Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/323830343a373336343a383030303a3a2f33332d3333203d3e20323730393132.roa
File:                     323830343a373336343a383030303a3a2f33332d3333203d3e20323730393132.roa (raw, json)
Hash identifier:          HoQnNByr5ZbFlbghaeww3GeUts6xjb3vzEhO1GjsPDQ=
Subject key identifier:   19:FD:D6:F3:D4:0A:BB:6B:C5:71:B6:F2:D3:A6:F1:27:11:B1:31:B7
Certificate issuer:       /CN=4EBB18374941D22D14823D528E60AE1FA14E7D00
Certificate serial:       0EECC04C50A22444653AE88F6004FFA328FC9D86
Authority key identifier: 4E:BB:18:37:49:41:D2:2D:14:82:3D:52:8E:60:AE:1F:A1:4E:7D:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EBB18374941D22D14823D528E60AE1FA14E7D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/323830343a373336343a383030303a3a2f33332d3333203d3e20323730393132.roa
Signing time:             Fri 25 Feb 2022 18:23:31 +0000
ROA not before:           Fri 25 Feb 2022 18:18:31 +0000
ROA not after:            Fri 24 Feb 2023 18:23:31 +0000
asID:                     270912
IP address blocks:        2804:7364:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ec:c0:4c:50:a2:24:44:65:3a:e8:8f:60:04:ff:a3:28:fc:9d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EBB18374941D22D14823D528E60AE1FA14E7D00
        Validity
            Not Before: Feb 25 18:18:31 2022 GMT
            Not After : Feb 24 18:23:31 2023 GMT
        Subject: CN=19FDD6F3D40ABB6BC571B6F2D3A6F12711B131B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:d6:8d:7b:99:09:d6:f3:8d:ea:42:2b:a3:
                    d1:71:b0:f8:e4:63:2e:4e:3d:f7:87:ae:d5:09:1d:
                    2d:93:b7:28:9a:f5:4a:b5:35:9f:d7:cf:10:ea:fd:
                    b5:29:6a:ba:34:03:67:46:db:20:1c:7d:c4:a8:e0:
                    a6:17:4b:16:9a:46:5a:dc:99:e1:89:19:60:66:0e:
                    9a:c2:7a:5c:0a:d1:b2:27:a5:5f:f3:b2:25:37:1a:
                    6a:7c:ca:17:ac:ec:79:51:18:44:90:68:ff:fd:91:
                    e2:0b:69:d3:13:7c:a5:47:b6:80:78:b8:11:e6:59:
                    8e:98:94:33:22:3d:9a:d7:df:12:0a:01:38:03:80:
                    ca:5b:14:14:54:e6:da:90:68:3f:fc:13:dd:7b:a9:
                    23:55:32:45:64:43:a3:42:1c:70:78:d2:08:c8:4c:
                    a5:d3:d3:26:ed:48:81:cb:0a:68:f4:09:5c:ce:2d:
                    ef:72:ff:89:ea:fe:12:97:8a:e1:e9:d2:be:02:62:
                    cc:70:b1:ea:60:65:1d:63:9c:b8:73:9d:3d:c8:12:
                    90:de:e2:59:e0:c6:0f:2b:4b:81:12:65:f4:3e:3e:
                    0b:56:a9:7b:a6:9c:f9:c1:72:8f:0d:84:f1:f8:66:
                    ad:d8:55:4b:a1:d4:37:79:c7:06:e9:39:af:09:4b:
                    73:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FD:D6:F3:D4:0A:BB:6B:C5:71:B6:F2:D3:A6:F1:27:11:B1:31:B7
            X509v3 Authority Key Identifier:
                keyid:4E:BB:18:37:49:41:D2:2D:14:82:3D:52:8E:60:AE:1F:A1:4E:7D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/4EBB18374941D22D14823D528E60AE1FA14E7D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EBB18374941D22D14823D528E60AE1FA14E7D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/323830343a373336343a383030303a3a2f33332d3333203d3e20323730393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7364:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         77:77:b8:5d:f2:75:9f:e6:c2:aa:58:53:50:e2:aa:12:8e:8c:
         f3:c8:b4:2e:16:ec:e4:50:5f:8f:89:d2:9a:c2:44:f4:b7:d8:
         f9:ac:d6:d0:ef:6c:a5:e2:dd:58:6c:29:74:e8:72:56:56:4c:
         63:e0:13:5f:61:f9:93:30:54:f6:aa:71:ba:6c:ad:bd:f1:72:
         a3:a8:f7:7c:e6:53:40:31:37:24:1d:59:73:9d:77:e4:b4:4d:
         76:c9:c7:ef:6b:98:01:b5:50:f6:a6:50:e1:ed:9d:5c:e0:68:
         87:bc:a2:fb:0e:7f:1b:b1:a3:d3:da:a7:ed:4e:60:ae:d1:18:
         18:43:ee:81:f3:bd:27:1a:b8:7c:08:d9:8c:35:97:37:a0:43:
         4e:99:45:fe:7e:31:78:02:ce:7e:f6:97:46:a2:0e:9d:b5:19:
         b1:bf:95:5b:04:c7:18:7c:88:a7:04:a0:46:c3:a7:34:9c:10:
         83:49:b5:28:ee:1f:07:fb:3d:cc:f0:89:06:a8:33:67:90:2d:
         8c:2d:b2:65:df:91:8e:4a:53:da:3b:57:b1:1e:82:59:bd:bc:
         df:59:be:91:9b:29:76:f7:df:d2:ab:95:23:67:dc:75:d8:c1:
         12:d2:cd:95:64:25:d3:47:9e:a9:e8:43:ec:f7:8a:2a:59:ee:
         bf:85:03:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----