Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/323830343a353634383a3a2f33332d3333203d3e20323637393838.roa
File:                     323830343a353634383a3a2f33332d3333203d3e20323637393838.roa (raw, json)
Hash identifier:          DokClkyd/SZEcO3ac6orY7C2c+zfnYAVi0cADsLAuas=
Subject key identifier:   5D:9B:6A:F8:59:72:60:D6:F9:4C:A3:6D:AF:1F:A9:B0:DB:68:AE:2F
Certificate issuer:       /CN=B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64
Certificate serial:       781E1960D02827C84F4A42417E09B01DF736095E
Authority key identifier: B9:E1:CA:F4:DA:2C:CD:BE:E0:92:35:BF:DF:A9:00:FB:6D:8E:4F:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/323830343a353634383a3a2f33332d3333203d3e20323637393838.roa
Signing time:             Wed 11 Aug 2021 13:00:00 +0000
ROA not before:           Wed 11 Aug 2021 12:55:00 +0000
ROA not after:            Thu 11 Aug 2022 13:00:00 +0000
asID:                     267988
IP address blocks:        2804:5648::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1e:19:60:d0:28:27:c8:4f:4a:42:41:7e:09:b0:1d:f7:36:09:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64
        Validity
            Not Before: Aug 11 12:55:00 2021 GMT
            Not After : Aug 11 13:00:00 2022 GMT
        Subject: CN=3082010A0282010100D2419AD44DE2225003D1E815B237DF72958E09328B7888AD790B451856A70A965B2F20607C8E98ECEBB259839E67C3FDD2D8987D11F3C8C1504FC4ACEE6B019CD195711DE26AD18E0374F378AD879170516E9E09AC57094A46AD490E81AA80C101A790AD7EFFE5F2E51643E7AEC2DFD8D98E1989A6D6F54DDDBD88D17626B1940F9DBA14257C25937075A44DBC7A4AAE4D068B888B309D020201063B6F13858F67D079DE4953732FF6616CA357755560450051965D8D120B5C1390C964AEC692DB0CB82DF07F7870C0869A1FE60EBCB8F79D1B2665B41829158ADAAD5FF8F711B3774021D7EDD72F7F500A534D411B1AD32D275E233F66BD8D0F06B11409FFEF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:9a:d4:4d:e2:22:50:03:d1:e8:15:b2:37:
                    df:72:95:8e:09:32:8b:78:88:ad:79:0b:45:18:56:
                    a7:0a:96:5b:2f:20:60:7c:8e:98:ec:eb:b2:59:83:
                    9e:67:c3:fd:d2:d8:98:7d:11:f3:c8:c1:50:4f:c4:
                    ac:ee:6b:01:9c:d1:95:71:1d:e2:6a:d1:8e:03:74:
                    f3:78:ad:87:91:70:51:6e:9e:09:ac:57:09:4a:46:
                    ad:49:0e:81:aa:80:c1:01:a7:90:ad:7e:ff:e5:f2:
                    e5:16:43:e7:ae:c2:df:d8:d9:8e:19:89:a6:d6:f5:
                    4d:dd:bd:88:d1:76:26:b1:94:0f:9d:ba:14:25:7c:
                    25:93:70:75:a4:4d:bc:7a:4a:ae:4d:06:8b:88:8b:
                    30:9d:02:02:01:06:3b:6f:13:85:8f:67:d0:79:de:
                    49:53:73:2f:f6:61:6c:a3:57:75:55:60:45:00:51:
                    96:5d:8d:12:0b:5c:13:90:c9:64:ae:c6:92:db:0c:
                    b8:2d:f0:7f:78:70:c0:86:9a:1f:e6:0e:bc:b8:f7:
                    9d:1b:26:65:b4:18:29:15:8a:da:ad:5f:f8:f7:11:
                    b3:77:40:21:d7:ed:d7:2f:7f:50:0a:53:4d:41:1b:
                    1a:d3:2d:27:5e:23:3f:66:bd:8d:0f:06:b1:14:09:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9B:6A:F8:59:72:60:D6:F9:4C:A3:6D:AF:1F:A9:B0:DB:68:AE:2F
            X509v3 Authority Key Identifier:
                keyid:B9:E1:CA:F4:DA:2C:CD:BE:E0:92:35:BF:DF:A9:00:FB:6D:8E:4F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/323830343a353634383a3a2f33332d3333203d3e20323637393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5648::/33

    Signature Algorithm: sha256WithRSAEncryption
         43:3b:2a:7b:42:bd:93:c8:f8:b5:36:77:11:10:b7:68:6d:b1:
         24:b1:de:d6:6c:06:7f:d9:e8:ed:af:4f:d7:50:5b:4c:7f:35:
         ac:0f:ca:3f:b9:3c:1d:bc:1a:80:e4:f4:47:45:ba:8c:84:67:
         ba:ce:a4:3e:d9:5d:6f:db:4c:6c:57:0d:a2:5e:ec:08:ca:65:
         aa:0d:b8:70:7b:27:07:3a:44:95:84:5d:d2:73:ac:04:4a:17:
         f8:40:1b:e5:24:00:ac:fa:b0:38:75:60:8a:a2:f2:13:8f:70:
         a9:6f:7e:1a:30:f1:35:48:ce:71:d8:8e:fa:b3:ab:43:90:73:
         5b:f5:a4:2d:2a:6b:ee:a0:95:16:0f:62:6c:9e:a9:ba:26:97:
         e3:2c:0e:45:f5:99:37:fa:8d:b4:36:d4:cf:40:b5:82:57:65:
         f8:5b:d6:10:7f:54:60:2e:0c:9c:94:5f:5e:d6:dd:a0:b2:b1:
         56:5b:de:08:4c:fb:2b:a7:e5:7c:0b:e9:9b:98:60:df:a3:c7:
         d9:88:97:8c:55:d7:aa:1e:84:51:14:ad:8d:c1:4b:33:1d:29:
         f0:df:cf:8a:b9:3a:a3:83:3a:9a:41:a2:52:f1:4b:fc:bc:f5:
         e0:28:8d:76:c3:de:9b:3b:07:74:b3:29:4d:37:5b:98:14:c4:
         88:c8:44:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----