Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97JeHykbziVoni9Ts4p5RFfW5JS7bHUYDt6gDUWiVmi8/0/323830343a353031383a3a2f33322d3438203d3e20323638333639.roa
File:                     323830343a353031383a3a2f33322d3438203d3e20323638333639.roa (raw, json)
Hash identifier:          KA020aqeYeEgtaDCvVRACj+5PDqRlCx7mEelc2Pxyvw=
Subject key identifier:   0A:28:91:69:9B:ED:14:56:CF:FA:0F:CC:A8:E0:7F:32:81:D0:C8:E8
Certificate issuer:       /CN=032FEABE2ADADE56C2F968CA33516E692820DD03
Certificate serial:       203BAA4D08F215C6F6B0E5B5A4857C6C5FC1E544
Authority key identifier: 03:2F:EA:BE:2A:DA:DE:56:C2:F9:68:CA:33:51:6E:69:28:20:DD:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/032FEABE2ADADE56C2F968CA33516E692820DD03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97JeHykbziVoni9Ts4p5RFfW5JS7bHUYDt6gDUWiVmi8/0/323830343a353031383a3a2f33322d3438203d3e20323638333639.roa
Signing time:             Sat 23 Jul 2022 01:36:01 +0000
ROA not before:           Sat 23 Jul 2022 01:31:01 +0000
ROA not after:            Sat 22 Jul 2023 01:36:01 +0000
asID:                     268369
IP address blocks:        2804:5018::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3b:aa:4d:08:f2:15:c6:f6:b0:e5:b5:a4:85:7c:6c:5f:c1:e5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032FEABE2ADADE56C2F968CA33516E692820DD03
        Validity
            Not Before: Jul 23 01:31:01 2022 GMT
            Not After : Jul 22 01:36:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:2f:1c:cc:91:ec:36:f3:f0:43:3c:fd:a5:
                    9a:af:81:2e:b9:5f:a2:11:aa:79:4d:d5:47:dc:93:
                    84:c5:3b:20:0d:2a:6c:04:29:24:21:7f:05:77:28:
                    de:f2:a3:d0:8b:4c:82:c2:13:9a:59:57:3c:d9:69:
                    04:12:ad:2a:89:b0:9b:a2:f8:ae:15:98:c5:67:51:
                    58:cb:25:e9:2c:53:12:27:85:c0:99:f1:8f:95:54:
                    80:9b:12:62:f3:a9:e3:2d:fb:21:88:29:fe:70:a5:
                    34:fe:7d:f3:70:30:03:bd:08:a9:2f:49:d5:68:d2:
                    92:36:eb:a8:79:9e:d7:1d:fb:c7:38:f6:e1:44:a6:
                    f1:37:74:29:59:9d:6c:b3:3b:19:8f:85:0f:4a:9a:
                    31:fe:6d:18:a1:5a:a6:c9:57:02:c8:80:4c:ac:27:
                    40:e4:fa:c8:09:87:ce:58:02:0d:fe:11:f9:81:c1:
                    8b:fd:15:f3:23:4f:80:a5:a5:d8:b3:ea:dd:b1:d5:
                    67:b1:bc:19:6c:0b:79:13:3b:1d:e1:d5:8b:d3:b1:
                    89:33:8d:81:ad:9a:1b:fc:ec:18:f8:31:d9:06:46:
                    b2:f5:ea:3f:3c:4c:a4:c6:a3:b2:c3:96:ae:00:3d:
                    84:02:cd:7d:8d:16:3e:b2:76:f7:a7:84:15:5e:d4:
                    7b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:28:91:69:9B:ED:14:56:CF:FA:0F:CC:A8:E0:7F:32:81:D0:C8:E8
            X509v3 Authority Key Identifier:
                keyid:03:2F:EA:BE:2A:DA:DE:56:C2:F9:68:CA:33:51:6E:69:28:20:DD:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97JeHykbziVoni9Ts4p5RFfW5JS7bHUYDt6gDUWiVmi8/0/032FEABE2ADADE56C2F968CA33516E692820DD03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/032FEABE2ADADE56C2F968CA33516E692820DD03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97JeHykbziVoni9Ts4p5RFfW5JS7bHUYDt6gDUWiVmi8/0/323830343a353031383a3a2f33322d3438203d3e20323638333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5018::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:79:51:26:73:da:1f:72:38:69:b6:c8:5c:6c:16:51:73:17:
         7d:c1:67:2f:3b:90:4e:c9:e4:63:a7:2b:21:70:38:1c:d2:6b:
         f3:ba:84:89:89:90:44:52:cb:90:2a:4f:9e:d5:0e:39:de:71:
         8b:72:7f:7a:57:86:5f:c5:9c:ed:c5:f0:67:f3:60:f2:17:de:
         5a:02:90:b8:ca:00:67:76:d6:7f:dc:3c:db:47:ea:0a:1c:ce:
         c5:87:2c:76:33:38:54:32:be:c2:2f:8a:b3:f5:d2:9b:77:29:
         a0:fb:bc:56:43:b4:fe:19:ec:4c:67:da:29:94:c9:3a:f3:fb:
         31:39:5f:3c:02:c7:9e:8b:6f:33:91:86:37:f4:ec:9a:e6:55:
         e9:7b:e0:31:c6:8f:45:a1:07:77:73:f3:34:20:37:c6:83:c9:
         90:df:b1:25:4d:9a:80:d6:de:cc:8d:9a:a7:74:ee:ba:53:a2:
         93:e5:81:43:2d:ce:7a:bf:62:fa:97:75:29:81:10:5c:5c:93:
         86:f8:37:d2:57:3f:c6:da:69:49:98:6a:88:ab:b5:1f:fd:8a:
         8f:00:b5:d7:82:9d:b8:b7:4c:d8:30:d9:5d:04:b8:d9:d6:1e:
         1a:50:29:84:66:eb:ae:08:eb:c8:d2:70:76:4d:6e:46:88:7a:
         cb:cb:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----