Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/323830343a323734343a3a2f33322d3332203d3e20323633383838.roa
File:                     323830343a323734343a3a2f33322d3332203d3e20323633383838.roa (raw, json)
Hash identifier:          Radba9KCW03Vp8RK0gKmnHSUWHdS2/thW1dMxnwJ/vM=
Subject key identifier:   3D:52:59:90:B3:A4:AB:7D:33:24:35:33:EF:F1:33:0E:2B:AA:E0:30
Certificate issuer:       /CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
Certificate serial:       3EF8DEFC706C44F2BE84294B4CB5B77D74162136
Authority key identifier: D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/323830343a323734343a3a2f33322d3332203d3e20323633383838.roa
Signing time:             Tue 06 Sep 2022 15:00:00 +0000
ROA not before:           Tue 06 Sep 2022 14:55:00 +0000
ROA not after:            Tue 05 Sep 2023 15:00:00 +0000
asID:                     263888
IP address blocks:        2804:2744::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f8:de:fc:70:6c:44:f2:be:84:29:4b:4c:b5:b7:7d:74:16:21:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
        Validity
            Not Before: Sep  6 14:55:00 2022 GMT
            Not After : Sep  5 15:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:18:f6:f9:a9:d5:a7:13:df:74:87:22:06:
                    cb:e4:04:9f:9e:1f:92:60:28:d3:c0:a9:40:a4:17:
                    4f:a9:3c:cb:de:2a:c6:17:0d:31:fa:cc:31:d4:c6:
                    23:d6:40:6c:94:9f:73:98:42:7c:fe:d0:94:5d:63:
                    f3:ae:0e:f4:a5:25:1f:ec:f9:b5:f7:d0:47:1a:8c:
                    51:57:54:7a:fc:58:64:d5:2d:8e:ba:cc:c7:ed:19:
                    8e:64:d2:4c:52:5b:32:bc:aa:6f:57:94:32:d2:25:
                    10:1b:0b:47:52:97:10:b8:56:87:11:3c:9a:27:8f:
                    bf:05:46:ed:55:d8:7a:aa:77:10:b7:62:f8:a2:1c:
                    9e:3c:d9:5b:5e:d3:0f:62:26:41:19:ff:cf:ec:64:
                    d4:e1:7b:75:f5:8a:0e:c3:ae:fd:6e:06:8b:90:4f:
                    05:ff:df:0e:d9:a6:b5:ba:43:48:02:bf:12:4e:bf:
                    38:2e:11:fb:0e:8f:8f:f7:99:2d:61:07:71:8a:80:
                    f7:77:d7:df:44:71:99:12:1c:c2:9b:30:a0:da:ee:
                    4a:6a:6a:c1:c7:b1:40:6d:13:d8:92:f6:84:b8:93:
                    32:c2:ea:60:53:15:c1:3e:5a:af:b6:e2:a8:24:95:
                    a2:bd:f3:3d:8e:42:c1:70:2a:d1:b6:e1:c5:3c:42:
                    49:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:52:59:90:B3:A4:AB:7D:33:24:35:33:EF:F1:33:0E:2B:AA:E0:30
            X509v3 Authority Key Identifier:
                keyid:D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/323830343a323734343a3a2f33322d3332203d3e20323633383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2744::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:50:fb:35:f1:f6:29:11:d1:ec:38:ce:e4:5d:e4:ca:ec:63:
         d1:33:f3:64:25:26:8f:9c:08:42:c8:1a:c5:09:67:2a:36:0d:
         c1:46:26:95:64:0b:e9:02:e4:8b:02:4a:33:0d:2d:af:16:9b:
         82:85:c0:e0:d5:bb:eb:70:1e:1c:81:c8:13:1a:ab:38:a5:f5:
         d9:f2:8d:21:2a:d8:5e:ba:52:59:cd:16:03:b4:b8:ad:e9:3e:
         dc:32:22:b9:7d:27:f0:c3:f9:80:f5:26:8c:04:f9:6c:e9:25:
         6d:d7:89:8e:60:00:61:e5:71:65:77:a4:62:67:e1:b1:f0:d9:
         e7:8f:e0:0e:d6:59:bd:c2:11:63:48:e9:2c:ab:23:a2:3d:b6:
         ed:84:3a:e9:81:de:34:4f:f2:53:80:d7:19:22:2a:65:e0:ac:
         b0:ee:23:64:9b:c8:3a:2e:f4:dc:ab:34:9e:ba:81:14:ee:8b:
         04:cb:66:f9:56:a3:85:d7:07:c5:17:e7:56:47:15:7d:af:3f:
         9b:70:9c:af:69:db:7f:22:e8:87:13:28:b5:f2:a8:bd:7f:bf:
         ab:bd:36:84:52:33:fa:0d:dc:86:e5:a1:86:bc:bb:f2:57:61:
         ab:e9:2c:08:d1:58:b4:49:b3:cd:d6:28:b8:11:83:32:58:e5:
         e6:b5:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----