Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a3a2f33322d3438203d3e20323731353434.roa
File:                     323830343a376432633a3a2f33322d3438203d3e20323731353434.roa (raw, json)
Hash identifier:          E+5mzHXuxDtCx1bkgE/q4WSaMc3tgqJjM/0fjzlZei8=
Subject key identifier:   F1:90:1C:00:1F:AD:00:62:EA:B9:07:92:F8:E0:00:FB:34:F9:11:51
Certificate issuer:       /CN=75FF9F079D027027B54F0E35F3E479A6194FBD66
Certificate serial:       7EF94E9F948C60254C14EE070AF830A6453BBD48
Authority key identifier: 75:FF:9F:07:9D:02:70:27:B5:4F:0E:35:F3:E4:79:A6:19:4F:BD:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75FF9F079D027027B54F0E35F3E479A6194FBD66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a3a2f33322d3438203d3e20323731353434.roa
Signing time:             Thu 15 Dec 2022 17:57:11 +0000
ROA not before:           Thu 15 Dec 2022 17:52:11 +0000
ROA not after:            Thu 14 Dec 2023 17:57:11 +0000
asID:                     271544
IP address blocks:        2804:7d2c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f9:4e:9f:94:8c:60:25:4c:14:ee:07:0a:f8:30:a6:45:3b:bd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75FF9F079D027027B54F0E35F3E479A6194FBD66
        Validity
            Not Before: Dec 15 17:52:11 2022 GMT
            Not After : Dec 14 17:57:11 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:59:02:37:ee:d4:fb:aa:b0:ca:e8:38:50:8f:
                    3f:67:19:7c:65:c8:60:21:72:3e:d0:bc:00:3b:37:
                    98:5e:d0:04:d1:1c:b6:fb:7f:e0:1f:a0:80:e9:78:
                    f5:15:14:62:07:16:21:5d:18:89:b3:ea:2e:5e:10:
                    ee:0d:b5:9c:ea:2f:76:5a:c4:b9:5a:de:8f:11:ce:
                    13:1c:60:0a:1b:c6:9e:7b:42:ad:71:e0:d3:f5:7c:
                    c8:6b:47:b8:c9:8d:0f:73:6e:32:42:bb:3c:c6:3b:
                    87:df:bc:04:a9:51:42:d8:96:09:a2:9f:0b:9a:f9:
                    86:5f:9c:8d:5c:7f:1d:21:dd:b2:79:39:c1:c2:72:
                    2c:08:9d:13:39:f5:ba:52:b4:7f:0a:e1:05:18:95:
                    cf:f0:93:06:a2:8b:73:06:87:fa:b8:86:4c:d3:32:
                    08:bb:92:fa:ab:fa:c3:0d:30:23:75:71:55:08:11:
                    18:f6:14:5a:a8:6c:41:da:1d:ab:59:ef:d9:57:b2:
                    05:78:22:8e:f5:56:5e:f9:b1:3c:4f:43:f3:cd:9e:
                    ea:ce:0f:b3:ac:27:56:71:fc:62:3b:2a:89:31:22:
                    8b:24:ad:34:47:bd:c2:02:2d:2d:f2:2e:c1:50:9f:
                    05:76:a3:41:15:24:81:47:6b:cc:0f:e2:6f:39:b6:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:90:1C:00:1F:AD:00:62:EA:B9:07:92:F8:E0:00:FB:34:F9:11:51
            X509v3 Authority Key Identifier:
                keyid:75:FF:9F:07:9D:02:70:27:B5:4F:0E:35:F3:E4:79:A6:19:4F:BD:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/75FF9F079D027027B54F0E35F3E479A6194FBD66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75FF9F079D027027B54F0E35F3E479A6194FBD66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a3a2f33322d3438203d3e20323731353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:65:ff:d0:bb:96:84:bd:b6:04:1a:b6:2a:2f:37:3c:27:3f:
         8d:38:98:e9:12:09:b1:8d:70:81:05:f4:84:b1:ae:a7:03:b2:
         bc:9b:a5:92:21:f4:4a:24:ae:15:9e:e4:76:a6:6a:91:f3:1b:
