Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/323830343a376332303a3a2f33342d3334203d3e20323731343737.roa
File:                     323830343a376332303a3a2f33342d3334203d3e20323731343737.roa (raw, json)
Hash identifier:          /PyId4thmKuB90xEKIr/RYQ93ycmLzebqqZ3MPiJ/NU=
Subject key identifier:   B9:10:00:B0:E6:EB:8C:7C:26:0C:9F:FF:37:E5:08:87:C2:7D:DA:1B
Certificate issuer:       /CN=26056C956885892C37981A0B195690E96DE49AE7
Certificate serial:       330FD884D7A0489259FA80A9C2761E77EA9C379A
Authority key identifier: 26:05:6C:95:68:85:89:2C:37:98:1A:0B:19:56:90:E9:6D:E4:9A:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26056C956885892C37981A0B195690E96DE49AE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/323830343a376332303a3a2f33342d3334203d3e20323731343737.roa
Signing time:             Wed 05 Oct 2022 20:14:57 +0000
ROA not before:           Wed 05 Oct 2022 20:09:57 +0000
ROA not after:            Wed 04 Oct 2023 20:14:57 +0000
asID:                     271477
IP address blocks:        2804:7c20::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0f:d8:84:d7:a0:48:92:59:fa:80:a9:c2:76:1e:77:ea:9c:37:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26056C956885892C37981A0B195690E96DE49AE7
        Validity
            Not Before: Oct  5 20:09:57 2022 GMT
            Not After : Oct  4 20:14:57 2023 GMT
        Subject: CN=B91000B0E6EB8C7C260C9FFF37E50887C27DDA1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:8b:88:b9:77:2d:d3:54:de:57:b9:4b:4c:
                    46:e1:d8:e7:05:7c:15:3a:4d:29:ab:53:48:b3:f2:
                    6e:1c:3d:c1:10:9c:fc:cc:ff:91:73:de:69:45:96:
                    32:29:54:4f:a8:38:fc:b5:d3:df:ca:68:c5:34:f5:
                    cf:33:f0:1b:1d:8d:7d:f4:27:c6:09:92:ca:fc:f8:
                    c7:06:2b:05:79:62:0d:c3:8b:a1:ed:7b:f2:41:50:
                    67:65:77:38:6b:c9:c1:9b:db:78:0e:5c:29:ad:75:
                    fa:2f:09:d5:ce:5d:83:d1:13:29:09:c4:07:32:a0:
                    88:c6:29:eb:80:73:77:f9:b5:ed:77:3d:f1:a2:44:
                    be:5e:11:57:42:4c:13:cc:b4:1a:60:11:b4:29:35:
                    c8:ce:05:b1:bb:5b:e2:7a:9a:74:37:e0:c8:f7:ef:
                    42:eb:c2:90:cd:13:8c:48:3c:f1:bb:80:4f:9a:3b:
                    dc:38:75:37:77:ec:9d:57:ed:a0:d7:56:1f:71:42:
                    ad:56:6e:fc:4f:a0:ea:37:08:24:7c:80:1c:ea:af:
                    fd:a3:f5:7c:98:7a:c2:cb:7c:21:5a:71:1e:11:13:
                    fc:d3:32:86:e6:44:97:23:f9:e7:40:0e:0a:02:86:
                    a7:bb:9a:9c:50:fc:68:cd:82:c9:60:3b:8f:dc:42:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:10:00:B0:E6:EB:8C:7C:26:0C:9F:FF:37:E5:08:87:C2:7D:DA:1B
            X509v3 Authority Key Identifier:
                keyid:26:05:6C:95:68:85:89:2C:37:98:1A:0B:19:56:90:E9:6D:E4:9A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/26056C956885892C37981A0B195690E96DE49AE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26056C956885892C37981A0B195690E96DE49AE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/323830343a376332303a3a2f33342d3334203d3e20323731343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c20::/34

    Signature Algorithm: sha256WithRSAEncryption
         b3:09:35:71:39:d1:63:8f:27:8d:9f:b3:99:2d:df:25:29:81:
         5d:5f:df:84:82:34:69:21:a3:25:e1:38:f1:80:ce:27:08:9e:
         cd:b6:89:61:22:39:3c:af:e4:c8:9d:0d:08:42:09:ec:d5:f7:
         86:5a:42:58:01:af:a6:e7:1a:0a:6e:a9:aa:f1:48:a1:0d:08:
         37:d4:43:79:c8:ad:5f:15:dd:84:94:35:ef:10:a4:c9:db:73:
         0f:f6:79:0f:96:29:d7:82:1b:9f:db:63:45:a9:66:f8:b8:ee:
         29:ff:c3:2f:da:f6:42:d4:fb:f6:d6:28:f8:25:19:16:5f:9d:
         9f:20:bd:c4:e0:2b:ad:d2:23:4c:b2:c9:4e:eb:bc:1f:87:76:
         6c:c6:b1:c2:57:b6:6e:cf:f6:d2:35:0a:cb:6f:2f:8b:ec:03:
         fb:74:77:77:a3:1d:c1:cd:17:f6:e0:a6:24:98:0e:1c:bb:d2:
         97:75:bf:4d:b4:fb:2c:ed:3f:cf:89:07:a5:97:55:95:7e:e3:
         70:45:87:fc:f6:8e:18:3a:02:22:18:15:51:28:e6:37:9d:e7:
         17:a7:d6:45:98:39:8a:74:aa:51:98:b0:da:ba:ef:e4:ec:fc:
         35:ee:4b:f8:fc:b0:87:01:75:86:43:46:b0:87:fa:01:5d:9f:
         31:90:ce:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----