Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a3a2f33332d3333203d3e20323732323439.roa
File:                     323830343a383434303a3a2f33332d3333203d3e20323732323439.roa (raw, json)
Hash identifier:          18VcVi4IcJrgjsU+ZgCJCAYLnIgPPUCaTqgSktfrMMM=
Subject key identifier:   4F:51:A9:4F:1C:36:B9:FE:DD:AD:E2:A0:35:E5:F7:62:9D:1C:B0:3A
Certificate issuer:       /CN=70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9
Certificate serial:       0E9096E1337C7B84341F0CFB2DB7132DC614F21F
Authority key identifier: 70:D7:87:DC:33:9E:D4:E5:F4:8A:C2:A9:15:C5:F1:AE:CE:4C:47:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a3a2f33332d3333203d3e20323732323439.roa
Signing time:             Fri 16 Dec 2022 22:42:47 +0000
ROA not before:           Fri 16 Dec 2022 22:37:47 +0000
ROA not after:            Fri 15 Dec 2023 22:42:47 +0000
asID:                     272249
IP address blocks:        2804:8440::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:90:96:e1:33:7c:7b:84:34:1f:0c:fb:2d:b7:13:2d:c6:14:f2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9
        Validity
            Not Before: Dec 16 22:37:47 2022 GMT
            Not After : Dec 15 22:42:47 2023 GMT
        Subject: CN=4F51A94F1C36B9FEDDADE2A035E5F7629D1CB03A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:3a:63:d6:7b:f6:36:0c:1b:d4:99:9c:e5:
                    28:59:95:3c:53:0c:68:c4:ce:f8:b8:9e:50:c3:88:
                    72:57:a6:b8:cc:08:46:28:ee:0b:cc:ce:bd:40:00:
                    f8:12:54:58:ea:af:29:6d:91:3b:e0:c0:74:94:9b:
                    bb:48:8d:6f:ab:50:73:bd:7a:24:d6:35:3c:ce:f0:
                    9a:4e:df:a4:a7:d0:7b:50:16:c5:14:86:a3:89:ae:
                    e0:92:a2:11:33:af:73:e7:6f:43:73:f4:e2:c2:87:
                    33:13:dc:6e:55:f8:cd:45:7e:38:c5:0f:af:71:06:
                    88:64:17:15:4d:98:c9:7b:4b:06:a5:2c:84:8a:73:
                    07:ab:06:6e:86:81:48:dc:81:41:0c:58:37:db:b1:
                    07:bc:cb:28:48:90:e0:ea:4a:b9:da:d9:bf:cc:09:
                    53:e1:d3:13:18:9e:bd:1e:76:6d:33:3d:09:86:15:
                    ad:ac:71:44:af:5e:f7:ef:90:f8:4e:39:21:e5:21:
                    b4:c7:5d:3c:05:c3:01:57:4f:2a:d3:2a:cb:8a:2e:
                    4a:85:9c:f4:8b:a3:b0:67:72:9e:8f:49:a4:82:01:
                    b0:53:7a:f7:42:10:6d:d0:b8:98:fa:f9:30:3c:45:
                    eb:48:88:a4:e7:a6:88:5e:32:0a:90:55:ce:4e:4f:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:51:A9:4F:1C:36:B9:FE:DD:AD:E2:A0:35:E5:F7:62:9D:1C:B0:3A
            X509v3 Authority Key Identifier:
                keyid:70:D7:87:DC:33:9E:D4:E5:F4:8A:C2:A9:15:C5:F1:AE:CE:4C:47:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D787DC339ED4E5F48AC2A915C5F1AECE4C47F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93QEg13XEKDaooV633Fgr1k9dYbz4pxVbLKbMxWbkdJe/0/323830343a383434303a3a2f33332d3333203d3e20323732323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8440::/33

    Signature Algorithm: sha256WithRSAEncryption
         80:b6:cc:f5:38:78:a7:0a:73:5e:c1:43:79:da:2d:51:7a:9d:
         68:af:bf:e7:56:86:5f:1b:83:70:2c:ce:82:44:9e:21:6d:df:
         15:35:3a:30:4d:d1:0b:d7:09:19:61:39:a7:ff:60:c5:70:c8:
         1f:4d:ae:de:ff:a7:86:a9:a9:01:83:35:7b:73:3e:25:7b:e9:
         d4:dc:ae:83:11:80:cd:5f:79:c1:e2:3a:c2:5a:9b:c0:16:da:
         e0:fb:ea:47:f8:75:73:37:f4:2f:42:5f:55:af:54:7f:13:08:
         c7:04:4f:00:ef:52:ec:fe:25:24:aa:80:75:6e:09:d2:cd:c5:
         fe:ec:a3:fe:e0:d5:70:ca:21:5c:79:87:ca:fd:5e:18:91:61:
         0f:fd:23:d7:07:c5:47:e3:78:ec:b2:a8:13:fb:ef:e4:d6:70:
         21:27:31:d0:b7:aa:e9:1f:83:79:61:a6:bc:3c:51:c5:3d:85:
         39:c8:e1:66:a2:a8:a9:0a:dd:91:f8:c6:de:8e:41:ab:a5:5a:
         7c:29:db:ec:1c:7e:d5:ab:43:3f:e7:51:de:35:91:73:29:03:
         ac:39:d7:5d:8a:93:4a:da:b1:0d:85:88:31:fb:c7:20:56:49:
         a5:80:1d:71:64:52:9b:3a:63:7d:b1:58:2b:fd:07:0a:c8:7e:
         db:eb:16:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----