Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/323830343a373336343a3a2f33332d3333203d3e20323730393132.roa
File:                     323830343a373336343a3a2f33332d3333203d3e20323730393132.roa (raw, json)
Hash identifier:          2DZrj4xg7+6CcTOuFhbhRf8jah5V4mX29CQE2ejiF9o=
Subject key identifier:   94:03:3B:A1:B9:1F:8C:29:16:BF:B7:DB:6A:22:D9:79:97:80:18:A6
Certificate issuer:       /CN=4EBB18374941D22D14823D528E60AE1FA14E7D00
Certificate serial:       3351071A06AF70A94E924DB1410A18C9EF301089
Authority key identifier: 4E:BB:18:37:49:41:D2:2D:14:82:3D:52:8E:60:AE:1F:A1:4E:7D:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EBB18374941D22D14823D528E60AE1FA14E7D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/323830343a373336343a3a2f33332d3333203d3e20323730393132.roa
Signing time:             Fri 25 Feb 2022 18:23:28 +0000
ROA not before:           Fri 25 Feb 2022 18:18:28 +0000
ROA not after:            Fri 24 Feb 2023 18:23:28 +0000
asID:                     270912
IP address blocks:        2804:7364::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:51:07:1a:06:af:70:a9:4e:92:4d:b1:41:0a:18:c9:ef:30:10:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EBB18374941D22D14823D528E60AE1FA14E7D00
        Validity
            Not Before: Feb 25 18:18:28 2022 GMT
            Not After : Feb 24 18:23:28 2023 GMT
        Subject: CN=94033BA1B91F8C2916BFB7DB6A22D979978018A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:e7:75:4e:1c:05:8e:54:b9:99:55:78:86:
                    fb:5c:ee:ef:d9:8a:11:ae:87:1d:c7:1e:83:12:fe:
                    b9:72:88:f9:e4:e1:d3:8a:bc:a2:08:3c:ed:a6:c4:
                    b8:72:90:e4:d2:5a:e5:59:4a:91:92:87:68:5c:d9:
                    ff:eb:91:6b:bf:d6:88:3b:20:7e:43:7e:63:01:a9:
                    a1:bd:c9:e0:1b:ee:37:b8:14:70:35:ce:9d:a1:b2:
                    51:61:a2:a1:3f:fb:b5:be:27:3c:15:2f:f8:a6:ed:
                    3e:cb:50:d3:9f:ac:3e:47:1d:ba:5c:17:52:2c:b0:
                    dc:b3:23:4a:07:89:2f:97:ce:a2:51:40:52:79:e4:
                    35:f7:73:10:b7:47:d0:c3:64:ba:cf:d4:f2:98:7e:
                    6e:e8:89:58:89:48:2d:aa:c7:1d:1d:75:2e:b4:3e:
                    ea:59:c3:2b:18:04:49:00:24:44:12:2f:1f:26:b1:
                    f5:88:e6:a3:e0:99:0c:74:f8:b7:25:1a:8d:84:57:
                    43:fb:e4:87:4b:7c:00:63:29:70:e7:a3:1c:f6:d5:
                    3d:d7:73:7e:5a:5f:8c:dd:52:dd:90:cc:14:08:16:
                    44:f0:fb:1b:ea:0c:0e:58:0a:c5:18:30:51:25:52:
                    c7:f2:64:f2:1a:b3:b5:0c:35:4b:25:29:9f:b8:fe:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:03:3B:A1:B9:1F:8C:29:16:BF:B7:DB:6A:22:D9:79:97:80:18:A6
            X509v3 Authority Key Identifier:
                keyid:4E:BB:18:37:49:41:D2:2D:14:82:3D:52:8E:60:AE:1F:A1:4E:7D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/4EBB18374941D22D14823D528E60AE1FA14E7D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EBB18374941D22D14823D528E60AE1FA14E7D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbE7tVb2graRAorkXVL3q7n1tvWzhU3fTNDawaD3WYfL/0/323830343a373336343a3a2f33332d3333203d3e20323730393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7364::/33

    Signature Algorithm: sha256WithRSAEncryption
         6f:3f:04:a8:df:9b:58:6b:96:d6:13:39:b3:d5:24:bc:65:33:
         ff:a7:23:1f:d3:57:2f:cf:54:fe:75:75:87:a4:ab:94:db:19:
         cf:af:d2:fb:7f:f2:d7:63:e9:1b:1b:68:d3:0f:ba:ce:c6:dd:
         7d:f3:6b:a5:b0:98:04:9e:57:84:04:62:90:5b:84:64:ea:89:
         0a:03:dd:07:e5:45:bb:6f:67:23:66:a7:85:45:5f:c8:cb:bd:
         60:d4:0a:5c:62:51:18:6b:de:5e:3a:e9:2e:94:94:10:75:e9:
         75:aa:9e:5e:c0:4a:2e:27:47:f7:ce:f7:05:de:38:b1:b5:8a:
         39:93:78:05:47:44:ad:8e:7a:e6:15:b4:44:05:17:c5:16:ee:
         eb:1c:15:41:4a:32:16:fd:48:df:0c:fd:b7:19:11:7b:90:49:
         f7:07:e6:fd:ef:cc:ac:cc:3a:aa:6d:f7:bd:d7:e6:cd:b4:e0:
         10:7d:ac:1c:f0:77:fc:a7:47:52:6e:d8:51:bb:b6:62:4d:d5:
         80:07:40:a7:60:09:34:2f:95:f8:64:27:e7:c7:8c:8e:7f:31:
         21:bc:76:64:87:76:c3:79:30:ce:03:33:70:f3:73:91:73:db:
         60:d8:cd:48:0a:61:27:72:30:2e:4a:e3:fa:7d:a8:e0:cf:fb:
         b9:b7:0c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----