Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/323830343a376332303a633030303a3a2f33342d3334203d3e20323731343737.roa
File:                     323830343a376332303a633030303a3a2f33342d3334203d3e20323731343737.roa (raw, json)
Hash identifier:          R3lyQtwPzMUsUekjIuM6OU0zHaBSB6mOYWAO7YGSkEU=
Subject key identifier:   03:CA:98:E4:F8:C2:DD:A5:42:81:FC:20:5F:D8:A1:BB:35:41:82:B3
Certificate issuer:       /CN=26056C956885892C37981A0B195690E96DE49AE7
Certificate serial:       29EC07690E0D33D5828693E5C289867B68CCD612
Authority key identifier: 26:05:6C:95:68:85:89:2C:37:98:1A:0B:19:56:90:E9:6D:E4:9A:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26056C956885892C37981A0B195690E96DE49AE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/323830343a376332303a633030303a3a2f33342d3334203d3e20323731343737.roa
Signing time:             Wed 05 Oct 2022 20:15:43 +0000
ROA not before:           Wed 05 Oct 2022 20:10:43 +0000
ROA not after:            Wed 04 Oct 2023 20:15:43 +0000
asID:                     271477
IP address blocks:        2804:7c20:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ec:07:69:0e:0d:33:d5:82:86:93:e5:c2:89:86:7b:68:cc:d6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26056C956885892C37981A0B195690E96DE49AE7
        Validity
            Not Before: Oct  5 20:10:43 2022 GMT
            Not After : Oct  4 20:15:43 2023 GMT
        Subject: CN=03CA98E4F8C2DDA54281FC205FD8A1BB354182B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:2d:12:6a:e5:50:e0:e0:72:02:f6:b5:f2:
                    28:74:e9:93:32:f8:f3:71:71:f0:f1:75:f9:dc:f4:
                    9d:cf:66:0b:2a:87:87:07:92:77:1f:45:84:41:1d:
                    69:9b:ba:61:18:4b:f6:bb:c5:19:14:31:f7:32:91:
                    8b:7e:eb:52:60:12:e8:8b:e1:4b:c2:33:94:c7:f6:
                    e7:79:0e:0b:55:01:36:3c:c9:2f:3e:ab:32:73:e7:
                    f4:13:31:17:46:3f:d4:63:00:5c:91:f4:01:73:7e:
                    59:44:b1:82:b8:23:7d:a6:ab:e5:25:c9:84:dd:b1:
                    92:8e:1e:00:81:f2:97:ae:5e:6a:6e:35:f7:4d:e8:
                    d9:e9:d1:86:0c:68:11:a0:52:75:d5:57:c7:08:5a:
                    b6:c1:5d:43:52:ed:e4:a1:6a:bb:ae:72:73:05:85:
                    a2:d0:6e:31:59:6c:09:d4:47:00:c7:a6:c9:39:f5:
                    9c:66:4c:c4:44:58:41:c2:96:78:24:6b:80:ef:00:
                    05:16:c0:da:10:7f:16:25:c5:9a:01:61:1d:f4:2c:
                    70:6c:aa:87:11:de:19:ef:d3:60:7c:13:e9:6d:f3:
                    79:d5:d5:91:f7:84:92:a7:37:91:21:0d:b9:33:95:
                    d3:3d:39:a6:3d:91:e3:f2:59:4d:7d:99:9d:bc:f6:
                    90:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CA:98:E4:F8:C2:DD:A5:42:81:FC:20:5F:D8:A1:BB:35:41:82:B3
            X509v3 Authority Key Identifier:
                keyid:26:05:6C:95:68:85:89:2C:37:98:1A:0B:19:56:90:E9:6D:E4:9A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/26056C956885892C37981A0B195690E96DE49AE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/26056C956885892C37981A0B195690E96DE49AE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/323830343a376332303a633030303a3a2f33342d3334203d3e20323731343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c20:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         41:d3:10:0d:64:a1:e6:43:00:f5:d2:0c:63:75:d5:39:95:6c:
         8e:24:f8:fd:d4:67:15:83:64:d0:a5:f1:18:fa:92:5f:25:42:
         a1:25:d9:58:a2:a4:17:06:aa:43:a8:a3:2a:6c:bc:99:7e:31:
         be:93:89:f0:76:7c:69:14:db:3a:6f:10:67:d3:0b:f6:ee:5b:
         10:42:00:cb:ca:04:06:97:03:b0:57:5f:f6:6b:b2:a4:0a:29:
         5c:29:f2:52:10:0e:12:f9:8f:92:7c:2f:d7:81:ea:43:ee:33:
         83:e8:0d:cb:fe:f7:a9:52:1b:04:7f:75:a8:ca:a0:f5:97:40:
         d5:ae:6d:fd:0a:02:a6:f9:5d:f2:65:ba:d0:45:b9:eb:72:5b:
         8b:0b:96:7e:6c:34:29:9e:92:0a:60:2c:3d:80:18:2b:85:54:
         f9:f1:89:f9:c6:46:84:5f:9f:98:9b:e3:ab:6a:1c:27:b9:bb:
         0b:88:36:b5:f9:1c:84:f0:ca:ef:24:e6:ac:94:4d:73:9c:17:
         4e:19:6c:e6:82:ca:53:c5:e5:a2:c1:07:8c:69:a6:05:33:1b:
         38:93:34:8d:f9:bc:54:29:9c:86:a2:f4:e8:e3:96:c5:91:a9:
         61:6b:c2:fa:93:1b:89:e8:c4:e9:24:d9:a9:09:c7:81:3d:49:
         64:71:a4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----