Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/323830343a313432343a3a2f33322d3438203d3e203532393430.roa
File:                     323830343a313432343a3a2f33322d3438203d3e203532393430.roa (raw, json)
Hash identifier:          Xa/rpD/D4C6ZF7FicWXDhng4F7JFX51ourTX9J9I6+A=
Subject key identifier:   45:64:DB:D2:EA:2E:B0:84:1F:EE:E2:EF:A7:0B:33:B6:CC:B3:77:AD
Certificate issuer:       /CN=58DCEB2BA8436334BE768AC3D425297AFC59F56B
Certificate serial:       2E50F6CC65653C6900C660B7A4700F86779973A1
Authority key identifier: 58:DC:EB:2B:A8:43:63:34:BE:76:8A:C3:D4:25:29:7A:FC:59:F5:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58DCEB2BA8436334BE768AC3D425297AFC59F56B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/323830343a313432343a3a2f33322d3438203d3e203532393430.roa
Signing time:             Mon 25 Oct 2021 18:34:12 +0000
ROA not before:           Mon 25 Oct 2021 18:29:12 +0000
ROA not after:            Mon 24 Oct 2022 18:34:12 +0000
asID:                     52940
IP address blocks:        2804:1424::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:50:f6:cc:65:65:3c:69:00:c6:60:b7:a4:70:0f:86:77:99:73:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58DCEB2BA8436334BE768AC3D425297AFC59F56B
        Validity
            Not Before: Oct 25 18:29:12 2021 GMT
            Not After : Oct 24 18:34:12 2022 GMT
        Subject: CN=3082010A0282010100DA0C4CF42A5898E33B4C715E736E48D9C5A5A93E7699BC490AB8A42061C1415D49F6973B5AA56BD0DC33D4EED4330B41FCF83283C4C39E02BBF5E4BEFB91C6491E8B00836F053497A25F7898CDE193C62F58ACFD9290EA4432E95A850FCB7577021796ED32A987C9BE9E457BD7FA13E0460209C8C6BCD7FE15BF9F001BAFFC68BED7266D1F5348839E282A5459B5A65BECAC556F7F75105C6789A27613A13F19D1F4CAAE48A4B76D84E2A0C4F8CB78032794D984CBBEA24A269D1114AA2112ABC07A18500142F4B9D592016E1546D3ABDD12C068DB48C9E4CF2F7065995D62E6F4C52789EBCD44685FB4009C3E79E47F37E62525C7B97BA706091047AF3CA6EB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0c:4c:f4:2a:58:98:e3:3b:4c:71:5e:73:6e:
                    48:d9:c5:a5:a9:3e:76:99:bc:49:0a:b8:a4:20:61:
                    c1:41:5d:49:f6:97:3b:5a:a5:6b:d0:dc:33:d4:ee:
                    d4:33:0b:41:fc:f8:32:83:c4:c3:9e:02:bb:f5:e4:
                    be:fb:91:c6:49:1e:8b:00:83:6f:05:34:97:a2:5f:
                    78:98:cd:e1:93:c6:2f:58:ac:fd:92:90:ea:44:32:
                    e9:5a:85:0f:cb:75:77:02:17:96:ed:32:a9:87:c9:
                    be:9e:45:7b:d7:fa:13:e0:46:02:09:c8:c6:bc:d7:
                    fe:15:bf:9f:00:1b:af:fc:68:be:d7:26:6d:1f:53:
                    48:83:9e:28:2a:54:59:b5:a6:5b:ec:ac:55:6f:7f:
                    75:10:5c:67:89:a2:76:13:a1:3f:19:d1:f4:ca:ae:
                    48:a4:b7:6d:84:e2:a0:c4:f8:cb:78:03:27:94:d9:
                    84:cb:be:a2:4a:26:9d:11:14:aa:21:12:ab:c0:7a:
                    18:50:01:42:f4:b9:d5:92:01:6e:15:46:d3:ab:dd:
                    12:c0:68:db:48:c9:e4:cf:2f:70:65:99:5d:62:e6:
                    f4:c5:27:89:eb:cd:44:68:5f:b4:00:9c:3e:79:e4:
                    7f:37:e6:25:25:c7:b9:7b:a7:06:09:10:47:af:3c:
                    a6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:64:DB:D2:EA:2E:B0:84:1F:EE:E2:EF:A7:0B:33:B6:CC:B3:77:AD
            X509v3 Authority Key Identifier:
                keyid:58:DC:EB:2B:A8:43:63:34:BE:76:8A:C3:D4:25:29:7A:FC:59:F5:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/58DCEB2BA8436334BE768AC3D425297AFC59F56B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58DCEB2BA8436334BE768AC3D425297AFC59F56B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/323830343a313432343a3a2f33322d3438203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1424::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:c1:39:f0:5f:05:93:83:15:89:38:ea:ad:2c:eb:61:95:25:
         13:68:07:86:ea:97:6d:1e:ce:b7:76:77:d3:f5:0e:7b:0b:0c:
         ef:47:5d:d1:c4:10:06:39:a5:d8:02:de:b5:7c:67:dd:85:82:
         dd:71:54:33:35:db:4a:80:69:d6:b1:35:b4:a8:13:3d:06:1f:
         aa:ea:7e:32:1b:d6:64:d2:b0:3f:e8:5c:71:eb:c8:d5:9d:67:
         4a:f1:2a:8b:90:68:c7:8b:0d:51:ef:be:d0:54:42:a7:77:05:
         f3:74:1d:40:3a:d0:b8:ce:2c:86:59:a4:06:fb:99:27:96:de:
         1a:4e:04:af:25:7e:cf:d4:9c:54:2b:1b:f3:ed:f9:66:84:c3:
         29:f5:5a:1e:e2:63:b4:49:fe:69:23:2e:9f:81:3d:3a:5f:70:
         0e:56:1c:e5:22:39:56:51:d8:18:dd:9b:a0:2b:f3:ec:90:d7:
         df:ce:27:5f:78:f1:b1:c7:fa:fb:f7:ae:0a:0b:03:de:47:41:
         8e:e2:86:c3:f2:fe:45:db:c1:d6:1d:3a:a2:cb:ba:86:d0:de:
         a5:66:fc:bc:6e:2c:aa:3a:3d:e0:98:2a:19:13:6c:0c:64:98:
         12:2f:8e:0b:05:33:45:e3:68:0a:c5:f8:e8:8b:9b:95:9c:d5:
         71:93:78:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----