Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a383030303a3a2f33332d3333203d3e20323730343137.roa
File:                     323830343a366262303a383030303a3a2f33332d3333203d3e20323730343137.roa (raw, json)
Hash identifier:          4HgU95saUr8Kjopa9U+bOAwW/d/o7AWq/WlqOuq2QT0=
Subject key identifier:   3E:1F:B1:9B:A0:55:40:12:3F:55:A4:F5:29:4B:D5:3F:6C:67:BA:62
Certificate issuer:       /CN=EDAD5F12EEA89C9E401BD574669D6954F9209697
Certificate serial:       1DF80A07FAFB873E9D014B7A7A52EAEAEE0A45F0
Authority key identifier: ED:AD:5F:12:EE:A8:9C:9E:40:1B:D5:74:66:9D:69:54:F9:20:96:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDAD5F12EEA89C9E401BD574669D6954F9209697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a383030303a3a2f33332d3333203d3e20323730343137.roa
Signing time:             Tue 16 Aug 2022 18:32:44 +0000
ROA not before:           Tue 16 Aug 2022 18:27:44 +0000
ROA not after:            Tue 15 Aug 2023 18:32:44 +0000
asID:                     270417
IP address blocks:        2804:6bb0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f8:0a:07:fa:fb:87:3e:9d:01:4b:7a:7a:52:ea:ea:ee:0a:45:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDAD5F12EEA89C9E401BD574669D6954F9209697
        Validity
            Not Before: Aug 16 18:27:44 2022 GMT
            Not After : Aug 15 18:32:44 2023 GMT
        Subject: CN=3E1FB19BA05540123F55A4F5294BD53F6C67BA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:08:8f:4f:cd:1f:70:80:a8:49:ea:d5:76:
                    ef:3c:82:72:fc:76:83:05:28:9a:f3:48:01:7e:1b:
                    08:c6:58:43:cf:b8:d9:ae:af:5a:43:79:56:81:cb:
                    20:21:74:d1:26:af:60:8e:ae:69:fa:ba:40:31:75:
                    c4:f1:b9:86:1c:99:26:40:30:64:be:92:88:dd:f0:
                    9b:39:09:91:18:ba:a2:f8:8c:3c:31:d0:fd:1b:52:
                    00:df:56:1c:2b:16:74:c6:1e:71:f6:f6:32:be:cf:
                    4d:d8:37:68:71:74:69:81:72:8a:88:24:03:52:33:
                    79:40:e1:dd:8f:a8:4e:bf:c6:2d:56:08:b0:e5:43:
                    6a:1b:56:ec:68:e8:c7:63:3a:5e:5d:1e:1d:03:30:
                    12:55:31:68:0c:56:c4:c8:22:a3:26:33:ca:a8:df:
                    84:da:ca:2b:0d:51:f0:35:e8:29:26:ed:90:b8:ac:
                    3f:47:a6:59:a9:65:57:95:4b:d4:c1:0f:3e:f8:da:
                    0a:5d:26:fb:f7:99:e4:f0:3d:ea:89:00:41:8d:f3:
                    41:c0:f4:cf:84:5d:db:66:50:f7:35:ee:e7:6a:81:
                    b5:56:bc:f1:89:f0:0e:91:f2:41:6b:6b:e0:69:32:
                    13:3d:bb:63:52:d1:91:46:93:7c:3e:f5:22:d6:d0:
                    73:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1F:B1:9B:A0:55:40:12:3F:55:A4:F5:29:4B:D5:3F:6C:67:BA:62
            X509v3 Authority Key Identifier:
