Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a383030303a3a2f33332d3333203d3e20323730373933.roa
File:                     323830343a373138303a383030303a3a2f33332d3333203d3e20323730373933.roa (raw, json)
Hash identifier:          U+0dUWxUnwWHLzRN9JjGuvfEzxDIFxVN3OpI7DvHsas=
Subject key identifier:   1A:40:3B:BF:6B:51:04:9A:87:04:80:7A:3B:DF:6D:B4:4E:EB:EC:2B
Certificate issuer:       /CN=96B144FE6CA3062A1FE26385A6C33A9C6A21A266
Certificate serial:       52E81EF084D12A46944113590A6344119FA3F99D
Authority key identifier: 96:B1:44:FE:6C:A3:06:2A:1F:E2:63:85:A6:C3:3A:9C:6A:21:A2:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96B144FE6CA3062A1FE26385A6C33A9C6A21A266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a383030303a3a2f33332d3333203d3e20323730373933.roa
Signing time:             Mon 26 Sep 2022 17:38:51 +0000
ROA not before:           Mon 26 Sep 2022 17:33:51 +0000
ROA not after:            Mon 25 Sep 2023 17:38:51 +0000
asID:                     270793
IP address blocks:        2804:7180:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e8:1e:f0:84:d1:2a:46:94:41:13:59:0a:63:44:11:9f:a3:f9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B144FE6CA3062A1FE26385A6C33A9C6A21A266
        Validity
            Not Before: Sep 26 17:33:51 2022 GMT
            Not After : Sep 25 17:38:51 2023 GMT
        Subject: CN=1A403BBF6B51049A8704807A3BDF6DB44EEBEC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:94:93:90:61:a2:7b:89:72:f3:5b:23:11:f3:
                    98:c5:93:8b:4f:f7:54:90:ce:1d:c5:40:98:41:9e:
                    04:d2:ba:66:b6:7d:4c:b8:52:31:99:02:4f:6b:8b:
                    b8:30:f7:a3:07:8d:94:b9:71:2b:ea:48:40:1d:2a:
                    c3:43:cf:95:00:a4:a5:23:f5:b7:83:f0:ff:e1:0f:
                    cf:59:c8:63:64:f9:e0:f9:6a:a6:ba:12:c8:d3:d9:
                    d4:e2:50:6f:01:87:3e:90:35:bc:14:7b:c3:7f:e8:
                    98:eb:4b:f1:4a:67:6a:d3:a9:91:c1:fa:5c:c5:c6:
                    bf:03:2b:34:0e:ee:88:bb:fa:a4:d0:e9:e2:0d:92:
                    07:cd:32:90:24:51:2b:18:38:99:38:df:a4:79:c8:
                    00:bb:df:ba:9d:13:74:6d:25:46:5b:f5:c3:27:33:
                    b9:7c:53:e2:d3:e5:74:d9:9d:78:c1:8e:ae:5c:ae:
                    d7:df:c1:f2:57:40:db:8e:3a:cb:8a:da:d0:6b:3d:
                    42:e8:5c:85:8a:cb:f2:fd:94:11:31:44:28:72:6c:
                    1c:02:57:d2:d7:14:60:ad:d1:11:be:e1:01:05:49:
                    0c:1c:fe:ce:ae:76:3d:fb:d9:d3:da:cc:5a:b7:06:
                    11:7f:25:c2:77:11:7d:90:f5:ed:a5:3e:f6:b5:34:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:40:3B:BF:6B:51:04:9A:87:04:80:7A:3B:DF:6D:B4:4E:EB:EC:2B
            X509v3 Authority Key Identifier:
                keyid:96:B1:44:FE:6C:A3:06:2A:1F:E2:63:85:A6:C3:3A:9C:6A:21:A2:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/96B144FE6CA3062A1FE26385A6C33A9C6A21A266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96B144FE6CA3062A1FE26385A6C33A9C6A21A266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a383030303a3a2f33332d3333203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7180:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0b:81:a8:00:39:cb:5f:29:60:f8:35:b7:09:e5:3a:7b:16:5c:
         d9:45:74:35:6b:73:bc:12:9f:48:0e:3f:8b:cf:6e:30:ac:8c:
         e2:46:e1:94:61:97:d2:27:9b:94:a7:78:5b:22:20:86:52:7f:
         68:b3:32:11:8a:37:dd:e3:3d:03:87:8a:0a:ed:fa:20:10:64:
         2c:20:0a:e1:cc:a7:85:6a:9f:c8:5d:4e:bd:86:cc:36:e6:58:
         df:2d:ab:b0:67:b3:0b:d1:ea:68:ca:13:1a:6b:d7:7a:35:c0:
         16:81:d3:76:c2:d4:8b:ad:d4:ba:c9:9b:ed:cd:bb:3f:40:cd:
         90:54:98:23:fb:f7:a8:c9:94:7f:cc:67:5a:80:66:bc:89:db:
         b6:de:92:1b:9b:30:b7:a5:37:9e:10:a8:a4:7f:71:75:39:31:
         ca:ae:7b:1b:fd:5c:73:56:0f:fe:98:31:8b:2b:ae:48:45:60:
         3a:fd:fe:c9:9d:12:5d:e8:d4:05:e9:d6:2e:c8:ee:89:00:3b:
         a4:ef:ba:aa:c5:27:04:bb:b0:fe:16:bb:37:ad:75:ba:6d:48:
         f1:aa:94:fe:b7:6f:0f:9e:1e:6f:ec:f0:13:e4:0c:dd:9a:35:
         14:f8:b2:74:18:c5:58:2c:65:78:73:55:09:6a:19:34:1e:22:
         8e:cb:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----