Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323830343a3830383a3a2f33322d3332203d3e203136373335.roa
File:                     323830343a3830383a3a2f33322d3332203d3e203136373335.roa (raw, json)
Hash identifier:          HAmeoeBCsE3bz9XqxHcmMB7avb6iJ/9qI0836joqWtk=
Subject key identifier:   F3:AF:06:6F:8D:0C:61:82:55:D5:A9:2B:6E:58:42:AD:AC:9B:0F:91
Certificate issuer:       /CN=B47D107EFD0532BC4E23E667ABA118817A663654
Certificate serial:       40B02CF7CBF19C497D440BDECAD1E08D0FB36F75
Authority key identifier: B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323830343a3830383a3a2f33322d3332203d3e203136373335.roa
Signing time:             Sat 11 Dec 2021 18:08:58 +0000
ROA not before:           Sat 11 Dec 2021 18:03:58 +0000
ROA not after:            Sat 10 Dec 2022 18:08:58 +0000
asID:                     16735
IP address blocks:        2804:808::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b0:2c:f7:cb:f1:9c:49:7d:44:0b:de:ca:d1:e0:8d:0f:b3:6f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47D107EFD0532BC4E23E667ABA118817A663654
        Validity
            Not Before: Dec 11 18:03:58 2021 GMT
            Not After : Dec 10 18:08:58 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:6c:8f:ab:a2:86:a7:26:3c:f2:ea:4f:6b:
                    e9:4f:5e:20:26:28:3a:e8:19:b2:38:82:85:38:42:
                    86:53:2e:b9:0d:fc:83:e6:33:76:f9:41:65:ab:d4:
                    04:49:bb:2a:07:db:c2:a7:ca:20:ca:78:59:c2:32:
                    0c:54:02:2b:13:9c:a9:20:24:5f:e6:6c:f9:e1:6b:
                    e1:3a:45:b2:a6:64:7e:be:4c:f2:18:ab:61:66:f8:
                    a4:a1:e9:25:81:1f:96:02:8f:f6:2f:00:53:af:39:
                    ec:23:ff:de:58:7b:c8:65:07:73:1d:80:0f:63:2d:
                    59:fe:24:ed:e0:b9:43:67:f8:e6:fe:e8:61:37:62:
                    c0:be:dd:e8:9c:80:dc:e4:4d:50:60:cb:c4:6f:92:
                    62:87:66:32:c7:a9:dc:c7:9e:88:ac:a8:e0:ad:92:
                    17:7c:7b:68:87:19:15:97:19:69:89:cc:4c:7c:54:
                    41:44:44:5a:6d:60:e0:36:30:f8:66:8e:1e:a2:69:
                    92:dd:18:c5:8d:72:62:00:84:81:52:8b:fc:f7:40:
                    c8:6c:8f:44:f6:e3:b8:c5:57:7a:1b:45:b6:d1:b5:
                    88:76:f1:42:c9:d6:fd:db:98:7f:52:9f:b9:1d:12:
                    0b:50:51:9f:12:87:7f:db:74:09:71:4a:8e:49:be:
                    60:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AF:06:6F:8D:0C:61:82:55:D5:A9:2B:6E:58:42:AD:AC:9B:0F:91
            X509v3 Authority Key Identifier:
                keyid:B4:7D:10:7E:FD:05:32:BC:4E:23:E6:67:AB:A1:18:81:7A:66:36:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/B47D107EFD0532BC4E23E667ABA118817A663654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B47D107EFD0532BC4E23E667ABA118817A663654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FdDQb6eph9TWtgKwWDgkMW1xXYFCGsMWwxibztGzqmF8/0/323830343a3830383a3a2f33322d3332203d3e203136373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:808::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:ca:dc:96:30:70:e3:48:ac:bf:64:a6:54:d4:da:ae:4a:60:
         5a:51:ac:59:18:8d:01:ec:df:91:dd:07:94:7b:9c:7f:9c:3f:
         39:3b:fe:1c:ce:7d:ec:ae:54:0d:d1:a1:85:13:d4:c5:70:18:
         ca:7b:12:03:f7:0b:46:a6:6c:67:a4:39:39:d4:33:26:fd:c8:
         c2:71:75:3a:78:15:1f:60:e9:8b:6e:99:14:1b:1a:29:f4:9a:
         0f:ef:6c:09:0d:97:08:70:8d:ae:a8:06:d1:e2:f1:51:1b:d4:
         64:d3:72:30:39:03:8d:21:4f:75:47:f8:1b:b8:14:00:7d:e8:
         89:e0:74:ff:d8:43:ec:c5:a2:53:5d:c7:9a:87:21:b6:0f:4f:
         4e:2d:0f:eb:d4:2c:d9:e5:48:23:53:61:8c:da:00:26:21:02:
         66:80:36:1e:74:2e:b5:bf:74:da:77:9f:3b:ee:09:c6:51:ef:
         6b:79:0c:e7:be:45:bd:d0:44:9a:45:b8:d9:e7:78:b3:7f:d1:
         5d:6e:d2:6f:3b:7b:54:c0:51:11:30:6f:72:c9:7f:83:97:e9:
         c5:4b:e9:d4:ce:c9:90:6b:e7:20:c9:2d:4c:24:80:fb:bb:8f:
         77:66:20:54:d9:65:c6:f3:01:43:13:41:e2:4f:ba:61:55:bb:
         0e:53:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----