Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3230303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3230303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          KtF723fabZrL5p/F4nzyRXX5PHeMQ+XE+Nd+MCpK2Qk=
Subject key identifier:   57:C6:13:B0:6A:A7:6B:32:3E:CB:BC:63:94:B8:9E:3C:24:42:F3:ED
Certificate issuer:       /CN=81175370221E26181F39FB407E63064DEB20E6EE
Certificate serial:       70F5442A5DF734E20A24373A17BF75238E015DC5
Authority key identifier: 81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3230303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Thu 03 Aug 2023 19:00:00 +0000
ROA not before:           Thu 03 Aug 2023 18:55:00 +0000
ROA not after:            Thu 01 Aug 2024 19:00:00 +0000
asID:                     265187
IP address blocks:        2804:2c00:200::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f5:44:2a:5d:f7:34:e2:0a:24:37:3a:17:bf:75:23:8e:01:5d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81175370221E26181F39FB407E63064DEB20E6EE
        Validity
            Not Before: Aug  3 18:55:00 2023 GMT
            Not After : Aug  1 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:69:e7:c0:2a:b2:eb:8a:80:3a:97:41:f3:
                    48:4c:07:fa:b9:b5:3a:5b:0e:8e:f8:c3:62:ce:d5:
                    d3:59:68:7f:c2:cf:8f:77:d4:fd:d7:cf:f7:6b:2a:
                    8e:07:94:43:e5:23:98:62:a2:df:85:14:b1:51:e9:
                    24:65:4c:2c:0f:84:d4:d7:44:7e:69:a1:77:67:6a:
                    c6:38:5b:82:58:b8:d9:da:62:03:44:0c:70:e3:b0:
                    cf:c8:36:2e:66:1d:12:ab:e8:89:ad:1f:23:88:01:
                    77:44:c6:29:84:c7:33:d5:af:b5:2f:d6:a7:1f:c7:
                    36:f2:56:e3:18:95:0a:15:d1:6b:4e:dd:f8:6e:3a:
                    fe:39:22:3d:4b:53:4a:77:2b:eb:b6:27:13:62:0a:
                    c7:3f:99:d9:2f:59:ef:6d:07:a8:58:16:eb:1e:90:
                    05:ed:59:31:62:1e:cb:5e:02:42:42:b6:7a:02:0c:
                    4b:a3:60:53:d8:d5:74:1c:16:0e:23:91:ea:3c:c0:
                    de:ac:c3:f7:dd:77:2d:b1:90:2d:2c:0e:76:8d:ee:
                    95:dd:f6:65:f7:04:b8:73:be:2d:0d:04:19:77:e8:
                    f5:66:78:5e:f4:c0:ad:6a:16:ae:d8:c1:4a:2d:c5:
                    16:be:9d:c4:bf:05:b8:52:f5:56:72:4f:36:22:85:
                    83:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C6:13:B0:6A:A7:6B:32:3E:CB:BC:63:94:B8:9E:3C:24:42:F3:ED
            X509v3 Authority Key Identifier:
                keyid:81:17:53:70:22:1E:26:18:1F:39:FB:40:7E:63:06:4D:EB:20:E6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/81175370221E26181F39FB407E63064DEB20E6EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81175370221E26181F39FB407E63064DEB20E6EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3230303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:200::/42

    Signature Algorithm: sha256WithRSAEncryption
         bf:5e:6f:e7:82:1f:7b:e7:b2:62:65:e6:b8:5e:d5:eb:e5:57:
         d3:b6:c0:16:aa:ec:18:47:c1:54:e0:84:ec:04:2f:7f:5e:43:
         b7:64:6c:1e:c8:ed:83:04:3a:fe:9e:8b:e8:51:44:61:c0:ee:
         3e:08:8d:09:05:da:31:bd:88:e2:f6:d3:0a:39:ba:3a:74:51:
         51:58:f5:6a:2c:cc:18:6f:bc:4e:64:a8:6c:0e:13:0e:11:23:
         7b:e8:2a:a0:e6:4c:60:06:fc:93:5b:50:0c:7d:16:89:1a:a3:
         0a:14:71:25:36:f1:07:f0:8a:33:2d:8f:93:d6:da:bc:bf:c2:
         29:d8:ec:34:ab:97:69:e2:b6:a4:c9:9c:60:47:95:e1:ce:cd:
         62:d9:72:20:91:75:07:97:67:2f:b2:6e:e7:de:62:71:f3:56:
         19:34:c2:60:b5:25:e5:da:34:cd:65:42:83:25:98:e7:51:18:
         dc:50:64:03:92:02:3a:6d:16:0d:c9:7a:33:2a:5d:14:b2:d6:
         89:3b:ee:87:e9:8c:4e:73:8d:1a:de:cc:12:e2:b3:f5:66:8e:
         20:13:3a:8b:35:52:4a:13:a4:3e:23:3a:67:48:a4:b1:2f:f9:
         14:02:73:47:f7:e7:8e:e7:23:62:1e:1f:11:30:f3:2e:18:b3:
         9e:5d:c2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----