Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a393a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a393a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          97SrnzkpiR8+30wXAXRi3+C3j4tuuRtnZE45JfIr3+4=
Subject key identifier:   25:21:34:B4:06:30:56:8F:6E:C4:84:5F:08:2B:04:88:05:E9:63:A4
Certificate issuer:       /CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
Certificate serial:       58238AFB5A82BA7EB477A01997D97D7A3966A2CE
Authority key identifier: 64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a393a3a2f34382d3438203d3e203238323630.roa
Signing time:             Wed 09 Jun 2021 18:09:26 +0000
ROA not before:           Wed 09 Jun 2021 18:04:26 +0000
ROA not after:            Wed 08 Jun 2022 18:09:26 +0000
asID:                     28260
IP address blocks:        2804:28e4:9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:23:8a:fb:5a:82:ba:7e:b4:77:a0:19:97:d9:7d:7a:39:66:a2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6460F6675E35AF4E50A8915D0F531C431C6DA166
        Validity
            Not Before: Jun  9 18:04:26 2021 GMT
            Not After : Jun  8 18:09:26 2022 GMT
        Subject: CN=3082010A0282010100E54E3941A3B8DDCB7ECA0344FA2407257CE049875940B37E8C6FF3FB944F63B2163CDADE6CEC2ED931B0ABA9376952B6C796479E0D54BEDE2CE8CC0D675D3FC3893F21DE03590E04BFB33208244922F7A88837283509DCC2D20A85FF7B9B51DE3DFBCB6C6C37BE1EC6840D63E5F2F7469F7A65110457CC101DB787648E23E2DE04B8A9DAE91091A97EB9365ECFFC46A916E6E05DDC06A5E9C3F5A453CFF4549761B9897F8DEE6B38A42768EE2F1241ACE158C1DC8D2DB34504DE2915486919BFBB2050E10311893C623E1927632BFF1E8125AD90D19336CF9A2264751C73119CEEAA0BDBE8DE54F3BE2AF2531E7F2A9206F0FDBFCE3D3283E8A76BFB3B0F2DB30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4e:39:41:a3:b8:dd:cb:7e:ca:03:44:fa:24:
                    07:25:7c:e0:49:87:59:40:b3:7e:8c:6f:f3:fb:94:
                    4f:63:b2:16:3c:da:de:6c:ec:2e:d9:31:b0:ab:a9:
                    37:69:52:b6:c7:96:47:9e:0d:54:be:de:2c:e8:cc:
                    0d:67:5d:3f:c3:89:3f:21:de:03:59:0e:04:bf:b3:
                    32:08:24:49:22:f7:a8:88:37:28:35:09:dc:c2:d2:
                    0a:85:ff:7b:9b:51:de:3d:fb:cb:6c:6c:37:be:1e:
                    c6:84:0d:63:e5:f2:f7:46:9f:7a:65:11:04:57:cc:
                    10:1d:b7:87:64:8e:23:e2:de:04:b8:a9:da:e9:10:
                    91:a9:7e:b9:36:5e:cf:fc:46:a9:16:e6:e0:5d:dc:
                    06:a5:e9:c3:f5:a4:53:cf:f4:54:97:61:b9:89:7f:
                    8d:ee:6b:38:a4:27:68:ee:2f:12:41:ac:e1:58:c1:
                    dc:8d:2d:b3:45:04:de:29:15:48:69:19:bf:bb:20:
                    50:e1:03:11:89:3c:62:3e:19:27:63:2b:ff:1e:81:
                    25:ad:90:d1:93:36:cf:9a:22:64:75:1c:73:11:9c:
                    ee:aa:0b:db:e8:de:54:f3:be:2a:f2:53:1e:7f:2a:
                    92:06:f0:fd:bf:ce:3d:32:83:e8:a7:6b:fb:3b:0f:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:21:34:B4:06:30:56:8F:6E:C4:84:5F:08:2B:04:88:05:E9:63:A4
            X509v3 Authority Key Identifier:
                keyid:64:60:F6:67:5E:35:AF:4E:50:A8:91:5D:0F:53:1C:43:1C:6D:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6460F6675E35AF4E50A8915D0F531C431C6DA166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a393a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:d1:12:12:5e:eb:bb:08:59:56:e7:a9:fe:27:3e:c4:64:c2:
         48:bf:15:f6:4c:be:3f:07:6b:ed:96:94:4d:22:25:03:be:80:
         9a:be:a8:f2:18:30:31:b2:73:e2:ce:04:13:3a:d5:b7:29:ba:
         0a:0a:71:56:b8:ca:4c:fb:d9:e4:16:dc:55:27:5d:b7:52:b3:
         95:06:88:e3:dd:54:7b:73:9b:26:30:ab:ba:7c:79:c2:00:f2:
         d2:67:56:cc:45:6f:6c:5b:94:98:3a:48:5f:fb:78:16:f5:1e:
         15:c1:da:70:ef:a4:84:38:53:7a:4c:10:e3:a7:e8:9a:cd:31:
         f2:02:11:9e:ba:19:8e:cb:86:df:2b:51:74:85:bc:c9:8b:e2:
         6a:00:92:21:15:05:ee:44:df:e3:ac:e2:1e:bb:2d:75:e8:23:
         e7:94:f9:91:94:0e:59:e7:85:57:48:b6:5a:9b:96:fd:d0:cb:
         7f:73:bf:40:f3:2f:e5:f2:a3:76:6b:dc:5f:62:01:a5:2e:71:
         e6:2f:05:41:19:8f:c4:15:3e:47:e9:79:90:23:08:21:3f:f2:
         1f:96:1f:ba:03:c4:81:f7:f5:f9:37:46:bf:c9:46:41:6f:d2:
         ea:48:82:8e:62:7f:1c:1a:10:19:97:cc:15:8a:78:44:77:3d:
         85:e8:0f:94
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUWCOK+1qCun60d6AZl9l9ejlmos4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ2MEY2Njc1RTM1QUY0RTUwQTg5MTVEMEY1MzFDNDMx
QzZEQTE2NjAeFw0yMTA2MDkxODA0MjZaFw0yMjA2MDgxODA5MjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTU0RTM5NDFBM0I4RERDQjdF
Q0EwMzQ0RkEyNDA3MjU3Q0UwNDk4NzU5NDBCMzdFOEM2RkYzRkI5NDRGNjNCMjE2
M0NEQURFNkNFQzJFRDkzMUIwQUJBOTM3Njk1MkI2Qzc5NjQ3OUUwRDU0QkVERTJD
RThDQzBENjc1RDNGQzM4OTNGMjFERTAzNTkwRTA0QkZCMzMyMDgyNDQ5MjJGN0E4
ODgzNzI4MzUwOURDQzJEMjBBODVGRjdCOUI1MURFM0RGQkNCNkM2QzM3QkUxRUM2
ODQwRDYzRTVGMkY3NDY5RjdBNjUxMTA0NTdDQzEwMURCNzg3NjQ4RTIzRTJERTA0
QjhBOURBRTkxMDkxQTk3RUI5MzY1RUNGRkM0NkE5MTZFNkUwNUREQzA2QTVFOUMz
RjVBNDUzQ0ZGNDU0OTc2MUI5ODk3RjhERUU2QjM4QTQyNzY4RUUyRjEyNDFBQ0Ux
NThDMURDOEQyREIzNDUwNERFMjkxNTQ4NjkxOUJGQkIyMDUwRTEwMzExODkzQzYy
M0UxOTI3NjMyQkZGMUU4MTI1QUQ5MEQxOTMzNkNGOUEyMjY0NzUxQzczMTE5Q0VF
QUEwQkRCRThERTU0RjNCRTJBRjI1MzFFN0YyQTkyMDZGMEZEQkZDRTNEMzI4M0U4
QTc2QkZCM0IwRjJEQjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5U45QaO43ct+ygNE+iQHJXzgSYdZQLN+jG/z+5RPY7IWPNrebOwu
2TGwq6k3aVK2x5ZHng1Uvt4s6MwNZ10/w4k/Id4DWQ4Ev7MyCCRJIveoiDcoNQnc
wtIKhf97m1HePfvLbGw3vh7GhA1j5fL3Rp96ZREEV8wQHbeHZI4j4t4EuKna6RCR
qX65Nl7P/EapFubgXdwGpenD9aRTz/RUl2G5iX+N7ms4pCdo7i8SQazhWMHcjS2z
RQTeKRVIaRm/uyBQ4QMRiTxiPhknYyv/HoElrZDRkzbPmiJkdRxzEZzuqgvb6N5U
874q8lMefyqSBvD9v849MoPop2v7Ow8tswIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FCUhNLQGMFaPbsSEXwgrBIgF6WOkMB8GA1UdIwQYMBaAFGRg9mdeNa9OUKiRXQ9T
HEMcbaFmMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q4MWFpWHBEQXY1V0Jt
Z0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAvNjQ2MEY2Njc1RTM1QUY0
RTUwQTg5MTVEMEY1MzFDNDMxQzZEQTE2Ni5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82NDYwRjY2NzVFMzVBRjRFNTBBODkxNUQwRjUzMUM0MzFDNkRB
MTY2LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EODFhaVhwREF2NVdCbWdFOG9F
cGZvcmRqR1A2Mm90bjJmSHJoYUw0Y2dieS8wLzMyMzgzMDM0M2EzMjM4NjUzNDNh
MzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM4MzIzNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KAQo5AAJMA0GCSqGSIb3DQEBCwUAA4IBAQAs0RISXuu7CFlW56n+Jz7EZMJIvxX2
TL4/B2vtlpRNIiUDvoCavqjyGDAxsnPizgQTOtW3KboKCnFWuMpM+9nkFtxVJ123
UrOVBojj3VR7c5smMKu6fHnCAPLSZ1bMRW9sW5SYOkhf+3gW9R4Vwdpw76SEOFN6
TBDjp+iazTHyAhGeuhmOy4bfK1F0hbzJi+JqAJIhFQXuRN/jrOIeuy116CPnlPmR
lA5Z54VXSLZam5b90Mt/c79A8y/l8qN2a9xfYgGlLnHmLwVBGY/EFT5H6XmQIwgh
P/Iflh+6A8SB9/X5N0a/yUZBb9LqSIKOYn8cGhAZl8wVinhEdz2F6A+U
-----END CERTIFICATE-----