Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a34663a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a34663a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          zkufN6rNDLc8500T0Y4s4JtIMd93yWteQ/4bH8o5cyU=
Subject key identifier:   5B:38:B4:A4:36:CA:7B:00:2C:23:58:17:4A:39:59:69:D5:B2:54:11
Certificate issuer:       /CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
Certificate serial:       34673BC37E5647E3EFC5E84139B61E5569ED6F22
Authority key identifier: 64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a34663a3a2f34382d3438203d3e203238323630.roa
Signing time:             Wed 09 Jun 2021 18:09:26 +0000
ROA not before:           Wed 09 Jun 2021 18:04:26 +0000
ROA not after:            Wed 08 Jun 2022 18:09:26 +0000
asID:                     28260
IP address blocks:        2804:28e4:4f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:67:3b:c3:7e:56:47:e3:ef:c5:e8:41:39:b6:1e:55:69:ed:6f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
        Validity
            Not Before: Jun  9 18:04:26 2021 GMT
            Not After : Jun  8 18:09:26 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:e7:34:f4:41:22:b8:96:9b:95:a0:85:64:
                    4c:bc:94:37:a3:23:8c:f3:ab:73:96:47:87:d1:18:
                    31:5a:fd:02:5f:7d:d5:7f:4c:5c:4b:06:a2:92:d5:
                    28:41:32:2b:95:2d:5f:bc:18:c9:73:15:d8:45:da:
                    d3:19:4f:c2:24:a6:38:16:44:21:c3:df:8e:a1:40:
                    92:11:ee:f7:2d:a0:fd:3c:ec:44:d1:1b:be:f4:89:
                    49:dc:47:6b:ce:e7:cb:23:36:b4:28:dd:1a:56:a4:
                    ed:07:89:d7:30:88:05:22:83:c4:51:55:34:f0:2a:
                    17:e8:50:b2:e2:0b:40:e7:0b:2d:5b:fd:48:6a:26:
                    86:7e:3a:ae:b6:83:5a:cb:25:78:7b:23:d9:33:7a:
                    5b:ba:70:cf:55:14:4c:7d:d6:0d:21:c8:e8:0b:88:
                    d3:db:b6:3a:a6:4b:e9:bb:33:d8:69:b2:1f:5f:d8:
                    14:fc:c6:1e:ec:96:ad:1e:ca:3a:89:c0:d6:65:47:
                    c2:cf:5a:cb:8b:ae:f2:23:62:9a:36:6e:5a:80:60:
                    65:be:2b:50:e2:03:d9:da:c8:e3:0f:24:0b:da:6b:
                    8c:9c:2c:ac:01:f3:fc:7a:78:41:ff:b6:9c:48:e5:
                    6d:66:10:30:72:1f:a2:11:df:4e:44:3d:ba:44:ca:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:38:B4:A4:36:CA:7B:00:2C:23:58:17:4A:39:59:69:D5:B2:54:11
            X509v3 Authority Key Identifier:
                keyid:64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a34663a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:4f::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:7e:84:af:7c:a2:ab:3d:60:53:38:5c:e4:13:97:95:32:13:
         90:90:35:99:03:9d:4d:41:c1:82:bd:17:41:15:96:91:ae:1c:
         26:80:e1:38:e6:e2:a3:a6:f9:83:9d:9b:06:53:6f:ad:e5:a2:
         2a:86:d0:15:95:50:c2:ef:92:45:94:bb:1b:f5:f8:3e:de:7d:
         19:40:12:b8:7b:70:59:28:f5:41:c0:54:0a:94:9d:71:e3:1d:
         53:ec:fe:ad:53:29:5a:95:e4:37:7e:8c:fa:97:35:f7:01:26:
         e7:da:d8:8b:63:1a:c6:d7:0e:66:cc:b4:5a:9f:ae:82:58:29:
         30:d4:32:98:e1:a9:e7:70:f5:98:39:6e:92:06:59:92:73:e2:
         ae:4d:a0:32:27:2e:68:4e:e2:bf:e6:57:1d:d1:58:45:c9:3b:
         6f:92:11:6a:16:e4:3c:0c:f7:ea:00:7b:79:38:d9:b5:9d:2d:
         29:ed:fa:a5:8d:92:2a:df:63:08:aa:92:70:33:6b:e8:2a:a3:
         52:c3:4d:b6:7e:00:be:02:b4:f4:61:7d:32:64:d7:4a:b4:13:
         bd:6e:dd:a4:d0:83:13:84:f6:cc:28:f9:d0:45:34:8e:21:7d:
         47:20:ff:c0:bc:4e:f8:2f:f8:3f:e9:91:30:97:9c:75:44:51:
         d8:32:94:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----