Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33322d3333203d3e20323638313036.roa
File:                     323830343a353831383a3a2f33322d3333203d3e20323638313036.roa (raw, json)
Hash identifier:          NKfJR5/Q+QRmChZSvu/szjECL5d+SncWhMUd2mD6hx8=
Subject key identifier:   C2:1E:63:8A:E9:62:11:0A:07:05:CF:72:A8:B0:F0:D5:26:62:F9:19
Certificate issuer:       /CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
Certificate serial:       32CD9D765B6E9702D9D4789B70F397D7CAE602B3
Authority key identifier: B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33322d3333203d3e20323638313036.roa
Signing time:             Thu 15 Sep 2022 19:02:50 +0000
ROA not before:           Thu 15 Sep 2022 18:57:50 +0000
ROA not after:            Thu 14 Sep 2023 19:02:50 +0000
asID:                     268106
IP address blocks:        2804:5818::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cd:9d:76:5b:6e:97:02:d9:d4:78:9b:70:f3:97:d7:ca:e6:02:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
        Validity
            Not Before: Sep 15 18:57:50 2022 GMT
            Not After : Sep 14 19:02:50 2023 GMT
        Subject: CN=C21E638AE962110A0705CF72A8B0F0D52662F919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:1d:3c:8c:21:70:ac:64:b6:96:1c:24:5d:
                    bb:93:ba:76:ee:72:2f:76:68:ac:44:ef:63:02:78:
                    aa:e4:30:4d:51:bf:5a:4a:c8:42:71:90:53:bc:20:
                    3a:19:d5:9f:a5:60:dc:ab:5f:ac:5e:fe:0c:b7:9f:
                    a4:24:9f:be:f9:d6:cb:e4:8d:ca:85:2d:a2:5a:86:
                    97:88:a0:21:a1:96:f5:fe:4b:ef:2c:24:d6:9d:d6:
                    6a:ab:d5:8e:37:f2:96:41:05:70:69:b0:e2:17:37:
                    5c:d9:38:f9:d5:5f:ed:77:4d:c9:d3:96:6f:8a:b9:
                    a8:e2:1e:61:d7:15:38:f8:38:e2:5f:cf:4c:10:05:
                    32:b1:89:cd:40:23:15:21:82:05:61:c8:a3:d2:20:
                    f3:98:26:d3:9c:9d:7b:11:b3:0e:a9:85:41:f6:16:
                    a1:92:77:93:f8:56:c4:f9:ee:46:cd:de:3f:c3:c6:
                    76:d2:c9:20:28:0b:27:4c:d6:b8:3d:7f:de:47:93:
                    c6:21:8c:ef:fd:3b:87:0f:74:4a:b2:dc:01:57:69:
                    e8:52:35:24:0d:f0:33:6a:fe:ae:2e:83:95:7d:7e:
                    ff:93:e7:82:ed:c3:30:41:e8:f9:8a:46:bd:3b:3a:
                    94:d2:23:ad:94:79:e7:e5:50:46:7a:9c:11:27:02:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1E:63:8A:E9:62:11:0A:07:05:CF:72:A8:B0:F0:D5:26:62:F9:19
            X509v3 Authority Key Identifier:
                keyid:B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33322d3333203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5818::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:12:bd:b9:05:6b:25:63:41:fc:22:48:76:42:b4:49:21:25:
