Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/323830343a326532633a3a2f33322d3332203d3e20323635333239.roa
File:                     323830343a326532633a3a2f33322d3332203d3e20323635333239.roa (raw, json)
Hash identifier:          FJxX0fV312Wm0q6nVMzBe6M/9QYbDKRHCEpwbFLLvLM=
Subject key identifier:   13:95:C2:92:8F:40:1A:73:91:A1:4B:3B:E2:A2:D5:D9:17:5B:07:3B
Certificate issuer:       /CN=D23FD01D2A56116CA9D396262945E5223B8E14A1
Certificate serial:       0B6746A4B854C8B0240CC172AEDD8F98EE56D77A
Authority key identifier: D2:3F:D0:1D:2A:56:11:6C:A9:D3:96:26:29:45:E5:22:3B:8E:14:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D23FD01D2A56116CA9D396262945E5223B8E14A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/323830343a326532633a3a2f33322d3332203d3e20323635333239.roa
Signing time:             Thu 03 Feb 2022 12:42:53 +0000
ROA not before:           Thu 03 Feb 2022 12:37:53 +0000
ROA not after:            Thu 02 Feb 2023 12:42:53 +0000
asID:                     265329
IP address blocks:        2804:2e2c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:67:46:a4:b8:54:c8:b0:24:0c:c1:72:ae:dd:8f:98:ee:56:d7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23FD01D2A56116CA9D396262945E5223B8E14A1
        Validity
            Not Before: Feb  3 12:37:53 2022 GMT
            Not After : Feb  2 12:42:53 2023 GMT
        Subject: CN=1395C2928F401A7391A14B3BE2A2D5D9175B073B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:9b:29:05:4a:7a:67:03:39:b0:b5:38:07:
                    a0:c4:9c:21:c1:bc:bf:8e:ff:2e:04:e0:30:75:2e:
                    b8:43:d4:d2:f8:e7:b1:30:57:41:e9:43:a4:89:31:
                    c5:f4:f5:31:28:59:bd:3f:9f:45:16:65:3a:73:0a:
                    ea:78:dd:d3:4f:a8:2c:22:04:15:66:cb:95:87:35:
                    81:56:55:41:34:40:8d:0b:b6:4f:ed:b6:35:f2:3d:
                    f2:4d:08:29:e4:34:74:38:56:1a:62:2b:cd:3a:f2:
                    48:77:09:c5:40:16:16:fa:00:31:45:b5:71:f8:4f:
                    10:8d:44:9f:c5:f2:68:1b:f3:fd:41:90:c9:41:54:
                    e2:f4:8b:e0:33:3e:c0:51:63:3c:31:2d:0f:94:16:
                    f0:3c:2f:e7:1e:88:77:05:80:bf:a4:aa:7c:16:29:
                    92:c5:3b:bf:44:55:ad:d0:d2:49:61:1c:54:31:dd:
                    91:19:c0:a2:58:fd:15:8c:01:c5:a4:98:e8:58:6d:
                    bd:59:11:23:e9:f2:0c:59:88:c3:4a:c3:5a:1d:8b:
                    31:ce:46:7b:2a:23:bb:26:71:17:e5:0a:cb:cb:b5:
                    36:b5:b8:19:c9:18:9a:c5:b6:98:f4:7d:0b:d2:b6:
                    ab:43:ae:0a:d1:4f:04:a5:4c:fd:77:42:8f:0a:96:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:95:C2:92:8F:40:1A:73:91:A1:4B:3B:E2:A2:D5:D9:17:5B:07:3B
            X509v3 Authority Key Identifier:
                keyid:D2:3F:D0:1D:2A:56:11:6C:A9:D3:96:26:29:45:E5:22:3B:8E:14:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/D23FD01D2A56116CA9D396262945E5223B8E14A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D23FD01D2A56116CA9D396262945E5223B8E14A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8mN5E4GQQtXPzn8JJ8oNSY5o3dkQ2PbEnEsVyuXjsCBQ/0/323830343a326532633a3a2f33322d3332203d3e20323635333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:7c:5f:e2:03:e3:45:c8:75:1b:74:3b:8b:c3:7d:6d:e8:39:
         f0:92:9a:ba:a7:cc:50:55:64:9b:dc:74:0e:05:f9:98:e0:83:
         fb:46:eb:92:15:65:62:77:4d:10:91:77:02:62:4e:95:67:ac:
         48:15:f4:45:e2:48:a8:92:61:80:7b:4c:8a:86:fd:14:64:3b:
         86:09:8a:06:a6:fe:ba:f5:8b:0b:86:ae:b0:87:35:4a:7f:67:
         45:b1:f5:b6:97:36:3a:45:8a:7b:58:ac:b3:b5:23:4b:6c:07:
         10:26:39:17:64:74:73:65:97:f1:d9:2b:b1:92:98:0a:d8:83:
         cb:5e:43:bc:d5:7e:74:a1:75:40:8c:d9:1f:68:d0:52:3a:ef:
         5f:1a:d7:b8:23:ab:a4:24:2b:85:eb:9d:79:b0:00:68:2f:02:
         05:1b:7e:13:25:04:0a:54:f5:de:b5:d0:d1:9b:e1:bc:79:dd:
         a5:e0:e5:75:52:3c:f4:f5:11:4a:ce:bb:7b:58:3f:93:aa:df:
         0f:ba:6b:55:be:60:05:18:8d:34:5d:dd:94:eb:89:ca:6d:d9:
         69:69:ba:b7:91:ce:8d:48:74:6c:78:41:8d:31:b1:b5:f6:75:
         60:2b:a8:74:e9:86:f0:fb:96:26:36:dc:cf:07:0b:d0:3f:a5:
         39:71:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----