Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/323830343a353138633a3a2f33332d3333203d3e20323638343539.roa
File:                     323830343a353138633a3a2f33332d3333203d3e20323638343539.roa (raw, json)
Hash identifier:          bU7s9r5BYCF8r95fTJ7HbjjYRjNYRBGLsxUmrjf5DBo=
Subject key identifier:   AA:58:54:0B:27:C1:6F:D8:FC:ED:81:97:96:BC:94:DF:CF:65:4C:42
Certificate issuer:       /CN=4AD23F69FEB6F0C4185CED1CD33614808371B5CA
Certificate serial:       497A3088550BF1F22F45E345ED24100ACA5F227E
Authority key identifier: 4A:D2:3F:69:FE:B6:F0:C4:18:5C:ED:1C:D3:36:14:80:83:71:B5:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/323830343a353138633a3a2f33332d3333203d3e20323638343539.roa
Signing time:             Wed 14 Dec 2022 19:22:35 +0000
ROA not before:           Wed 14 Dec 2022 19:17:35 +0000
ROA not after:            Wed 13 Dec 2023 19:22:35 +0000
asID:                     268459
IP address blocks:        2804:518c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7a:30:88:55:0b:f1:f2:2f:45:e3:45:ed:24:10:0a:ca:5f:22:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AD23F69FEB6F0C4185CED1CD33614808371B5CA
        Validity
            Not Before: Dec 14 19:17:35 2022 GMT
            Not After : Dec 13 19:22:35 2023 GMT
        Subject: CN=AA58540B27C16FD8FCED819796BC94DFCF654C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:26:57:0a:17:fe:62:6d:33:d7:48:e4:b8:
                    d1:8f:70:fb:24:7e:77:86:5a:14:25:a8:54:14:65:
                    b1:0b:61:f4:1d:28:43:35:19:28:d8:0c:b9:49:0e:
                    31:2a:4d:03:91:f8:66:52:af:11:c4:8b:88:2d:77:
                    27:ea:f3:41:ed:ab:e3:2a:81:99:f4:e1:8f:9e:64:
                    4b:31:ce:bb:3c:40:46:f9:63:47:65:37:4e:7e:f1:
                    19:55:24:25:97:cf:54:69:ee:ec:65:e5:6c:a4:c6:
                    ae:dc:08:f6:a2:41:76:87:3e:61:8f:e4:65:b2:32:
                    d8:4b:35:05:ed:fd:b2:66:2b:bf:dc:32:de:14:d3:
                    01:34:17:be:bf:0e:fa:a0:3e:d7:7a:da:2b:dd:c7:
                    eb:1f:7d:95:fc:67:8e:48:e8:9a:38:49:ec:76:af:
                    fa:74:e3:d1:97:9c:ff:f3:69:18:fb:39:01:15:12:
                    ba:3b:f1:a9:68:f3:b1:f6:41:8d:f6:5b:12:8e:7c:
                    90:a8:66:49:b8:e3:74:c6:05:e9:11:68:4c:e7:c8:
                    af:5c:57:aa:82:ad:09:17:75:c3:96:a1:c8:e1:08:
                    5f:7f:48:62:36:e1:f9:6c:84:f6:7b:b1:ae:3c:4f:
                    72:a9:04:01:7a:c6:68:f7:c6:66:52:ae:17:ba:4d:
                    0d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:58:54:0B:27:C1:6F:D8:FC:ED:81:97:96:BC:94:DF:CF:65:4C:42
            X509v3 Authority Key Identifier:
                keyid:4A:D2:3F:69:FE:B6:F0:C4:18:5C:ED:1C:D3:36:14:80:83:71:B5:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/323830343a353138633a3a2f33332d3333203d3e20323638343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:518c::/33

    Signature Algorithm: sha256WithRSAEncryption
         2f:9e:3e:9c:02:ba:0c:2d:06:d9:d8:06:ea:5b:ba:da:64:fe:
         68:3e:8c:f1:28:07:dc:ef:5d:53:12:e6:b8:40:56:1f:e0:4b:
         80:4a:ba:ab:1a:54:4d:73:7f:cd:01:20:cc:73:33:83:de:54:
         d4:34:a9:c0:4d:29:da:0f:e6:a1:25:46:6b:f3:de:2a:af:7d:
         05:e5:a3:d3:66:1d:6c:2c:e2:12:14:bf:1c:4c:62:3b:94:25:
         88:53:3a:fd:51:ed:4f:ae:6b:a6:0e:0b:51:49:b2:e4:53:2e:
         87:9a:11:87:98:88:bd:e1:14:d9:3c:f6:fa:88:85:50:ec:61:
         8f:3a:60:2a:47:d5:91:3c:60:41:1c:55:1b:eb:a8:76:7e:5d:
         fa:11:4c:4e:2a:6b:42:e8:b2:41:53:21:7b:4a:66:11:5f:e8:
         89:74:3c:04:ed:b7:1f:9b:0a:9e:81:48:57:ab:9b:be:30:bd:
         42:5e:5b:16:19:84:4f:fb:01:89:07:a2:58:79:02:54:26:da:
         d3:0e:53:9c:4a:37:26:f6:25:97:0c:3c:18:25:4e:25:72:90:
         a9:c6:36:07:6b:b0:37:d8:13:8a:34:7b:fe:fa:ac:01:e2:70:
         bb:30:16:c0:f7:21:7e:2c:54:1a:9f:7e:54:31:7e:16:d9:34:
         eb:39:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----