Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a3a2f33322d3332203d3e20323639343137.roa
File:                     323830343a363434343a3a2f33322d3332203d3e20323639343137.roa (raw, json)
Hash identifier:          j4zsxEs2FkvNY7epq3OrhhvDuqnA8C1yQr4epEbWdek=
Subject key identifier:   D4:26:6A:B4:8A:37:E8:D6:2A:3B:49:AA:8F:96:F4:16:69:93:90:2A
Certificate issuer:       /CN=F8E0774EBB65EA4D22E46394EB91322F695067B5
Certificate serial:       2548F3D5757B203C53BAC2813EA92A9E81363246
Authority key identifier: F8:E0:77:4E:BB:65:EA:4D:22:E4:63:94:EB:91:32:2F:69:50:67:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8E0774EBB65EA4D22E46394EB91322F695067B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a3a2f33322d3332203d3e20323639343137.roa
Signing time:             Tue 28 Feb 2023 18:02:20 +0000
ROA not before:           Tue 28 Feb 2023 17:57:20 +0000
ROA not after:            Tue 27 Feb 2024 18:02:20 +0000
asID:                     269417
IP address blocks:        2804:6444::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:48:f3:d5:75:7b:20:3c:53:ba:c2:81:3e:a9:2a:9e:81:36:32:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E0774EBB65EA4D22E46394EB91322F695067B5
        Validity
            Not Before: Feb 28 17:57:20 2023 GMT
            Not After : Feb 27 18:02:20 2024 GMT
        Subject: CN=D4266AB48A37E8D62A3B49AA8F96F4166993902A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:8a:e8:86:10:c5:e7:b3:6d:c5:d9:9b:c6:
                    f4:40:cd:be:bb:e7:31:e0:b1:68:98:83:21:32:cc:
                    53:99:49:3d:b4:ad:6d:fb:63:f8:fb:89:20:c1:72:
                    c0:5c:2a:b6:c5:ea:73:80:3c:7b:65:e0:aa:ea:e0:
                    21:a2:83:59:70:38:54:d6:ce:a7:8e:8a:29:9b:98:
                    c1:f0:28:eb:22:cd:db:b0:f4:44:25:3e:53:ba:a2:
                    77:9b:1c:b9:b6:3c:2c:56:7b:b5:04:cb:cc:26:e4:
                    ad:04:75:79:17:b1:66:b6:f9:a6:2f:18:be:6a:2d:
                    4d:5f:cc:13:cb:e2:4f:6b:1e:48:fd:d4:83:07:f0:
                    7b:76:c5:c8:29:cd:8e:85:54:92:be:1c:4d:b8:73:
                    22:35:63:99:63:bc:df:0f:56:f0:ee:fe:fa:6f:a5:
                    83:d0:a0:87:e5:3e:f7:1f:9f:5a:bc:8f:a4:6b:6f:
                    66:87:3e:a5:03:33:ed:51:38:3f:46:86:05:f3:36:
                    ac:87:9d:cd:2c:c6:65:8a:f2:81:b9:bd:74:83:79:
                    1f:72:4d:85:2a:dc:f6:8d:2f:d0:bc:63:c9:a3:de:
                    34:50:7b:f8:d2:7d:6f:b0:7e:a1:fd:af:4c:00:32:
                    3f:40:38:85:8f:54:6d:a5:a4:d7:3e:50:f5:ff:0e:
                    37:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:26:6A:B4:8A:37:E8:D6:2A:3B:49:AA:8F:96:F4:16:69:93:90:2A
            X509v3 Authority Key Identifier:
                keyid:F8:E0:77:4E:BB:65:EA:4D:22:E4:63:94:EB:91:32:2F:69:50:67:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/F8E0774EBB65EA4D22E46394EB91322F695067B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8E0774EBB65EA4D22E46394EB91322F695067B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a3a2f33322d3332203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6444::/32

    Signature Algorithm: sha256WithRSAEncryption
         d4:d3:de:39:df:2c:4e:cb:15:95:39:57:d5:19:54:b8:37:af:
         de:a5:0b:3d:97:4b:c6:79:c2:22:4b:3b:27:55:dd:28:3e:ad:
         01:07:6b:e8:e1:b9:a0:d0:37:3a:96:51:6d:56:99:04:b0:3f:
         02:97:c2:cf:be:a4:44:29:2d:0e:74:5e:2d:ad:49:70:f8:77:
         39:60:08:2e:81:f2:de:03:64:e0:fc:f2:37:1a:b8:69:7a:42:
         1c:89:57:97:64:92:b3:16:ad:fc:14:3f:f1:72:13:71:e2:80:
         e3:95:90:3c:de:6a:3e:b2:9d:a5:dd:54:8f:14:53:ec:d8:9a:
         8f:04:50:18:19:61:c7:b9:6d:46:7e:6b:df:46:59:a9:c9:32:
         dd:68:e1:cd:55:e6:8d:b9:e0:4a:26:d2:f4:05:04:66:60:83:
         48:fd:9c:75:23:6d:12:91:45:e7:94:c4:89:e6:d6:c4:1d:df:
         fa:2d:f1:04:f2:b3:2a:a2:65:28:ef:5a:ca:26:f1:4d:bb:83:
         60:28:ce:24:20:48:63:02:eb:19:b0:cf:6b:d6:31:25:28:6c:
         e0:e3:fa:a7:a8:5e:87:eb:93:84:af:e6:56:a4:f8:8b:68:43:
         22:9d:12:47:b2:20:4a:dc:70:0e:4a:5f:91:aa:7a:98:c9:1b:
         7b:98:c1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----