Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/323830343a346236383a3a2f33322d3332203d3e20323637333034.roa
File:                     323830343a346236383a3a2f33322d3332203d3e20323637333034.roa (raw, json)
Hash identifier:          1qGuX8kv/Fm3E0dE7MoQqm1oWomZCXetMgwHk+Bn5qM=
Subject key identifier:   78:A7:81:0F:9F:08:23:4E:DF:17:6F:16:48:62:D5:93:09:32:2A:6C
Certificate issuer:       /CN=DA84F3349D037892FF53E38ABDA8EBDFA6F8F499
Certificate serial:       2E5774A90DEABB1008D679C662FAA9B9DCCB9DE5
Authority key identifier: DA:84:F3:34:9D:03:78:92:FF:53:E3:8A:BD:A8:EB:DF:A6:F8:F4:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/323830343a346236383a3a2f33322d3332203d3e20323637333034.roa
Signing time:             Thu 14 Jul 2022 15:00:01 +0000
ROA not before:           Thu 14 Jul 2022 14:55:01 +0000
ROA not after:            Fri 14 Jul 2023 15:00:01 +0000
asID:                     267304
IP address blocks:        2804:4b68::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:57:74:a9:0d:ea:bb:10:08:d6:79:c6:62:fa:a9:b9:dc:cb:9d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA84F3349D037892FF53E38ABDA8EBDFA6F8F499
        Validity
            Not Before: Jul 14 14:55:01 2022 GMT
            Not After : Jul 14 15:00:01 2023 GMT
        Subject: CN=3082010A0282010100FDD42C1BA9AABF0B14939BE0D22E99EC75BC04836FF62B6EE493B71A9B08B8E45FA8BDF93C7C18E57ECE5A5EFD9843B2286B1D3D3604A6E6078537A51391AC3EABBC4115CCCF306A4523C5ECE0F9327A786F941AF12B53A9F833B5F4D092B11096E84E07E9EA8762288247FFC462C3FB563199A03AC54C2927F89F671984ACE3701490B411DCE43BF30738ABE37659DAA98A0309D7CFA725ACD3D0CBBA22D26D77A579BBF774F0D1A5F4AC671BE118CF6F22DB74C57C490D4E6DB0142AEFF848504BFE989015E912A4EDB5EC62ED1C33048B4DF8B9842F219CD4925405964333F859C40CF75CBF5160FDAD63D32A79FDC993A9DA6FB86F2E84DC1F847213D3610203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:d4:2c:1b:a9:aa:bf:0b:14:93:9b:e0:d2:2e:
                    99:ec:75:bc:04:83:6f:f6:2b:6e:e4:93:b7:1a:9b:
                    08:b8:e4:5f:a8:bd:f9:3c:7c:18:e5:7e:ce:5a:5e:
                    fd:98:43:b2:28:6b:1d:3d:36:04:a6:e6:07:85:37:
                    a5:13:91:ac:3e:ab:bc:41:15:cc:cf:30:6a:45:23:
                    c5:ec:e0:f9:32:7a:78:6f:94:1a:f1:2b:53:a9:f8:
                    33:b5:f4:d0:92:b1:10:96:e8:4e:07:e9:ea:87:62:
                    28:82:47:ff:c4:62:c3:fb:56:31:99:a0:3a:c5:4c:
                    29:27:f8:9f:67:19:84:ac:e3:70:14:90:b4:11:dc:
                    e4:3b:f3:07:38:ab:e3:76:59:da:a9:8a:03:09:d7:
                    cf:a7:25:ac:d3:d0:cb:ba:22:d2:6d:77:a5:79:bb:
                    f7:74:f0:d1:a5:f4:ac:67:1b:e1:18:cf:6f:22:db:
                    74:c5:7c:49:0d:4e:6d:b0:14:2a:ef:f8:48:50:4b:
                    fe:98:90:15:e9:12:a4:ed:b5:ec:62:ed:1c:33:04:
                    8b:4d:f8:b9:84:2f:21:9c:d4:92:54:05:96:43:33:
                    f8:59:c4:0c:f7:5c:bf:51:60:fd:ad:63:d3:2a:79:
                    fd:c9:93:a9:da:6f:b8:6f:2e:84:dc:1f:84:72:13:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A7:81:0F:9F:08:23:4E:DF:17:6F:16:48:62:D5:93:09:32:2A:6C
            X509v3 Authority Key Identifier:
                keyid:DA:84:F3:34:9D:03:78:92:FF:53:E3:8A:BD:A8:EB:DF:A6:F8:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/323830343a346236383a3a2f33322d3332203d3e20323637333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b68::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:1d:93:d0:eb:6a:fd:00:c9:a6:59:50:6d:fe:c4:60:b3:25:
         a3:d1:19:6c:2e:84:a6:b9:5d:bf:b8:35:e5:8b:28:ea:e9:45:
         2b:f5:eb:2b:b2:09:87:c8:27:54:5a:d0:2b:1f:f9:1c:b9:fb:
         ad:7c:15:17:5e:9c:45:21:b5:77:0a:9b:fe:2e:8d:55:05:cf:
         10:93:5f:94:91:b8:e0:c7:95:d9:83:96:a3:16:a5:ad:a7:75:
         a3:be:ca:da:7a:dd:5a:a6:e6:10:42:41:dd:94:3c:3c:41:64:
         59:26:ed:64:a7:e7:bd:57:fd:2f:79:7b:c7:ce:87:d5:b8:b9:
         15:ca:5c:17:24:95:91:99:9a:db:f0:9e:32:52:f4:2c:ff:ff:
         e0:4d:b2:05:ec:60:7b:65:66:04:77:82:3c:48:a8:f8:95:58:
         c4:db:6d:ce:dd:1b:b9:0b:7f:2f:26:06:1f:d6:c3:66:fb:a2:
         97:e6:d6:70:51:f7:42:4a:7e:5a:e2:cf:ed:70:7b:a5:12:b4:
         a9:ed:68:aa:66:41:08:6a:a0:71:92:28:5e:f8:85:15:fd:6d:
         d2:d1:b4:8f:5a:e5:47:88:9c:95:e9:7c:e0:36:2c:8f:75:70:
         06:c6:99:72:f7:c5:bd:ab:ae:47:06:4d:74:9b:d9:c4:54:43:
         d0:b7:10:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----