                keyid:ED:AD:5F:12:EE:A8:9C:9E:40:1B:D5:74:66:9D:69:54:F9:20:96:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/EDAD5F12EEA89C9E401BD574669D6954F9209697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDAD5F12EEA89C9E401BD574669D6954F9209697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/323830343a366262303a383030303a3a2f33332d3333203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         73:43:ac:b9:9f:da:c6:f3:50:6a:2a:da:b2:6c:85:f6:cd:fa:
         64:07:d2:1c:2b:b5:6d:fd:ab:fb:0a:20:a7:5e:f6:db:56:33:
         2e:b8:ce:e1:c3:d8:cb:c8:b2:3d:be:2a:02:35:27:f3:38:41:
         3d:a8:d9:f2:64:59:49:24:0e:c5:76:4d:f6:08:af:74:81:1a:
         47:60:d2:92:43:26:3f:31:27:c9:00:51:fd:1d:41:fe:6e:24:
         c3:fb:48:b8:63:8d:dd:59:df:81:b1:22:e3:8b:50:ea:c5:b6:
         ef:a1:0d:6e:3b:53:5f:cb:5b:99:20:6e:66:a8:7f:80:37:26:
         ec:26:23:5c:94:e6:d3:71:a5:16:ba:3e:99:e9:f8:e3:ca:09:
         d6:d3:5d:c7:f4:2a:a6:9d:81:ff:9d:5f:4c:6d:5d:e3:1b:5b:
         05:f1:1a:4c:93:39:50:0e:b5:95:64:b2:d6:8d:23:8e:d0:5d:
         96:17:d8:ef:14:a5:23:fd:15:f2:a3:38:ea:59:c6:a9:ea:27:
         75:19:1d:a0:ab:18:1f:81:9e:00:68:9c:07:41:4c:4c:c0:73:
         df:0c:f6:24:48:74:ab:dd:57:72:aa:9c:0f:4a:04:8f:59:b7:
         55:61:77:ac:24:00:a8:d8:df:aa:9f:28:a0:d9:26:bc:8d:eb:
         54:2e:c7:86
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHfgKB/r7hz6dAUt6elLq6u4KRfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBRDVGMTJFRUE4OUM5RTQwMUJENTc0NjY5RDY5NTRG
OTIwOTY5NzAeFw0yMjA4MTYxODI3NDRaFw0yMzA4MTUxODMyNDRaMDMxMTAvBgNV
BAMTKDNFMUZCMTlCQTA1NTQwMTIzRjU1QTRGNTI5NEJENTNGNkM2N0JBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ggiPT80fcICoSerVdu88gnL8
doMFKJrzSAF+GwjGWEPPuNmur1pDeVaByyAhdNEmr2COrmn6ukAxdcTxuYYcmSZA
MGS+kojd8Js5CZEYuqL4jDwx0P0bUgDfVhwrFnTGHnH29jK+z03YN2hxdGmBcoqI
JANSM3lA4d2PqE6/xi1WCLDlQ2obVuxo6MdjOl5dHh0DMBJVMWgMVsTIIqMmM8qo
34TayisNUfA16Ckm7ZC4rD9HplmpZVeVS9TBDz742gpdJvv3meTwPeqJAEGN80HA
9M+EXdtmUPc17udqgbVWvPGJ8A6R8kFra+BpMhM9u2NS0ZFGk3w+9SLW0HOdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUPh+xm6BVQBI/VaT1KUvVP2xnumIwHwYDVR0j
BBgwFoAU7a1fEu6onJ5AG9V0Zp1pVPkglpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmEzaWRmQWZjTGdnRE1DcXc5QUdMS0o4ZnhEamFUbm1Qb3EzeGlzVTMz
VXMvMC9FREFENUYxMkVFQTg5QzlFNDAxQkQ1NzQ2NjlENjk1NEY5MjA5Njk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VEQUQ1RjEyRUVBODlDOUU0
MDFCRDU3NDY2OUQ2OTU0RjkyMDk2OTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhM2lkZkFmY0xnZ0RNQ3F3OUFHTEtKOGZ4RGphVG5tUG9xM3hpc1UzM1VzLzAv
MzIzODMwMzQzYTM2NjI2MjMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMDM0MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEa7CAMA0GCSqGSIb3DQEBCwUA
A4IBAQBzQ6y5n9rG81BqKtqybIX2zfpkB9IcK7Vt/av7CiCnXvbbVjMuuM7hw9jL
yLI9vioCNSfzOEE9qNnyZFlJJA7Fdk32CK90gRpHYNKSQyY/MSfJAFH9HUH+biTD
+0i4Y43dWd+BsSLji1DqxbbvoQ1uO1Nfy1uZIG5mqH+ANybsJiNclObTcaUWuj6Z
6fjjygnW013H9CqmnYH/nV9MbV3jG1sF8RpMkzlQDrWVZLLWjSOO0F2WF9jvFKUj
/RXyozjqWcap6id1GR2gqxgfgZ4AaJwHQUxMwHPfDPYkSHSr3VdyqpwPSgSPWbdV
YXesJACo2N+qnyig2Sa8jetULseG
-----END CERTIFICATE-----