Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323830343a3632303a3a2f33322d3332203d3e203533303036.roa
File:                     323830343a3632303a3a2f33322d3332203d3e203533303036.roa (raw, json)
Hash identifier:          +F5BEeML2xklQWIEqEx7f13XOWSIh8C2qFoyCeXRFo4=
Subject key identifier:   F4:D4:7F:2B:BE:66:60:75:A9:AE:75:B3:52:E0:94:A8:EE:60:57:D9
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       591FCC40D725715983629904711B25D1F94588D9
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323830343a3632303a3a2f33322d3332203d3e203533303036.roa
Signing time:             Sat 11 Dec 2021 18:09:31 +0000
ROA not before:           Sat 11 Dec 2021 18:04:31 +0000
ROA not after:            Sat 10 Dec 2022 18:09:31 +0000
asID:                     53006
IP address blocks:        2804:620::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1f:cc:40:d7:25:71:59:83:62:99:04:71:1b:25:d1:f9:45:88:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:04:31 2021 GMT
            Not After : Dec 10 18:09:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f7:f1:be:a7:7f:f8:30:23:05:05:3b:4d:3f:
                    6d:e5:5b:71:c0:a6:eb:55:03:98:b4:d7:a1:c4:89:
                    70:e8:ae:84:79:1b:70:8f:c7:ea:a1:8d:e7:cf:1a:
                    75:0a:ae:e7:2e:da:a6:fb:0d:d7:c1:88:20:20:e8:
                    fd:55:aa:ef:57:96:ea:90:49:17:d3:71:ba:b8:49:
                    30:9c:7b:e6:c0:e9:89:dc:a0:64:65:1e:13:33:24:
                    30:ef:c7:6a:c0:d5:0c:01:d9:35:fc:1a:ea:3d:26:
                    fa:14:79:8f:4c:3b:be:c7:87:37:73:18:c1:07:b6:
                    b3:cb:04:a1:8a:35:19:b0:8d:15:4e:89:38:6b:21:
                    16:d8:fe:58:46:9d:42:13:23:a1:3d:43:5e:0c:e1:
                    51:ee:d8:7e:33:26:c5:0b:0f:3c:aa:18:81:c7:c1:
                    b7:19:a9:90:af:79:89:c6:00:81:1c:3f:01:f4:d1:
                    93:7a:b5:d6:6d:97:a0:de:9c:e5:82:85:11:b7:1e:
                    06:97:68:a1:3e:2b:d5:63:ee:dd:6f:e3:5b:5e:7a:
                    69:23:05:99:7e:26:fc:9f:25:14:55:d8:4f:97:18:
                    05:4e:d9:5f:bf:0c:21:f2:a9:9f:03:41:7b:21:11:
                    00:21:26:c0:36:5f:6e:23:14:9a:16:1b:36:5d:38:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D4:7F:2B:BE:66:60:75:A9:AE:75:B3:52:E0:94:A8:EE:60:57:D9
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323830343a3632303a3a2f33322d3332203d3e203533303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:620::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:6f:51:c0:29:28:8d:82:96:95:ab:30:b7:ca:4d:b8:06:78:
         7d:08:ce:02:62:70:b1:b3:a4:84:af:27:d7:4e:9c:33:cd:f0:
         8f:17:b5:de:20:9b:02:2d:3c:7d:70:7c:3f:54:5b:3b:1d:8d:
         e5:00:60:f7:95:68:b5:ee:6f:7c:e3:ba:45:be:8a:e6:da:e1:
         e9:1e:a0:2f:75:94:44:fa:5e:8b:9b:95:fc:56:c1:d6:b6:c5:
         bf:48:a3:59:67:d7:cd:4c:5e:7c:90:d5:df:f7:8d:ab:0e:75:
         ef:f5:57:d4:11:ea:e4:9d:fa:04:51:c8:2c:8e:b6:ea:1f:6e:
         b3:b1:fb:38:8b:5d:20:ff:68:dc:4e:e1:0a:3d:5c:ff:15:fb:
         06:ec:69:3e:c2:65:bd:56:b9:80:a8:dd:51:84:17:ed:65:83:
         c0:bb:b9:84:55:66:47:90:5d:fe:7a:58:4e:ad:93:92:08:8e:
         24:c8:cf:f4:c2:00:0e:74:d4:e6:21:04:be:59:7b:b8:ea:78:
         bf:43:11:98:38:e4:c6:7c:77:87:3a:45:e8:02:2b:59:b7:86:
         32:25:ab:9d:0a:39:ae:71:94:e3:21:08:4d:96:52:bb:83:41:
         2d:d3:c8:45:50:04:1c:5c:7e:0f:43:19:3b:d3:23:91:a7:0c:
         a9:a0:50:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----