Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/323830343a353230383a3a2f33322d3332203d3e203238353934.roa
File:                     323830343a353230383a3a2f33322d3332203d3e203238353934.roa (raw, json)
Hash identifier:          xLJGDgu3jYwCrAgG5o+voNsA9xwUWIL9xKAth5ph+mo=
Subject key identifier:   22:85:5B:21:5C:9C:A8:81:02:23:1B:D1:86:A3:34:7F:8A:D8:5B:16
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       2B146DE72EDBF445FD141BA49FEDD78B125FC554
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/323830343a353230383a3a2f33322d3332203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:46 +0000
ROA not before:           Wed 20 Sep 2023 13:17:46 +0000
ROA not after:            Wed 18 Sep 2024 13:22:46 +0000
asID:                     28594
IP address blocks:        2804:5208::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:14:6d:e7:2e:db:f4:45:fd:14:1b:a4:9f:ed:d7:8b:12:5f:c5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:46 2023 GMT
            Not After : Sep 18 13:22:46 2024 GMT
        Subject: CN=22855B215C9CA88102231BD186A3347F8AD85B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c5:47:00:58:02:a2:a6:22:bf:02:5b:78:b8:
                    8a:df:00:e5:64:7c:4d:5b:e5:af:47:7c:4d:3e:fa:
                    fd:87:83:8d:39:84:70:36:16:07:68:e9:b2:d7:97:
                    90:3b:21:4f:39:d7:fa:78:f3:d7:52:44:dd:7c:88:
                    bd:8a:87:1b:02:82:a0:07:f8:5e:52:d6:13:d5:3f:
                    d0:4a:c0:d0:93:a9:fb:dd:a7:81:ee:20:33:21:8c:
                    d1:c1:b8:b1:01:a8:17:76:27:b3:69:cc:ea:1c:23:
                    4c:68:37:ee:7e:ad:8b:b4:d2:ad:9e:3e:92:6a:bb:
                    02:f1:c4:cc:a8:ef:d7:97:9e:9e:05:1a:c1:5b:40:
                    e0:a9:43:3e:71:e8:c0:b9:2c:88:22:8e:32:d0:4d:
                    1a:6b:c1:24:3d:1d:bf:f0:69:ee:21:c5:3c:87:85:
                    13:89:89:b0:23:63:4e:67:37:ab:a4:fa:d3:43:db:
                    1a:1b:81:76:ed:f9:c2:69:eb:55:2f:a3:b3:15:c0:
                    11:d9:fe:fe:f5:36:5c:3e:c9:97:05:a0:c2:41:01:
                    cc:be:83:7d:34:a8:b5:cf:7a:89:2e:60:76:e6:37:
                    fd:8b:5d:f4:76:8f:71:c9:43:d0:01:e6:c1:3b:7e:
                    60:17:74:61:25:b4:8d:27:83:6e:5e:c8:eb:71:79:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:85:5B:21:5C:9C:A8:81:02:23:1B:D1:86:A3:34:7F:8A:D8:5B:16
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/323830343a353230383a3a2f33322d3332203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5208::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:d0:ac:71:36:0b:0d:23:9b:fd:68:4e:23:36:34:a2:3f:b0:
         41:7e:34:1f:6e:46:90:c7:d7:90:31:d4:ac:16:10:4c:7d:70:
         f1:06:84:52:4a:23:5d:3a:4c:16:78:36:b0:bf:fb:37:4f:00:
         fc:10:6b:6a:77:60:ef:25:82:4e:28:74:e3:f9:02:57:1c:d5:
         9e:71:5e:40:09:1a:08:c0:4a:2f:8c:42:f0:75:47:41:f0:83:
         0e:79:9e:ac:b9:00:d8:5c:25:ab:51:58:01:68:44:67:19:f9:
         11:e6:e1:df:1c:43:5b:2c:f7:6a:da:51:92:62:fd:cf:0c:55:
         bb:50:8a:b9:23:61:ce:ee:8f:d7:f4:d8:61:5b:bd:43:c6:da:
         d4:ab:15:14:72:db:77:3a:bc:24:d4:06:07:e0:d9:9a:17:75:
         15:49:95:b2:3b:61:54:ad:a8:0c:16:56:de:ef:eb:94:e8:7d:
         fd:e4:17:65:e9:93:24:2f:49:92:d3:8e:63:99:d4:03:88:4b:
         d1:d7:ee:31:79:ac:13:a3:68:78:9a:80:26:9f:10:40:82:f1:
         1e:c0:11:26:bb:b5:d4:97:f6:62:02:ef:80:cc:e9:c1:b3:dc:
         67:7b:01:6e:df:50:32:49:58:54:ca:07:ae:90:4c:f1:96:92:
         a2:b8:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----