Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/323830343a376266303a383030303a3a2f33332d3333203d3e20323731343634.roa
File:                     323830343a376266303a383030303a3a2f33332d3333203d3e20323731343634.roa (raw, json)
Hash identifier:          c3Q/mmPw3mWEW/EtoyOtDpQTK4dIpGq+DV9GSSxj6l4=
Subject key identifier:   39:94:24:D0:B2:C2:B9:89:81:85:74:57:F7:7E:27:39:73:45:27:5B
Certificate issuer:       /CN=DB7A300CBD2858F3333D17C91EB007FFEAEA49DE
Certificate serial:       335350B7268DD3152D2847E3B06C0E58EF447C55
Authority key identifier: DB:7A:30:0C:BD:28:58:F3:33:3D:17:C9:1E:B0:07:FF:EA:EA:49:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/323830343a376266303a383030303a3a2f33332d3333203d3e20323731343634.roa
Signing time:             Fri 18 Mar 2022 18:56:29 +0000
ROA not before:           Fri 18 Mar 2022 18:51:29 +0000
ROA not after:            Fri 17 Mar 2023 18:56:29 +0000
asID:                     271464
IP address blocks:        2804:7bf0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:53:50:b7:26:8d:d3:15:2d:28:47:e3:b0:6c:0e:58:ef:44:7c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB7A300CBD2858F3333D17C91EB007FFEAEA49DE
        Validity
            Not Before: Mar 18 18:51:29 2022 GMT
            Not After : Mar 17 18:56:29 2023 GMT
        Subject: CN=399424D0B2C2B98981857457F77E27397345275B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:2f:e9:89:c2:64:e0:17:5f:5e:e7:86:fc:
                    c2:a0:64:f2:30:af:b1:ef:d3:9d:1b:cc:18:f0:3f:
                    ad:3c:cd:ae:1f:78:c1:a7:df:d3:e1:dc:ea:fa:d2:
                    cf:49:94:3e:1e:24:91:b9:c7:35:79:45:7d:15:22:
                    ff:ff:7b:75:56:c8:53:27:a5:42:09:f6:d8:78:b4:
                    94:b1:82:63:c6:7c:ca:00:d9:14:62:6b:88:98:17:
                    8b:0b:a1:44:7b:ae:7b:20:ae:72:a4:32:49:a9:a9:
                    2d:42:40:fa:96:fb:15:74:a5:51:0f:b9:4a:18:78:
                    36:58:89:b7:c9:67:47:04:4d:6b:51:0d:12:fc:e7:
                    32:28:3f:f8:4d:d0:ad:d8:12:21:9e:8b:1b:b7:a8:
                    74:bc:85:f9:e1:89:0f:91:01:fa:26:76:79:a4:c2:
                    a7:ea:e5:10:7c:33:1e:fc:d2:77:dc:4c:9d:ae:a5:
                    ed:2c:d4:cc:c0:83:98:b9:a0:45:b5:6e:3a:74:1d:
                    0b:ae:3d:d1:5e:23:df:0c:ab:b0:6c:57:74:cc:5a:
                    7a:d7:a0:ae:12:7b:54:95:62:18:d4:75:e2:9f:86:
                    ac:00:0c:01:b9:56:43:57:55:95:6d:4a:65:44:ca:
                    14:83:a3:7d:af:c4:6b:0c:e0:ca:50:1f:9e:90:88:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:94:24:D0:B2:C2:B9:89:81:85:74:57:F7:7E:27:39:73:45:27:5B
            X509v3 Authority Key Identifier:
                keyid:DB:7A:30:0C:BD:28:58:F3:33:3D:17:C9:1E:B0:07:FF:EA:EA:49:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB7A300CBD2858F3333D17C91EB007FFEAEA49DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9N8SD3ritr9HyHDdqegNpboUBmwBVopJypiSJTVADxFi/0/323830343a376266303a383030303a3a2f33332d3333203d3e20323731343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:a3:45:dd:cf:30:63:59:60:b8:5b:77:50:06:b8:ae:a4:aa:
         88:95:2d:7a:5f:34:1d:c8:59:54:7e:42:ff:26:88:90:52:b1:
         8d:29:97:1b:14:b0:21:76:b7:ef:71:c2:76:09:28:7b:87:4b:
         5b:d2:63:98:fe:48:cb:a2:0a:59:61:01:bf:78:a7:76:d2:84:
         1b:7e:27:4d:ba:8e:d6:8f:3e:c3:c4:82:e9:c4:02:de:ca:94:
         2c:00:1a:a5:a2:c0:2c:4a:39:cb:e7:4d:51:49:bd:d0:6f:aa:
         b1:9f:4d:ef:19:85:4e:5f:42:72:51:a7:c1:55:4f:d5:ee:f0:
         39:60:f4:af:f3:c3:f2:aa:c9:ed:a2:ba:54:6d:77:39:5c:f2:
         84:0e:5d:94:b9:9c:25:2b:80:32:bd:08:c4:43:6e:81:49:ab:
         1b:e6:46:bc:5e:6d:80:e1:ff:5c:4a:f8:80:ef:54:d8:cd:64:
         45:ab:1a:33:59:b6:67:d8:18:c0:03:00:c7:ac:ba:68:e7:8e:
         3a:68:fb:c4:ff:22:67:44:24:f1:0f:ca:de:ed:f6:08:f1:a8:
         f1:ed:f1:d9:93:ff:06:b7:b9:f2:4d:e1:4b:1b:7b:88:7c:5e:
         a1:fe:31:53:32:2e:9e:0a:ce:cc:82:8b:1c:50:dc:cf:9e:95:
         8c:d0:17:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----