Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/323830343a373662383a3a2f33332d3333203d3e20323731313330.roa
File:                     323830343a373662383a3a2f33332d3333203d3e20323731313330.roa (raw, json)
Hash identifier:          aSoJ6JiKxVcHHgVc7zBnC7p0J0TIXHczg51FMbrG1sc=
Subject key identifier:   8E:FA:05:A2:3F:2B:B9:8C:74:4A:07:A6:CE:FE:CE:85:0B:52:46:0B
Certificate issuer:       /CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
Certificate serial:       0590592637EDEF6963116EF1B90DB59E9643085F
Authority key identifier: 0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/323830343a373662383a3a2f33332d3333203d3e20323731313330.roa
Signing time:             Sun 05 Dec 2021 07:42:14 +0000
ROA not before:           Sun 05 Dec 2021 07:37:14 +0000
ROA not after:            Sun 04 Dec 2022 07:42:14 +0000
asID:                     271130
IP address blocks:        2804:76b8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:90:59:26:37:ed:ef:69:63:11:6e:f1:b9:0d:b5:9e:96:43:08:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95
        Validity
            Not Before: Dec  5 07:37:14 2021 GMT
            Not After : Dec  4 07:42:14 2022 GMT
        Subject: CN=3082010A0282010100D544299D95DBA9CB60E26566CBCC7006EAFDB1616C0B6F405D324DA8578C6BE6FFB90D02CC9C1A49EC7240BB09F1C140EE0DC9A42560E3D3EF6E73E97960B01BE5197E91FED5109D26C38F3D2B2D94C267CC7F37864A4EAC5B8C9CB67D72446F5FADB05229F4AFCBFE8FD0C816BFFFD25961BF7A16FDEDDC2CFE9FCD9C139E3918EB1E915A1A51221629C750F6B2C5D6AB4E6BEE732363E839A79D66E560FB4F63F9A28253D6597AF8A94AA881A07FE4E476260537B5B7EFBEA1DA3ED6E06FD10350FA0DC44FC65A3DF456B9057D8F9CBF43626D4024087A3FC9E11E982BDC709AF44C5AB9535290DADE06519A69F7EF240FDD08D3D39FC30902FA2F1613F0D90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:29:9d:95:db:a9:cb:60:e2:65:66:cb:cc:
                    70:06:ea:fd:b1:61:6c:0b:6f:40:5d:32:4d:a8:57:
                    8c:6b:e6:ff:b9:0d:02:cc:9c:1a:49:ec:72:40:bb:
                    09:f1:c1:40:ee:0d:c9:a4:25:60:e3:d3:ef:6e:73:
                    e9:79:60:b0:1b:e5:19:7e:91:fe:d5:10:9d:26:c3:
                    8f:3d:2b:2d:94:c2:67:cc:7f:37:86:4a:4e:ac:5b:
                    8c:9c:b6:7d:72:44:6f:5f:ad:b0:52:29:f4:af:cb:
                    fe:8f:d0:c8:16:bf:ff:d2:59:61:bf:7a:16:fd:ed:
                    dc:2c:fe:9f:cd:9c:13:9e:39:18:eb:1e:91:5a:1a:
                    51:22:16:29:c7:50:f6:b2:c5:d6:ab:4e:6b:ee:73:
                    23:63:e8:39:a7:9d:66:e5:60:fb:4f:63:f9:a2:82:
                    53:d6:59:7a:f8:a9:4a:a8:81:a0:7f:e4:e4:76:26:
                    05:37:b5:b7:ef:be:a1:da:3e:d6:e0:6f:d1:03:50:
                    fa:0d:c4:4f:c6:5a:3d:f4:56:b9:05:7d:8f:9c:bf:
                    43:62:6d:40:24:08:7a:3f:c9:e1:1e:98:2b:dc:70:
                    9a:f4:4c:5a:b9:53:52:90:da:de:06:51:9a:69:f7:
                    ef:24:0f:dd:08:d3:d3:9f:c3:09:02:fa:2f:16:13:
                    f0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:05:A2:3F:2B:B9:8C:74:4A:07:A6:CE:FE:CE:85:0B:52:46:0B
            X509v3 Authority Key Identifier:
                keyid:0C:9C:FA:86:DD:C1:A2:0D:F7:24:2A:FB:3C:0F:13:25:E3:AF:DC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C9CFA86DDC1A20DF7242AFB3C0F1325E3AFDC95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeYJ3oZKSkUEgnChRtwvA2R9WhgmWFbL8k5M1TSyzXHD/0/323830343a373662383a3a2f33332d3333203d3e20323731313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76b8::/33

    Signature Algorithm: sha256WithRSAEncryption
         55:1b:aa:3a:10:aa:ab:58:c0:a3:3e:89:24:3a:fa:4e:24:e9:
         5d:1c:f2:84:8a:a1:41:0f:44:ff:df:4b:63:31:ad:37:b7:c6:
         26:53:fb:6e:d2:50:83:3e:1b:69:c1:a9:04:eb:dc:1d:70:14:
         1d:c0:0b:e4:cb:fb:d5:2e:2a:d5:34:b1:6a:60:b4:ac:e7:c9:
         be:0d:26:a1:b2:3c:f4:2e:3f:8f:f7:62:ff:09:4a:ca:5a:e4:
         31:f2:ad:bc:f6:5e:ce:31:ee:2a:be:bf:6a:f0:ad:55:d8:86:
         d5:e3:a3:2d:82:ac:96:fa:d3:91:bf:3f:c3:18:14:54:70:e8:
         cc:10:38:44:f9:c2:8d:2b:46:f1:04:a6:47:32:61:9d:5a:d8:
         35:2d:6c:fb:42:58:f8:c2:17:bd:9c:cd:27:0f:99:17:38:99:
         37:ba:d5:49:7e:23:21:b6:07:79:b5:47:fb:34:0e:63:83:74:
         10:b0:be:66:3e:e0:be:4b:3c:3a:92:c7:a2:2b:09:67:a6:1a:
         e2:94:6e:23:93:11:2b:7d:7e:4c:ff:79:39:11:23:11:5b:70:
         25:59:1b:1c:b7:72:13:38:76:2a:91:66:d7:d8:05:35:16:2a:
         2b:8e:27:ae:78:7f:ce:40:cc:41:9c:70:27:a0:d6:29:c8:79:
         e8:26:39:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----