Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/323830343a316565633a3a2f33322d3332203d3e20323634343535.roa
File:                     323830343a316565633a3a2f33322d3332203d3e20323634343535.roa (raw, json)
Hash identifier:          5QPojPG1U6wrROMNUApepGh3pK+G/aw8MvIWwhur22w=
Subject key identifier:   38:3D:FB:6F:C5:B2:7A:90:CC:6F:A3:85:B2:87:2F:6D:B6:52:08:76
Certificate issuer:       /CN=DB4FF0FE4844DE2F480C73CA45BCB95961785E33
Certificate serial:       6A69BFCAB1F8DACA01D9E7CE506700CFF5B56314
Authority key identifier: DB:4F:F0:FE:48:44:DE:2F:48:0C:73:CA:45:BC:B9:59:61:78:5E:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4FF0FE4844DE2F480C73CA45BCB95961785E33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/323830343a316565633a3a2f33322d3332203d3e20323634343535.roa
Signing time:             Tue 02 Aug 2022 19:43:34 +0000
ROA not before:           Tue 02 Aug 2022 19:38:34 +0000
ROA not after:            Tue 01 Aug 2023 19:43:34 +0000
asID:                     264455
IP address blocks:        2804:1eec::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:69:bf:ca:b1:f8:da:ca:01:d9:e7:ce:50:67:00:cf:f5:b5:63:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4FF0FE4844DE2F480C73CA45BCB95961785E33
        Validity
            Not Before: Aug  2 19:38:34 2022 GMT
            Not After : Aug  1 19:43:34 2023 GMT
        Subject: CN=383DFB6FC5B27A90CC6FA385B2872F6DB6520876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:69:2a:9d:73:8a:c1:b4:9f:02:cb:51:70:
                    ff:a7:4f:b2:1d:fa:db:b8:93:84:20:53:67:89:5e:
                    77:58:6a:14:ed:31:6a:97:1d:f0:ff:a2:b2:14:db:
                    22:90:ff:0a:8b:ef:54:b2:88:6a:c0:60:4d:00:b9:
                    0c:16:c7:1d:58:b4:46:88:c1:19:12:33:2e:60:fa:
                    23:86:44:b3:b0:9a:7b:bb:8a:89:b8:27:63:96:40:
                    29:30:81:db:cd:a6:a8:b8:9c:90:d3:63:7b:dc:a4:
                    39:f6:03:51:c9:88:42:67:88:3d:bc:e2:2a:b1:24:
                    7b:44:e9:12:df:6a:d8:71:f3:74:eb:1f:20:ab:d9:
                    8f:93:8d:64:0a:3e:70:c0:cb:c5:6d:7f:17:b0:67:
                    ec:78:37:50:6a:ec:71:bc:85:d6:ac:5a:a0:c3:89:
                    a0:0a:b0:3e:de:e3:2e:a1:8d:d8:57:d2:90:3c:4a:
                    48:4d:0d:01:fc:ec:10:60:e8:10:1e:5d:aa:9b:c3:
                    bb:74:89:fc:f6:a2:c3:ec:93:10:fc:78:46:3b:83:
                    a6:6c:00:b0:20:10:81:12:85:23:d4:c7:54:5f:f6:
                    c0:ac:0b:96:60:10:04:2c:af:9a:1e:e9:78:3f:a1:
                    e8:48:ef:1e:69:b3:81:9b:5e:96:6e:c1:04:3a:e7:
                    4e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3D:FB:6F:C5:B2:7A:90:CC:6F:A3:85:B2:87:2F:6D:B6:52:08:76
            X509v3 Authority Key Identifier:
                keyid:DB:4F:F0:FE:48:44:DE:2F:48:0C:73:CA:45:BC:B9:59:61:78:5E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/DB4FF0FE4844DE2F480C73CA45BCB95961785E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4FF0FE4844DE2F480C73CA45BCB95961785E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/323830343a316565633a3a2f33322d3332203d3e20323634343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1eec::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:48:a9:60:c2:33:95:df:0c:31:40:57:0b:54:de:31:84:e5:
         73:68:53:eb:60:b6:ab:d3:ca:31:d3:49:82:da:2a:cf:43:4c:
         20:65:61:de:90:c7:79:0f:f6:27:b6:99:f1:a3:7a:64:5a:0d:
         3a:41:cf:e5:3d:85:dd:69:c5:93:2e:e7:59:e9:6d:34:36:1b:
         1f:d0:e7:d4:6a:99:84:43:e8:09:ac:ed:fb:d4:45:fd:8e:fb:
         b0:aa:03:5e:08:a9:05:9f:09:4a:9a:bb:3b:8c:d3:df:b7:3f:
         ed:b1:49:50:54:2c:52:94:8c:d8:9a:d1:4d:07:f5:44:6e:88:
         30:16:26:dd:dd:e5:83:15:46:8a:40:77:59:c8:3a:70:f7:cd:
         68:e5:3a:86:53:f0:75:64:5e:22:b3:16:f4:3a:3d:62:e2:06:
         8f:6f:fe:28:e7:6c:b8:19:ca:5e:d9:91:79:44:bb:30:5b:da:
         1f:3b:25:00:40:9e:80:d9:c8:17:95:e6:a0:da:29:da:12:4f:
         1d:5e:37:19:21:94:b7:1a:fb:9b:68:80:e2:dc:c1:80:1b:19:
         34:9a:8b:4f:7f:c9:00:52:27:c6:ba:87:08:74:8f:62:6a:10:
         37:38:36:a9:16:55:2f:e5:6a:b9:45:92:a4:8e:0a:8b:55:f6:
         18:a0:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----