Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a3a2f33322d3334203d3e203631383835.roa
File:                     323830343a316163383a3a2f33322d3334203d3e203631383835.roa (raw, json)
Hash identifier:          knhGwrTXh9dRHU0oZB10x/BaCpZ3SRyOrPAUCk4tjlE=
Subject key identifier:   27:9C:03:1D:57:95:B5:1B:26:34:DC:31:A1:F8:FE:A8:9E:87:7C:A3
Certificate issuer:       /CN=99A22935239FC46D167B07A0FBAB7A827D2D8E27
Certificate serial:       3523EABCC04A4C34D495919E58BDC6D549B22D3E
Authority key identifier: 99:A2:29:35:23:9F:C4:6D:16:7B:07:A0:FB:AB:7A:82:7D:2D:8E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99A22935239FC46D167B07A0FBAB7A827D2D8E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a3a2f33322d3334203d3e203631383835.roa
Signing time:             Tue 14 Jun 2022 00:00:07 +0000
ROA not before:           Mon 13 Jun 2022 23:55:07 +0000
ROA not after:            Tue 13 Jun 2023 00:00:07 +0000
asID:                     61885
IP address blocks:        2804:1ac8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:23:ea:bc:c0:4a:4c:34:d4:95:91:9e:58:bd:c6:d5:49:b2:2d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A22935239FC46D167B07A0FBAB7A827D2D8E27
        Validity
            Not Before: Jun 13 23:55:07 2022 GMT
            Not After : Jun 13 00:00:07 2023 GMT
        Subject: CN=279C031D5795B51B2634DC31A1F8FEA89E877CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bc:39:99:f6:ab:f7:dc:60:5b:b4:ac:59:74:
                    85:02:b5:d4:7d:69:1a:55:12:dc:9d:79:02:2b:c8:
                    5a:76:ad:19:f1:da:3a:47:72:56:bf:97:dc:44:0c:
                    ae:3a:ab:da:87:b6:3b:1d:3b:4a:88:64:f6:26:53:
                    f5:e0:a1:e4:c6:dc:6f:e1:e8:0b:00:14:2f:75:4e:
                    4e:d9:0d:14:fb:31:58:83:6b:c9:14:5c:59:b6:87:
                    09:d4:28:74:06:73:30:10:b6:b9:dc:a9:f5:87:95:
                    cd:c1:87:2d:52:3c:14:de:4a:50:70:56:3b:87:d2:
                    90:ea:04:89:00:a6:aa:ba:f9:fa:b7:09:6c:4a:5c:
                    cb:f3:25:31:ee:c8:62:ac:11:b4:30:ed:ca:f3:da:
                    75:48:51:60:2f:38:25:e7:8b:5a:41:02:36:19:ee:
                    0d:f4:4b:fe:f4:21:2b:93:fb:bb:9c:ee:f5:b9:57:
                    d0:7c:41:2c:d1:31:c1:76:8f:e8:e1:c7:b2:aa:8d:
                    d1:66:33:29:06:2a:76:61:61:d9:ca:19:39:3b:39:
                    33:d5:bd:24:22:84:99:64:b5:8a:95:24:88:cc:00:
                    d0:3a:8a:9c:95:6c:c1:bc:c8:86:06:24:4e:7a:26:
                    7a:23:13:75:51:2f:07:65:c1:cb:c1:bc:e4:85:01:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9C:03:1D:57:95:B5:1B:26:34:DC:31:A1:F8:FE:A8:9E:87:7C:A3
            X509v3 Authority Key Identifier:
                keyid:99:A2:29:35:23:9F:C4:6D:16:7B:07:A0:FB:AB:7A:82:7D:2D:8E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/99A22935239FC46D167B07A0FBAB7A827D2D8E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/99A22935239FC46D167B07A0FBAB7A827D2D8E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/323830343a316163383a3a2f33322d3334203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:b5:c7:38:de:60:82:ea:41:69:f3:28:18:c6:be:5e:bb:26:
         ed:4e:42:90:e9:10:9b:6f:d9:ee:7f:82:7e:82:b7:28:52:d6:
         fb:4d:66:f7:a4:a4:53:5e:54:dc:2f:7e:fb:c2:24:c1:0e:93:
         d3:88:a1:07:f5:8d:45:0b:d0:f9:1d:7b:6d:55:11:d8:49:b7:
         10:bf:7c:1d:e0:4c:3c:b7:a5:8c:42:9d:79:c2:4b:23:9c:a0:
         d3:1e:eb:e0:6c:40:ca:5f:7f:15:34:1d:47:b9:68:76:78:00:
         72:47:aa:06:01:e4:06:d2:73:61:3b:bc:49:b4:cd:8d:d5:b0:
         a8:86:40:36:c8:0d:15:14:28:d8:a7:e8:81:5a:30:8c:7b:44:
         ce:39:07:1c:61:b0:1a:50:c0:9f:a3:97:8f:da:9c:60:79:c5:
         eb:2f:8e:be:42:73:f3:23:77:c6:af:62:f7:9c:66:27:c6:30:
         d4:e1:d5:aa:91:31:1c:79:ea:c6:fc:19:f9:1e:d6:22:7b:b5:
         e6:aa:69:2f:cd:a3:10:9e:40:08:4a:9b:31:19:a9:50:37:fa:
         d4:8c:3a:d0:7b:d4:2e:fc:36:99:01:1a:d5:ca:d6:b3:35:ce:
         54:70:e5:b2:f9:7f:ff:6e:62:4b:ee:f1:af:10:1a:f7:c2:27:
         be:a6:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----