Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a3430323a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a3430323a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          IxKxF+LKV/9JFeNauXC8DMWuhWEzAehABiYmk7VLkxY=
Subject key identifier:   14:C2:8D:B5:C1:6E:D3:7C:E5:C9:7B:0A:AE:48:A6:31:8B:BD:55:E3
Certificate issuer:       /CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
Certificate serial:       1D11F0B2E6AA34EE728DCB6DF22E7C9F04D3FBEC
Authority key identifier: 64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a3430323a3a2f34382d3438203d3e203238323630.roa
Signing time:             Wed 09 Jun 2021 18:09:27 +0000
ROA not before:           Wed 09 Jun 2021 18:04:27 +0000
ROA not after:            Wed 08 Jun 2022 18:09:27 +0000
asID:                     28260
IP address blocks:        2804:28e4:402::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:11:f0:b2:e6:aa:34:ee:72:8d:cb:6d:f2:2e:7c:9f:04:d3:fb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
        Validity
            Not Before: Jun  9 18:04:27 2021 GMT
            Not After : Jun  8 18:09:27 2022 GMT
        Subject: CN=3082010A0282010100AD7E804188A961292B64AD3F961F107D7BA6815A1BCA308E640B7A28946628D21587DACB19F81B9718214E16E6120B765E9663B78AA5494C3252A3FF035E84814A64B4AFBF99B1C8B0318FF6F5694A474802F0D6ADEDFB68033488305F04675161B45793E34D60A03578CD88D3A13ACFAAE1EE4AC8F6264B49EB85FD73F9B8BC6F5B98F623100C3D4AB313C81B3530A7122E273ECB46D19EE0E1A9081B2DAADFA395A83C4F1F2D2213BA73A6F08C49318ECBE353815D635F1B09E8A5C06E649E858F672BA9B4A639B72C313B9829B8F5AB90C98266692C9F3308A84586B7DAC15030379658FB441D532ADFAA58FB5ECE056057A1AD3C8010A4DF43635BDCE6A70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:80:41:88:a9:61:29:2b:64:ad:3f:96:1f:
                    10:7d:7b:a6:81:5a:1b:ca:30:8e:64:0b:7a:28:94:
                    66:28:d2:15:87:da:cb:19:f8:1b:97:18:21:4e:16:
                    e6:12:0b:76:5e:96:63:b7:8a:a5:49:4c:32:52:a3:
                    ff:03:5e:84:81:4a:64:b4:af:bf:99:b1:c8:b0:31:
                    8f:f6:f5:69:4a:47:48:02:f0:d6:ad:ed:fb:68:03:
                    34:88:30:5f:04:67:51:61:b4:57:93:e3:4d:60:a0:
                    35:78:cd:88:d3:a1:3a:cf:aa:e1:ee:4a:c8:f6:26:
                    4b:49:eb:85:fd:73:f9:b8:bc:6f:5b:98:f6:23:10:
                    0c:3d:4a:b3:13:c8:1b:35:30:a7:12:2e:27:3e:cb:
                    46:d1:9e:e0:e1:a9:08:1b:2d:aa:df:a3:95:a8:3c:
                    4f:1f:2d:22:13:ba:73:a6:f0:8c:49:31:8e:cb:e3:
                    53:81:5d:63:5f:1b:09:e8:a5:c0:6e:64:9e:85:8f:
                    67:2b:a9:b4:a6:39:b7:2c:31:3b:98:29:b8:f5:ab:
                    90:c9:82:66:69:2c:9f:33:08:a8:45:86:b7:da:c1:
                    50:30:37:96:58:fb:44:1d:53:2a:df:aa:58:fb:5e:
                    ce:05:60:57:a1:ad:3c:80:10:a4:df:43:63:5b:dc:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C2:8D:B5:C1:6E:D3:7C:E5:C9:7B:0A:AE:48:A6:31:8B:BD:55:E3
            X509v3 Authority Key Identifier:
                keyid:64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a3430323a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:402::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:40:be:6c:27:1b:15:9d:f3:dd:54:7d:ca:a8:ab:30:e8:33:
         1c:12:4b:5f:d6:7f:36:e2:31:b3:1b:97:48:5b:cc:f4:5f:de:
