Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/323830343a336164633a3a2f33322d3332203d3e20323636313134.roa
File:                     323830343a336164633a3a2f33322d3332203d3e20323636313134.roa (raw, json)
Hash identifier:          RQGnBUZ/jWG5Ei92EhQEoyApjONH9n9OGwtgxeOdACo=
Subject key identifier:   48:FF:34:A9:89:FC:81:B3:19:39:35:79:34:04:30:A9:D9:17:78:9B
Certificate issuer:       /CN=FE88779B6AD0B7B46525EA344E82EE32CD38951F
Certificate serial:       17DA6F88E7BBA271241C30192384D7715048BFA5
Authority key identifier: FE:88:77:9B:6A:D0:B7:B4:65:25:EA:34:4E:82:EE:32:CD:38:95:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE88779B6AD0B7B46525EA344E82EE32CD38951F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/323830343a336164633a3a2f33322d3332203d3e20323636313134.roa
Signing time:             Tue 26 Oct 2021 13:21:06 +0000
ROA not before:           Tue 26 Oct 2021 13:16:06 +0000
ROA not after:            Tue 25 Oct 2022 13:21:06 +0000
asID:                     266114
IP address blocks:        2804:3adc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:da:6f:88:e7:bb:a2:71:24:1c:30:19:23:84:d7:71:50:48:bf:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE88779B6AD0B7B46525EA344E82EE32CD38951F
        Validity
            Not Before: Oct 26 13:16:06 2021 GMT
            Not After : Oct 25 13:21:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:8f:84:4b:a6:dd:6e:42:a2:c6:72:cb:77:
                    e2:ba:02:28:31:0e:4f:7a:83:16:dd:24:1f:33:b3:
                    ec:26:c3:1b:1e:76:77:fd:fd:6e:14:71:6b:4b:a2:
                    4e:bb:47:fe:db:90:16:0f:ad:00:15:ed:b7:c0:af:
                    36:38:38:36:e8:6d:e8:26:49:29:30:00:77:67:63:
                    46:65:f2:05:0e:c3:54:ec:0a:55:7d:63:e5:a3:7a:
                    1b:0d:cd:35:d8:a3:6c:74:b0:66:0b:8c:88:57:86:
                    16:77:85:7d:24:90:ce:cb:db:8a:e4:e0:ef:c4:66:
                    33:1f:39:9c:ee:d4:17:8c:5d:a7:46:e5:8a:be:36:
                    07:4a:db:76:63:82:6c:6c:8d:a2:63:9e:14:84:22:
                    bd:ac:e7:98:02:2f:d6:cd:d1:83:b5:5e:05:b7:12:
                    01:be:93:a4:8b:61:d4:65:be:f8:f9:31:1d:d7:c2:
                    29:50:ba:97:0f:50:5a:5d:ee:bf:f4:8f:11:7f:f9:
                    77:73:3d:aa:f4:86:a6:6b:14:fb:64:83:cc:a5:e8:
                    41:13:60:6c:e9:34:ee:22:2e:ee:cd:ff:42:95:7d:
                    ac:44:67:87:8b:47:b5:5e:4d:1f:3e:3f:cf:56:4c:
                    6a:68:9e:e4:ce:4e:5e:39:90:42:39:b9:bc:d5:bc:
                    48:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FF:34:A9:89:FC:81:B3:19:39:35:79:34:04:30:A9:D9:17:78:9B
            X509v3 Authority Key Identifier:
                keyid:FE:88:77:9B:6A:D0:B7:B4:65:25:EA:34:4E:82:EE:32:CD:38:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/FE88779B6AD0B7B46525EA344E82EE32CD38951F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE88779B6AD0B7B46525EA344E82EE32CD38951F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/323830343a336164633a3a2f33322d3332203d3e20323636313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3adc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:b3:fa:6e:55:9e:c9:89:bb:bf:4e:d0:93:b0:c3:10:0e:42:
         9d:b4:bc:0c:0c:96:0a:34:81:0f:ab:b8:bc:87:f1:42:1f:d9:
         bf:15:d5:f0:62:16:fe:17:b7:fb:a2:55:f4:71:0d:23:8e:a1:
         37:0d:1f:9b:6d:1f:78:d3:91:3f:df:a7:87:c9:bf:84:81:f0:
         f6:60:ca:5a:8a:af:b8:d3:2b:08:8c:0f:e9:04:3e:a1:27:0a:
         63:64:e1:5a:5c:af:a8:65:26:1b:11:2d:0b:01:16:c8:b8:51:
         c3:b2:1c:c0:92:3b:2f:da:40:1a:47:7a:41:e2:ac:b7:ce:c0:
         87:df:fa:2a:4d:72:34:2f:f5:d2:d6:fd:ef:95:9f:25:a0:72:
         da:c6:e9:ad:42:fe:64:73:b1:ea:67:80:a8:67:19:b6:b6:a0:
         ae:b3:fc:85:17:04:ed:2b:93:9e:49:3f:77:44:49:c6:d7:1f:
         1f:70:4a:c7:08:43:d0:78:54:8f:87:46:eb:8e:d6:48:ff:62:
         a7:a5:7a:3e:31:af:53:a5:67:85:9b:bc:1c:93:ae:89:f1:59:
         02:00:09:04:ab:61:b6:8d:90:21:eb:08:2f:05:c7:6d:fc:a2:
         21:63:91:3b:14:6d:a6:1e:6a:ad:e7:62:5f:da:4b:12:e6:ec:
         0d:5a:c0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----