Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/323830343a333966343a3a2f33322d3332203d3e20323636303631.roa
File:                     323830343a333966343a3a2f33322d3332203d3e20323636303631.roa (raw, json)
Hash identifier:          aeqXSeNcYePRZ0t3kZqmAD4dKf4mwuTw1pYhhYeWocI=
Subject key identifier:   CE:BA:72:35:EE:DD:A7:75:25:B8:2E:68:7E:7A:15:7E:ED:05:98:FC
Certificate issuer:       /CN=6A193B4797835D7F2E385043D03E0A6996AFCC0C
Certificate serial:       1AD0046CFFB446C31D368F7E09D9157536A5BCB2
Authority key identifier: 6A:19:3B:47:97:83:5D:7F:2E:38:50:43:D0:3E:0A:69:96:AF:CC:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A193B4797835D7F2E385043D03E0A6996AFCC0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/323830343a333966343a3a2f33322d3332203d3e20323636303631.roa
Signing time:             Tue 19 Jul 2022 18:34:38 +0000
ROA not before:           Tue 19 Jul 2022 18:29:38 +0000
ROA not after:            Tue 18 Jul 2023 18:34:38 +0000
asID:                     266061
IP address blocks:        2804:39f4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d0:04:6c:ff:b4:46:c3:1d:36:8f:7e:09:d9:15:75:36:a5:bc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A193B4797835D7F2E385043D03E0A6996AFCC0C
        Validity
            Not Before: Jul 19 18:29:38 2022 GMT
            Not After : Jul 18 18:34:38 2023 GMT
        Subject: CN=CEBA7235EEDDA77525B82E687E7A157EED0598FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:3a:5e:20:d7:31:e4:7e:a1:cd:ad:88:83:
                    76:81:82:8f:11:4f:a9:38:74:dc:d3:4e:23:36:84:
                    db:b0:e4:1d:9f:c2:c4:ce:a1:ae:e7:a9:7f:91:f7:
                    6d:1f:64:87:8c:aa:98:af:6f:9e:f3:de:1b:37:eb:
                    21:e0:c1:12:e0:cd:2e:b7:d6:e4:8b:4e:67:1e:69:
                    d9:91:0b:01:21:dd:d7:9a:af:a8:39:c2:b6:23:49:
                    82:25:42:72:98:b9:68:f5:4d:11:ba:c9:9a:bb:a7:
                    3a:45:8a:4b:4b:8f:3f:34:0e:b2:96:39:e8:ea:9a:
                    73:c1:b6:0d:d8:c7:59:ca:fb:d6:02:77:0a:d7:b1:
                    81:f5:f1:1e:98:3d:03:be:4b:1f:d9:af:01:c2:c3:
                    70:4e:7b:c6:5b:f5:5e:10:01:13:6e:79:66:b8:dc:
                    17:28:95:09:0b:ee:61:95:ea:e7:98:43:9e:99:be:
                    cf:d5:b3:a9:a5:84:00:d1:21:f4:6b:d4:1a:97:09:
                    f5:cf:22:56:cf:89:d2:0f:b0:73:7e:36:01:ba:14:
                    7f:6b:54:dc:1c:88:be:dc:c9:d5:1b:b1:90:45:dd:
                    5a:f5:51:c9:c2:2d:0d:2f:68:b2:27:e9:53:fa:f3:
                    be:90:d5:51:6a:be:60:74:3a:dd:d1:09:44:5c:53:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BA:72:35:EE:DD:A7:75:25:B8:2E:68:7E:7A:15:7E:ED:05:98:FC
            X509v3 Authority Key Identifier:
                keyid:6A:19:3B:47:97:83:5D:7F:2E:38:50:43:D0:3E:0A:69:96:AF:CC:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/6A193B4797835D7F2E385043D03E0A6996AFCC0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A193B4797835D7F2E385043D03E0A6996AFCC0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/323830343a333966343a3a2f33322d3332203d3e20323636303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:b1:58:95:bd:4f:a7:ba:f4:b5:0d:c8:62:81:83:ec:f2:a1:
         17:81:67:b5:cf:60:cd:8e:f4:99:5f:7f:0f:ad:bf:54:5b:36:
         87:bd:bc:51:92:96:13:08:a6:dd:21:90:af:f9:3e:e3:2f:8a:
         e6:ce:ad:53:4c:04:c2:a6:08:fa:2a:51:70:15:f3:22:1c:8c:
         f7:95:ed:3c:52:43:bb:f2:49:b4:4a:13:ec:2a:00:17:0e:6f:
         e8:d6:38:25:4e:48:00:28:70:58:1b:b4:8c:cd:fc:a0:ac:e6:
         bd:bb:ba:40:e5:17:2a:8f:b2:b8:0e:ad:e4:57:01:b6:9f:2f:
         ac:01:9d:68:0c:56:b6:de:79:53:af:61:49:35:49:a2:5c:91:
         d7:cb:a6:f0:4b:9c:5a:6e:b6:2a:e1:3b:be:03:d1:85:9b:7d:
         78:22:9e:f6:fa:28:e2:66:59:16:0d:ff:89:f2:5f:b6:5c:70:
         24:b4:8c:02:13:8a:07:43:c0:24:ba:f6:e6:2f:ea:47:d8:4f:
         81:bc:01:f5:62:04:07:2e:3a:68:3b:c8:df:e9:87:ce:e7:08:
         1d:a1:14:cd:57:03:d7:ba:59:72:1d:52:78:62:fd:92:86:84:
         bc:60:5e:cd:6f:26:ae:05:ab:a0:a8:df:60:0b:47:77:64:a8:
         20:28:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----