         ef:5a:ca:af:ae:ee:ec:ce:20:06:22:4a:1c:6e:19:6d:de:96:
         5a:a6:63:c2:d0:b5:b3:b3:e7:c4:4a:62:ab:73:af:72:31:73:
         6f:d4:06:5d:fa:bf:bb:af:92:de:b5:5c:fe:bb:c2:60:3a:0e:
         dc:0f:5e:f9:e2:66:3d:a4:77:03:27:5d:2d:66:21:22:a0:60:
         be:30:f4:1f:d8:ef:b1:35:9d:75:85:f2:3e:90:a4:19:8e:b7:
         56:48:c3:f3:ee:c2:42:9d:f7:ce:30:71:aa:cd:ac:9c:a5:ae:
         92:bf:83:62:3f:c3:d0:0a:19:cb:8b:dc:a7:76:dd:f2:37:1a:
         cc:e8:9a:97:9a:b2:c1:54:69:59:97:fb:e8:e0:6f:20:e4:9d:
         64:9a:79:26:ab:9d:2b:a1:3d:c2:5d:42:a4:2b:9e:62:02:ef:
         bb:0d:18:68:36:fa:ef:d6:7d:90:8e:2f:28:26:92:2a:4f:e2:
         ab:5b:da:ed:9b:bd:51:85:fc:6f:60:83:4a:58:f6:fa:e6:f1:
         7c:2b:35:7e:d1:dc:39:7c:c3:18:2e:dc:f2:7f:f3:f9:12:4e:
         69:21:a5:8d
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUHRHwsuaqNO5yjctt8i58nwTT++wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ2MEY2Njc1RTM1QUY0RTUwQTg5MTVEMEY1MzFDNDMx
QzZEQTE2NjAeFw0yMTA2MDkxODA0MjdaFw0yMjA2MDgxODA5MjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUQ3RTgwNDE4OEE5NjEyOTJC
NjRBRDNGOTYxRjEwN0Q3QkE2ODE1QTFCQ0EzMDhFNjQwQjdBMjg5NDY2MjhEMjE1
ODdEQUNCMTlGODFCOTcxODIxNEUxNkU2MTIwQjc2NUU5NjYzQjc4QUE1NDk0QzMy
NTJBM0ZGMDM1RTg0ODE0QTY0QjRBRkJGOTlCMUM4QjAzMThGRjZGNTY5NEE0NzQ4
MDJGMEQ2QURFREZCNjgwMzM0ODgzMDVGMDQ2NzUxNjFCNDU3OTNFMzRENjBBMDM1
NzhDRDg4RDNBMTNBQ0ZBQUUxRUU0QUM4RjYyNjRCNDlFQjg1RkQ3M0Y5QjhCQzZG
NUI5OEY2MjMxMDBDM0Q0QUIzMTNDODFCMzUzMEE3MTIyRTI3M0VDQjQ2RDE5RUUw
RTFBOTA4MUIyREFBREZBMzk1QTgzQzRGMUYyRDIyMTNCQTczQTZGMDhDNDkzMThF
Q0JFMzUzODE1RDYzNUYxQjA5RThBNUMwNkU2NDlFODU4RjY3MkJBOUI0QTYzOUI3
MkMzMTNCOTgyOUI4RjVBQjkwQzk4MjY2NjkyQzlGMzMwOEE4NDU4NkI3REFDMTUw
MzAzNzk2NThGQjQ0MUQ1MzJBREZBQTU4RkI1RUNFMDU2MDU3QTFBRDNDODAxMEE0
REY0MzYzNUJEQ0U2QTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArX6AQYipYSkrZK0/lh8QfXumgVobyjCOZAt6KJRmKNIVh9rLGfgb
lxghThbmEgt2XpZjt4qlSUwyUqP/A16EgUpktK+/mbHIsDGP9vVpSkdIAvDWre37
aAM0iDBfBGdRYbRXk+NNYKA1eM2I06E6z6rh7krI9iZLSeuF/XP5uLxvW5j2IxAM
PUqzE8gbNTCnEi4nPstG0Z7g4akIGy2q36OVqDxPHy0iE7pzpvCMSTGOy+NTgV1j
XxsJ6KXAbmSehY9nK6m0pjm3LDE7mCm49auQyYJmaSyfMwioRYa32sFQMDeWWPtE
HVMq36pY+17OBWBXoa08gBCk30NjW9zmpwIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FBTCjbXBbtN85cl7Cq5IpjGLvVXjMB8GA1UdIwQYMBaAFGRg9mdeNa9OUKiRXQ9T
HEMcbaFmMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q4MWFpWHBEQXY1V0Jt
Z0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAvNjQ2MEY2Njc1RTM1QUY0
RTUwQTg5MTVEMEY1MzFDNDMxQzZEQTE2Ni5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82NDYwRjY2NzVFMzVBRjRFNTBBODkxNUQwRjUzMUM0MzFDNkRB
MTY2LmNlcjCBsgYIKwYBBQUHAQsEgaUwgaIwgZ8GCCsGAQUFBzALhoGScnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EODFhaVhwREF2NVdCbWdFOG9F
cGZvcmRqR1A2Mm90bjJmSHJoYUw0Y2dieS8wLzMyMzgzMDM0M2EzMjM4NjUzNDNh
MzQzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzODMyMzYzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACgEKOQEAjANBgkqhkiG9w0BAQsFAAOCAQEAEkC+bCcbFZ3z3VR9yqirMOgz
HBJLX9Z/NuIxsxuXSFvM9F/e71rKr67u7M4gBiJKHG4Zbd6WWqZjwtC1s7PnxEpi
q3OvcjFzb9QGXfq/u6+S3rVc/rvCYDoO3A9e+eJmPaR3AyddLWYhIqBgvjD0H9jv
sTWddYXyPpCkGY63VkjD8+7CQp33zjBxqs2snKWukr+DYj/D0AoZy4vcp3bd8jca
zOial5qywVRpWZf76OBvIOSdZJp5JqudK6E9wl1CpCueYgLvuw0YaDb679Z9kI4v
KCaSKk/iq1va7Zu9UYX8b2CDSlj2+ubxfCs1ftHcOXzDGC7c8n/z+RJOaSGljQ==
-----END CERTIFICATE-----