Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/323830343a313838633a3a2f33322d3438203d3e203631393339.roa
File:                     323830343a313838633a3a2f33322d3438203d3e203631393339.roa (raw, json)
Hash identifier:          ITkh9rm3gQniAWelTVJKM7XFdJDrmeyFmmO/4FkOO/s=
Subject key identifier:   4D:2B:B4:BD:DD:9B:FD:0C:9D:6A:3C:05:55:9F:B3:E2:12:4E:62:85
Certificate issuer:       /CN=D769065CB690A94EF60FECB5E5169D5B8619D711
Certificate serial:       164D80C7D80A6D568245062E1D9616A3EF25A6BB
Authority key identifier: D7:69:06:5C:B6:90:A9:4E:F6:0F:EC:B5:E5:16:9D:5B:86:19:D7:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D769065CB690A94EF60FECB5E5169D5B8619D711.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/323830343a313838633a3a2f33322d3438203d3e203631393339.roa
Signing time:             Fri 27 Aug 2021 13:36:00 +0000
ROA not before:           Fri 27 Aug 2021 13:31:00 +0000
ROA not after:            Fri 26 Aug 2022 13:36:00 +0000
asID:                     61939
IP address blocks:        2804:188c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4d:80:c7:d8:0a:6d:56:82:45:06:2e:1d:96:16:a3:ef:25:a6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D769065CB690A94EF60FECB5E5169D5B8619D711
        Validity
            Not Before: Aug 27 13:31:00 2021 GMT
            Not After : Aug 26 13:36:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:be:05:21:08:b9:ad:67:0a:07:12:4d:4e:
                    bf:9c:46:ff:05:19:c1:39:7a:d1:64:d0:e9:4c:7b:
                    62:4d:13:3b:a7:c6:4f:14:93:f4:35:d2:51:82:70:
                    76:a9:a3:a8:e4:ef:8e:fe:09:59:a3:50:cb:cd:e1:
                    39:ad:56:c6:ce:f6:7e:83:31:bf:60:69:fd:24:5c:
                    93:95:19:2f:1c:5d:95:e1:3a:d6:38:fd:dc:62:d9:
                    22:6a:69:da:3f:cf:9b:48:c1:8d:db:ba:61:ee:2d:
                    71:2e:ef:42:04:89:00:f8:9d:ee:91:01:b4:a3:ca:
                    25:68:aa:d3:9d:0c:7d:af:96:ce:b3:19:7c:58:f7:
                    eb:eb:b0:63:6c:42:6e:83:88:1f:da:c5:c3:c4:cb:
                    53:6f:d1:35:d5:04:0d:db:9c:bb:9b:a6:2c:06:6d:
                    f0:73:48:b1:ad:d7:3a:a2:ec:04:ef:4f:45:51:be:
                    8b:dc:c6:ed:50:99:9b:0c:f9:42:7b:ae:34:af:63:
                    4c:eb:00:3d:b3:9a:6a:71:3a:b9:7f:04:e1:21:21:
                    02:b3:e2:f3:fb:16:f3:22:f8:d9:ec:6b:6f:94:93:
                    08:0f:cb:37:b9:06:ec:36:02:29:58:23:f0:eb:6a:
                    62:74:87:2e:76:da:51:8b:8d:a5:52:8d:56:61:51:
                    e6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2B:B4:BD:DD:9B:FD:0C:9D:6A:3C:05:55:9F:B3:E2:12:4E:62:85
            X509v3 Authority Key Identifier:
                keyid:D7:69:06:5C:B6:90:A9:4E:F6:0F:EC:B5:E5:16:9D:5B:86:19:D7:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/D769065CB690A94EF60FECB5E5169D5B8619D711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D769065CB690A94EF60FECB5E5169D5B8619D711.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/323830343a313838633a3a2f33322d3438203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:188c::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:24:2e:55:58:71:74:19:ba:43:64:71:a9:75:14:3f:f1:
         02:79:58:65:f1:63:0c:15:1d:e3:62:36:ab:5a:da:f7:f3:07:
         89:1f:9d:4a:ee:78:19:29:9a:29:6e:5c:ed:fc:7f:cc:f6:fc:
         20:2a:47:cb:05:a8:86:5d:ca:2f:d6:d9:65:4b:b6:71:52:dc:
         0b:31:bf:26:30:77:7f:b2:10:cd:11:5f:e2:a6:cc:be:91:3f:
         fe:fc:a3:18:b0:79:43:48:cb:0d:52:6a:30:6c:07:89:55:3b:
         3b:d5:36:a9:54:57:e7:c7:84:30:69:e8:75:73:be:0b:bd:be:
         45:13:5b:8a:28:97:eb:e2:a4:cf:08:7d:e2:00:b4:9c:5a:c7:
         05:02:65:c0:b8:d2:78:7b:47:b9:14:43:01:76:41:6a:26:21:
         4c:31:dd:05:3f:ef:4e:5e:71:83:72:59:a6:2e:4e:eb:e3:15:
         44:3a:be:99:00:00:91:a4:18:f8:e3:93:7f:0f:1a:eb:64:a4:
         9e:fb:76:57:68:4c:f8:9c:68:5b:bf:54:20:47:2a:6a:dc:27:
         fe:d5:b2:fd:bd:df:c0:1c:47:8f:8a:f0:78:af:82:d8:7b:9f:
         8f:94:2c:60:cf:e3:e7:f9:25:72:47:f2:bc:31:ba:95:ae:6d:
         f7:ab:8a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----