Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/323830343a376436303a3a2f33322d3336203d3e203230343733.roa
File:                     323830343a376436303a3a2f33322d3336203d3e203230343733.roa (raw, json)
Hash identifier:          DVRsh6SdBM8xyPoe64jgfu4Citi5JdU+g0WgbWCH1mw=
Subject key identifier:   B0:66:24:9F:46:2C:3C:6F:E5:D8:F4:53:F4:B0:22:CB:AC:81:49:DC
Certificate issuer:       /CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
Certificate serial:       525C2B8B8B73639683B4B1F963F89639A4CAE5D7
Authority key identifier: BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/323830343a376436303a3a2f33322d3336203d3e203230343733.roa
Signing time:             Sun 16 Apr 2023 15:08:03 +0000
ROA not before:           Sun 16 Apr 2023 15:03:03 +0000
ROA not after:            Sun 14 Apr 2024 15:08:03 +0000
asID:                     20473
IP address blocks:        2804:7d60::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5c:2b:8b:8b:73:63:96:83:b4:b1:f9:63:f8:96:39:a4:ca:e5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEDBAF5A2A83155974AEA6482B69592C8F88CC3
        Validity
            Not Before: Apr 16 15:03:03 2023 GMT
            Not After : Apr 14 15:08:03 2024 GMT
        Subject: CN=B066249F462C3C6FE5D8F453F4B022CBAC8149DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:17:5b:6b:68:97:9c:a6:70:29:4e:26:1d:
                    83:9b:86:09:07:0f:49:53:43:03:8a:f2:88:bd:80:
                    3d:9d:92:80:99:e6:12:24:6d:25:3f:1c:87:ea:4b:
                    45:a9:32:08:41:0b:1e:87:44:d1:c3:85:54:b2:67:
                    49:28:fa:21:d6:bb:b0:06:9a:67:f4:69:3c:a3:df:
                    80:ba:e1:16:75:b1:5d:ac:71:a2:9f:d3:46:fc:b5:
                    0b:00:e6:f8:96:f5:d3:31:0c:46:1a:8c:d4:11:20:
                    03:67:fa:4f:c2:cd:5d:89:56:03:8b:40:9d:be:25:
                    cd:91:9b:37:f5:d6:15:a1:08:8f:68:87:d6:e5:2f:
                    85:85:2b:ad:e7:fb:b4:81:a8:b1:12:92:95:d8:f7:
                    e5:e6:9a:d1:3c:cc:d2:b8:22:ef:94:2b:f2:c2:51:
                    5d:a3:22:2e:f0:4a:4e:4a:a3:89:16:b0:2f:52:61:
                    6f:84:2a:f9:cb:30:65:c3:a1:39:6a:5d:86:7f:b7:
                    0e:76:7f:37:fe:a7:da:b3:ec:04:13:c4:54:5f:56:
                    f2:4c:d7:44:98:2f:1c:46:18:33:2e:22:ac:84:0a:
                    87:59:b0:03:f5:be:05:d6:06:ca:c3:1f:7b:0f:cb:
                    00:3c:dc:de:57:1e:4c:bc:fb:43:a4:a5:04:e6:fa:
                    4e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:66:24:9F:46:2C:3C:6F:E5:D8:F4:53:F4:B0:22:CB:AC:81:49:DC
            X509v3 Authority Key Identifier:
                keyid:BD:ED:BA:F5:A2:A8:31:55:97:4A:EA:64:82:B6:95:92:C8:F8:8C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDEDBAF5A2A83155974AEA6482B69592C8F88CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/323830343a376436303a3a2f33322d3336203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:47:06:98:2d:96:40:85:ac:b9:0d:08:5a:a2:bc:7f:17:3d:
         b5:97:d6:33:43:9c:c1:0a:c1:d7:e4:b8:69:89:f4:56:9b:46:
         42:cf:24:be:20:9e:e7:cd:8d:1a:ba:a8:db:90:60:6e:4c:0c:
         9f:67:19:4b:a0:11:c7:01:d0:33:8b:5a:1f:8d:6d:b4:b1:0c:
         e1:a9:8b:91:a1:f8:a1:b5:49:3c:d6:ef:99:61:c0:47:03:b4:
         e6:ea:d0:e1:9b:b1:53:af:6d:20:15:b3:2c:6b:b3:9f:54:1d:
         72:80:bf:9b:86:32:f5:72:0a:99:45:8e:c5:ca:2e:01:1c:24:
         12:0f:8a:e6:a5:ce:c8:e8:21:1e:16:ee:7a:f4:0b:10:a2:84:
         07:1e:19:d1:4d:74:42:b4:d8:dc:f9:99:1f:c9:9f:b1:b7:b2:
         05:8b:c4:56:3e:70:a1:f9:1d:6f:be:98:49:57:e2:35:66:41:
         d6:5c:d0:02:50:d9:89:93:5f:48:a9:3c:de:18:e2:2d:61:2e:
         fa:aa:c2:37:02:e8:99:ee:de:b8:ad:4c:48:14:c8:c0:93:a1:
         c6:18:96:f8:4f:4e:c9:fc:3c:04:40:53:13:06:e0:08:2e:ba:
         73:22:11:30:8e:03:21:b4:43:e6:89:dd:3c:da:e9:19:ea:f7:
         5f:5b:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----