57:05:9a:64:dc:3c:1c:76:ed:6d:f2:9f:61:
         7c:aa:3a:88:3b:1a:6e:b3:e2:3f:a6:92:b8:33:de:cf:51:aa:
         d0:ca:c7:60:68:0c:43:b5:64:ec:4c:e4:6d:db:27:9a:06:08:
         49:0b:78:3d:50:0c:51:a6:bc:87:e5:2c:6f:8f:8e:c5:8f:19:
         bd:82:06:a9:72:c0:49:b4:87:63:57:c1:b2:44:9d:8e:e4:f3:
         bb:a2:f7:32:eb:32:88:43:29:88:ec:4e:e8:a4:80:7d:b8:34:
         d9:f8:1a:c2:4e:44:2e:17:47:04:9a:7e:01:92:4c:3c:76:d0:
         16:4f:db:94:54:8e:79:ca:4c:02:20:54:60:de:8c:ee:17:e2:
         5a:f5:83:94:4a:45:46:05:c3:d6:3e:bb:0c:41:a6:db:62:6f:
         af:c7:e9:c1:e4:b8:cb:e1:23:ac:e9:02:0d:f6:48:01:49:16:
         03:9e:1c:65:4b:73:86:9b:a6:05:5a:d7:ef:ee:c1:97:2a:7e:
         01:a4:61:7a:02:d8:8f:10:3b:c7:70:ef:6e:20:99:7c:34:a1:
         a1:5c:37:7a
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUEtk187bOTaLBSybii0S848gq+CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBRDExODEzRTU5MzM3OTZBOTBFNDFBQUYyQkIzMEMy
NTc5RDBEQTAeFw0yMjAzMjQwMTM5MDBaFw0yMzAzMjMwMTQ0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzRFQkMwOTJEOUQzOTMwNTI2
RENCRjhCMzRCRkE4N0IxNjZCNUQxNUU0OUE1Q0Q1RjlBOUZGQTJCOTE4N0M2RUFG
MkE3QzY2NDMxMTJEQUY1RkE4MDA2OEE2MTVGMzg0RkY2N0REQkFBNzUzQkQ0N0JE
NkJBRjU5QzZCOUJFNzNFM0EyRTJDMTgwNTc4NjVDQ0E1MThFMDlCNEFFNUFCQzA1
RTcyRjJFNDRDNkI1OTU2M0U5NkMxM0NFRTRFMTAyOTc0ODAyRDQ1OEMyNjM1RjQx
MTc3ODg0MTk4NEI2QkQwM0Y1NjA4RjJGNDFCQkY4NzZERDNDMjIyMjE1MTNDQUQw
ODVGMzJBOTZEQzRBQkE3M0Y4MjU0NTU0NDIzRjdBRTUxRTgyMzI4RTg0OEVEMEEx
NEJBNTdFQ0REOTVGOEVGQkY3QjA1NUY3M0M1RDYyOTI0QzhDQzQyQzhDMDlEMUI2
RjY1MzI2NEJCRDgyRjQ3OUIyRUU0MEJBRjI4RUMxRjc1QzMzOTY4OEMyQUYwQTEx
QTI5OUEzRkU4QjEyNTQzQUE4MERBMjAzQ0FCNUNGQ0E4QzAzRjM5Q0E2Njg0OTgz
ODY3NTIxQjE2NTg4OURGRjREQjAyQTAyNTdDNDZCNUVDNTkxOTcxMUZGNjMxNDM0
MDFDRTdDMTQ0OEYwNTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxOvAktnTkwUm3L+LNL+oexZrXRXkmlzV+an/orkYfG6vKnxmQxEt
r1+oAGimFfOE/2fduqdTvUe9a69Zxrm+c+Oi4sGAV4ZcylGOCbSuWrwF5y8uRMa1
lWPpbBPO5OECl0gC1FjCY19BF3iEGYS2vQP1YI8vQbv4dt08IiIVE8rQhfMqltxK
unP4JUVUQj965R6CMo6EjtChS6V+zdlfjvv3sFX3PF1ikkyMxCyMCdG29lMmS72C
9Hmy7kC68o7B91wzlojCrwoRopmj/osSVDqoDaIDyrXPyowD85ymaEmDhnUhsWWI
nf9NsCoCV8RrXsWRlxH/YxQ0Ac58FEjwUQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FLvpaEb2GwHb7M4QhSyGwFV6mSCVMB8GA1UdIwQYMBaAFCGtEYE+WTN5apDkGq8r
swwledDaMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRFdE5CeFVlb3U1aEtt
M0VnRldyS3RnTm9zeGoyQUNmU0IxcUFoNVhITjlDLzAvMjFBRDExODEzRTU5MzM3
OTZBOTBFNDFBQUYyQkIzMEMyNTc5RDBEQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yMUFEMTE4MTNFNTkzMzc5NkE5MEU0MUFBRjJCQjMwQzI1NzlE
MERBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80RXROQnhVZW91NWhLbTNFZ0ZX
ckt0Z05vc3hqMkFDZlNCMXFBaDVYSE45Qy8wLzMyMzgzMDM0M2EzMzM0MzkzNDNh
M2EyZjMzMzIyZDMzMzMyMDNkM2UyMDMyMzYzNTM0MzYzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
NJQwDQYJKoZIhvcNAQELBQADggEBAHW2KabAztJK9kWaK63i4AqHccHsVa8m0/j3
UW2tLns2TCwSQF43OECOVwWaZNw8HHbtbfKfYXyqOog7Gm6z4j+mkrgz3s9RqtDK
x2BoDEO1ZOxM5G3bJ5oGCEkLeD1QDFGmvIflLG+PjsWPGb2CBqlywEm0h2NXwbJE
nY7k87ui9zLrMohDKYjsTuikgH24NNn4GsJORC4XRwSafgGSTDx20BZP25RUjnnK
TAIgVGDejO4X4lr1g5RKRUYFw9Y+uwxBpttib6/H6cHkuMvhI6zpAg32SAFJFgOe
HGVLc4abpgVa1+/uwZcqfgGkYXoC2I8QO8dw724gmXw0oaFcN3o=
-----END CERTIFICATE-----