Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/323830343a316434303a3a2f3332203d3e203532363734.roa
File:                     323830343a316434303a3a2f3332203d3e203532363734.roa (raw, json)
Hash identifier:          OpQiK/BimZ6OJlhIjgP322dzPuXUNltX5V4F9Vh/K4o=
Subject key identifier:   3D:C2:57:47:39:2E:87:98:02:3B:5D:CB:9A:4E:1D:FD:5A:77:0C:C3
Certificate issuer:       /CN=951440B772E58C70F6E93B62E0DDAB8426495979
Certificate serial:       60F9BFEB087606AF4CEF263CFD15CFFD5BFF60EE
Authority key identifier: 95:14:40:B7:72:E5:8C:70:F6:E9:3B:62:E0:DD:AB:84:26:49:59:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/951440B772E58C70F6E93B62E0DDAB8426495979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/323830343a316434303a3a2f3332203d3e203532363734.roa
Signing time:             Sat 17 Apr 2021 13:00:01 +0000
ROA not before:           Sat 17 Apr 2021 12:55:01 +0000
ROA not after:            Sun 17 Apr 2022 13:00:01 +0000
asID:                     52674
IP address blocks:        2804:1d40::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f9:bf:eb:08:76:06:af:4c:ef:26:3c:fd:15:cf:fd:5b:ff:60:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951440B772E58C70F6E93B62E0DDAB8426495979
        Validity
            Not Before: Apr 17 12:55:01 2021 GMT
            Not After : Apr 17 13:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:36:e3:de:49:fb:c8:9f:28:a6:d5:7b:cf:
                    90:9e:a3:15:55:48:a2:e4:8e:3e:50:18:3b:eb:14:
                    bb:2a:f3:2e:e9:31:41:17:b4:bd:55:e4:e4:e8:e8:
                    78:59:e1:42:02:a6:3d:a1:05:a4:23:dd:07:d3:e5:
                    10:e8:d8:e2:be:d2:d2:13:94:cd:a1:85:3d:36:fb:
                    b3:85:e9:52:03:06:28:eb:b0:9d:ad:5f:5f:6a:5c:
                    ec:39:43:fc:ca:4d:92:ea:47:14:06:d9:e1:be:32:
                    72:73:2b:30:2c:ee:cc:da:ce:4e:c8:81:ee:8a:41:
                    ad:85:f3:77:80:f1:ae:34:90:82:11:c7:0f:1e:96:
                    b7:b6:1e:24:f5:fe:2f:8e:f1:c5:ab:2a:bf:77:7e:
                    3d:06:05:a3:79:0e:79:ef:37:ce:60:e7:80:29:83:
                    29:81:a1:dd:5d:be:8d:f5:9b:f7:9e:23:ea:f4:4a:
                    33:93:7f:aa:fe:07:f6:31:11:1f:ee:c3:22:5d:bf:
                    b3:31:06:42:b6:88:e1:21:be:2a:68:ca:47:70:f9:
                    f1:2c:38:c0:f1:3a:d2:e7:fe:6f:5b:14:0c:b9:86:
                    1f:13:78:6a:ac:0f:5b:e4:68:b1:fc:c1:45:57:67:
                    3b:8b:80:7f:8e:c2:9b:89:34:f4:1d:4f:5e:98:43:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C2:57:47:39:2E:87:98:02:3B:5D:CB:9A:4E:1D:FD:5A:77:0C:C3
            X509v3 Authority Key Identifier:
                keyid:95:14:40:B7:72:E5:8C:70:F6:E9:3B:62:E0:DD:AB:84:26:49:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/951440B772E58C70F6E93B62E0DDAB8426495979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/951440B772E58C70F6E93B62E0DDAB8426495979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/323830343a316434303a3a2f3332203d3e203532363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:a0:d4:c0:43:f5:58:89:85:8e:d6:5d:77:64:cc:53:de:68:
         e8:63:12:83:3e:e5:4c:34:a1:b0:79:bf:c3:29:9e:4e:3c:b0:
         47:52:db:66:1e:9a:f4:1a:25:13:84:75:76:c5:58:22:76:b6:
         8b:e4:e7:b6:68:18:77:41:48:ae:a0:87:56:d5:f3:2b:f5:ac:
         ae:05:76:3b:ba:05:51:fd:ff:43:fc:a0:67:9e:01:1a:89:a7:
         86:89:24:63:25:40:73:51:4f:ca:49:a2:fd:48:1c:63:ee:a6:
         e3:8a:a6:12:19:8c:3c:bc:fa:9f:5f:f8:db:46:f1:cb:2d:bd:
         1d:b8:ad:b6:ba:ab:89:71:56:1d:11:b0:c2:d1:e5:f6:eb:ea:
         a9:d8:6f:8a:67:d3:71:66:42:05:cb:0b:ca:30:69:a1:70:dd:
         7a:ea:4b:38:77:53:ee:8a:32:f1:2e:d1:1f:b0:db:a2:10:c8:
         dd:b4:19:8c:03:84:8e:ee:ba:6a:1d:b3:de:3c:a9:c8:af:79:
         89:d9:32:f5:fa:dd:59:63:3a:c6:68:b9:82:66:cb:ac:e2:6e:
         cf:f7:39:f1:64:82:1e:79:ff:3b:76:d5:c9:71:56:82:fd:e2:
         a4:2a:73:c0:6e:bb:6d:ba:37:ee:38:d5:6f:c7:af:f4:47:f8:
         f6:92:fb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----