         bb:ee:07:27:fc:47:77:34:02:88:91:1f:98:0c:b2:eb:62:cb:
         e7:6c:1d:d7:bb:0e:18:94:cb:a5:4c:fd:77:b6:f8:89:05:bf:
         77:5b:bc:10:39:a8:57:7e:99:d1:0b:5f:b1:de:ea:87:1b:b0:
         1c:2b:de:33:e6:a9:f3:11:3e:14:4b:76:4b:87:ca:e5:a3:13:
         b3:c0:10:5a:78:8c:97:2a:e9:23:3b:23:65:fb:e1:ce:36:a7:
         ff:2a:46:53:7a:1c:08:9f:69:3f:3f:bf:11:a2:ec:d9:26:3e:
         59:05:e4:5b:af:13:89:36:f7:97:be:56:15:e3:83:30:c2:41:
         73:87:82:62:8a:1d:d0:89:f3:a1:8e:69:ab:e3:29:91:30:b2:
         e1:ca:75:a5:55:2c:5b:2c:b0:67:af:28:d2:49:2a:26:1a:cc:
         79:76:86:d0:55:89:9a:a8:bd:69:9b:f5:c8:bf:a7:d7:14:ec:
         99:d0:f5:40:11:80:c1:77:49:7c:2b:5d:ae:8b:61:a0:7c:90:
         ce:40:c1:12:7a:6d:f3:ea:be:29:66:ac:04:78:00:29:b9:0a:
         8a:ae:8d:e3:d6:3f:1e:b8:d0:b2:f2:f5:6b:ad:5e:a2:2d:09:
         14:a1:2b:48
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMs2ddltulwLZ1HibcPOX18rmArMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI2MTRGMkQzNUZERjA0RkI0MjhERUI0NkU2MDcxM0E4
RENGNkI0OTAeFw0yMjA5MTUxODU3NTBaFw0yMzA5MTQxOTAyNTBaMDMxMTAvBgNV
BAMTKEMyMUU2MzhBRTk2MjExMEEwNzA1Q0Y3MkE4QjBGMEQ1MjY2MkY5MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1B08jCFwrGS2lhwkXbuTunbu
ci92aKxE72MCeKrkME1Rv1pKyEJxkFO8IDoZ1Z+lYNyrX6xe/gy3n6Qkn7751svk
jcqFLaJahpeIoCGhlvX+S+8sJNad1mqr1Y438pZBBXBpsOIXN1zZOPnVX+13TcnT
lm+KuajiHmHXFTj4OOJfz0wQBTKxic1AIxUhggVhyKPSIPOYJtOcnXsRsw6phUH2
FqGSd5P4VsT57kbN3j/DxnbSySAoCydM1rg9f95Hk8YhjO/9O4cPdEqy3AFXaehS
NSQN8DNq/q4ug5V9fv+T54LtwzBB6PmKRr07OpTSI62UeeflUEZ6nBEnAkUpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUwh5jiuliEQoHBc9yqLDw1SZi+RkwHwYDVR0j
BBgwFoAUsmFPLTX98E+0KN60bmBxOo3Pa0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJaZHBUMWpxVWtxVm5Qdld1V2ZlWXVReGdTUzYzdkNSRjJFZjg2b2Y4
bncvMC9CMjYxNEYyRDM1RkRGMDRGQjQyOERFQjQ2RTYwNzEzQThEQ0Y2QjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyNjE0RjJEMzVGREYwNEZC
NDI4REVCNDZFNjA3MTNBOERDRjZCNDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JSWmRwVDFqcVVrcVZuUHZXdVdmZVl1UXhnU1M2M3ZDUkYyRWY4Nm9mOG53LzAv
MzIzODMwMzQzYTM1MzgzMTM4M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM4
MzEzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARYGDANBgkqhkiG9w0BAQsFAAOCAQEAtRK9uQVr
JWNB/CJIdkK0SSElu+4HJ/xHdzQCiJEfmAyy62LL52wd17sOGJTLpUz9d7b4iQW/
d1u8EDmoV36Z0Qtfsd7qhxuwHCveM+ap8xE+FEt2S4fK5aMTs8AQWniMlyrpIzsj
Zfvhzjan/ypGU3ocCJ9pPz+/EaLs2SY+WQXkW68TiTb3l75WFeODMMJBc4eCYood
0InzoY5pq+MpkTCy4cp1pVUsWyywZ68o0kkqJhrMeXaG0FWJmqi9aZv1yL+n1xTs
mdD1QBGAwXdJfCtdrothoHyQzkDBEnpt8+q+KWasBHgAKbkKiq6N49Y/HrjQsvL1
a61eoi0JFKErSA==
-----END CERTIFICATE-----