         f0:13:af:db:a4:4f:9e:02:ff:69:9e:f9:cc:99:c4:e0:69:d1:
         46:45:29:53:2d:61:b7:43:86:0f:f7:c3:35:88:c2:cd:f9:4a:
         18:8a:76:35:dd:a1:9c:ef:75:c0:be:2a:2d:ac:33:39:c2:25:
         e0:35:10:9f:e8:dc:26:fc:04:10:ac:84:b3:04:d8:36:d6:f9:
         0c:12:7f:2e:9b:05:63:45:aa:c1:77:41:d5:29:d9:71:9b:25:
         d6:6c:6d:3f:bd:09:37:c2:a2:8e:f5:5b:08:9e:0e:82:80:cd:
         03:e8:fd:36:fe:25:33:08:89:51:26:a8:03:fb:8f:37:8e:94:
         47:47:8f:0d:48:99:7f:44:b6:21:b6:1d:e0:54:01:de:92:68:
         de:9e:39:27:a4:b2:3f:50:cf:19:08:d1:c8:2f:85:da:47:2f:
         7e:36:6e:db:72:38:29:cd:92:5d:a3:7e:33:fa:1e:57:c2:26:
         11:fe:0f:df:b0:22:30:58:d7:62:15:f8:7e:78:16:30:ac:07:
         86:a4:ce:e2
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUfvlOn5SMYCVMFO4HCvgwpkU7vUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVGRjlGMDc5RDAyNzAyN0I1NEYwRTM1RjNFNDc5QTYx
OTRGQkQ2NjAeFw0yMjEyMTUxNzUyMTFaFw0yMzEyMTQxNzU3MTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjY1OTAyMzdFRUQ0RkJBQUIw
Q0FFODM4NTA4RjNGNjcxOTdDNjVDODYwMjE3MjNFRDBCQzAwM0IzNzk4NUVEMDA0
RDExQ0I2RkI3RkUwMUZBMDgwRTk3OEY1MTUxNDYyMDcxNjIxNUQxODg5QjNFQTJF
NUUxMEVFMERCNTlDRUEyRjc2NUFDNEI5NUFERThGMTFDRTEzMUM2MDBBMUJDNjlF
N0I0MkFENzFFMEQzRjU3Q0M4NkI0N0I4Qzk4RDBGNzM2RTMyNDJCQjNDQzYzQjg3
REZCQzA0QTk1MTQyRDg5NjA5QTI5RjBCOUFGOTg2NUY5QzhENUM3RjFEMjFEREIy
NzkzOUMxQzI3MjJDMDg5RDEzMzlGNUJBNTJCNDdGMEFFMTA1MTg5NUNGRjA5MzA2
QTI4QjczMDY4N0ZBQjg4NjRDRDMzMjA4QkI5MkZBQUJGQUMzMEQzMDIzNzU3MTU1
MDgxMTE4RjYxNDVBQTg2QzQxREExREFCNTlFRkQ5NTdCMjA1NzgyMjhFRjU1NjVF
RjlCMTNDNEY0M0YzQ0Q5RUVBQ0UwRkIzQUMyNzU2NzFGQzYyM0IyQTg5MzEyMjhC
MjRBRDM0NDdCREMyMDIyRDJERjIyRUMxNTA5RjA1NzZBMzQxMTUyNDgxNDc2QkND
MEZFMjZGMzlCNkYwREQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtlkCN+7U+6qwyug4UI8/Zxl8ZchgIXI+0LwAOzeYXtAE0Ry2+3/g
H6CA6Xj1FRRiBxYhXRiJs+ouXhDuDbWc6i92WsS5Wt6PEc4THGAKG8aee0KtceDT
9XzIa0e4yY0Pc24yQrs8xjuH37wEqVFC2JYJop8LmvmGX5yNXH8dId2yeTnBwnIs
CJ0TOfW6UrR/CuEFGJXP8JMGootzBof6uIZM0zIIu5L6q/rDDTAjdXFVCBEY9hRa
qGxB2h2rWe/ZV7IFeCKO9VZe+bE8T0PzzZ7qzg+zrCdWcfxiOyqJMSKLJK00R73C
Ai0t8i7BUJ8FdqNBFSSBR2vMD+JvObbw3QIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FPGQHAAfrQBi6rkHkvjgAPs0+RFRMB8GA1UdIwQYMBaAFHX/nwedAnAntU8ONfPk
eaYZT71mMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y5SkJEbTFoR05IVEVT
MmRSaHhiM2F5a05rWU13Rkpjc3JRMUI5YnYxZjZKLzAvNzVGRjlGMDc5RDAyNzAy
N0I1NEYwRTM1RjNFNDc5QTYxOTRGQkQ2Ni5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NUZGOUYwNzlEMDI3MDI3QjU0RjBFMzVGM0U0NzlBNjE5NEZC
RDY2LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GOUpCRG0xaEdOSFRFUzJkUmh4
YjNheWtOa1lNd0ZKY3NyUTFCOWJ2MWY2Si8wLzMyMzgzMDM0M2EzNzY0MzI2MzNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMTM1MzQzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
fSwwDQYJKoZIhvcNAQELBQADggEBACZl/9C7loS9tgQatiovNzwnP404mOkSCbGN
cIEF9ISxrqcDsrybpZIh9EokrhWe5HamapHzG/ATr9ukT54C/2me+cyZxOBp0UZF
KVMtYbdDhg/3wzWIws35ShiKdjXdoZzvdcC+Ki2sMznCJeA1EJ/o3Cb8BBCshLME
2DbW+QwSfy6bBWNFqsF3QdUp2XGbJdZsbT+9CTfCoo71WwieDoKAzQPo/Tb+JTMI
iVEmqAP7jzeOlEdHjw1ImX9EtiG2HeBUAd6SaN6eOSeksj9QzxkI0cgvhdpHL342
bttyOCnNkl2jfjP6HlfCJhH+D9+wIjBY12IV+H54FjCsB4akzuI=
-----END CERTIFICATE-----