Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3965383a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a3965383a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          YjgdtwqD4Sh91+J3felQ5j8hb5+qefe8A4kBcVTHehM=
Subject key identifier:   05:1D:46:BC:E1:5B:3D:76:45:71:7E:E0:27:5A:EF:82:F9:45:B0:9E
Certificate issuer:       /CN=356DB07CF8617314D1E724F86FE180F52E3D1945
Certificate serial:       5E0AFD5C4F8F47998716F526888595CE1CF88957
Authority key identifier: 35:6D:B0:7C:F8:61:73:14:D1:E7:24:F8:6F:E1:80:F5:2E:3D:19:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/356DB07CF8617314D1E724F86FE180F52E3D1945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3965383a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Tue 02 Aug 2022 19:10:19 +0000
ROA not before:           Tue 02 Aug 2022 19:05:19 +0000
ROA not after:            Tue 01 Aug 2023 19:10:19 +0000
asID:                     267420
IP address blocks:        2804:4d3c:9e8::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0a:fd:5c:4f:8f:47:99:87:16:f5:26:88:85:95:ce:1c:f8:89:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356DB07CF8617314D1E724F86FE180F52E3D1945
        Validity
            Not Before: Aug  2 19:05:19 2022 GMT
            Not After : Aug  1 19:10:19 2023 GMT
        Subject: CN=051D46BCE15B3D7645717EE0275AEF82F945B09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:64:43:ac:8b:3e:cd:55:f2:7e:43:6a:b3:
                    6f:56:b2:98:7a:4d:58:29:04:d3:ce:10:4b:fe:6f:
                    b8:33:a0:de:e6:47:0e:73:56:d0:6a:ce:13:3f:3d:
                    7e:8c:f3:5c:72:fa:98:68:f3:6b:80:f2:3c:e4:87:
                    38:8e:9b:50:d4:0b:8b:5c:9e:67:5b:a7:55:33:02:
                    8a:e5:93:d8:e2:b3:00:92:b2:19:e1:d3:42:4c:3e:
                    86:be:a9:b7:4f:2f:9b:75:8f:28:bf:96:4c:c3:a5:
                    cc:5f:9e:9e:f9:e3:bd:3b:0d:81:27:cf:68:1f:a0:
                    aa:25:00:8f:92:2d:d8:1c:19:f7:e0:8d:63:26:fe:
                    08:b2:cc:bc:72:77:57:7b:12:a1:f8:70:a2:e1:d2:
                    d9:75:0a:de:f6:8f:5c:a5:ce:eb:e6:6d:bb:ef:6c:
                    98:d4:eb:0f:a3:a0:9c:2b:b1:70:f6:85:c7:88:84:
                    4a:a4:86:15:b0:1c:5a:7d:cf:9a:97:8f:6a:66:a6:
                    b9:fd:4d:30:d0:76:a6:16:17:95:e8:81:65:75:69:
                    65:c2:55:a2:8b:c0:9a:ba:44:90:0c:bf:a5:89:13:
                    75:d9:11:97:73:4f:81:6c:23:10:ac:30:e4:68:15:
                    b8:42:e2:b6:ef:15:49:d6:d9:7d:df:c7:32:5c:80:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1D:46:BC:E1:5B:3D:76:45:71:7E:E0:27:5A:EF:82:F9:45:B0:9E
            X509v3 Authority Key Identifier:
                keyid:35:6D:B0:7C:F8:61:73:14:D1:E7:24:F8:6F:E1:80:F5:2E:3D:19:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/356DB07CF8617314D1E724F86FE180F52E3D1945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/356DB07CF8617314D1E724F86FE180F52E3D1945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3965383a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:9e8::/45

    Signature Algorithm: sha256WithRSAEncryption
         bb:ac:f0:31:02:e8:c4:98:91:64:1e:c9:53:b3:01:25:d3:cc:
         4b:10:45:7f:16:e5:04:48:22:db:12:78:21:89:f8:d3:c8:33:
         f3:95:f2:d2:9d:32:37:71:15:c1:d4:3b:d3:4a:7b:04:42:90:
         cc:1b:c6:fa:68:54:6f:7a:a9:7f:56:14:02:99:7e:5d:de:bb:
         ce:8a:63:ba:95:a5:1b:ad:a8:32:36:aa:e0:f2:26:b7:a6:25:
         e7:00:86:ba:ed:b1:eb:72:aa:1b:11:6f:78:0d:c1:78:81:91:
         dc:ef:15:77:79:e7:fd:49:e0:18:e0:05:63:fc:3c:c5:59:30:
         37:76:cd:19:47:b8:9e:ef:ca:4c:61:0f:5f:8a:73:d9:18:5a:
         2f:e7:68:a8:27:d2:53:a3:fd:e0:7b:fe:89:b6:8f:48:ee:96:
         b6:94:d2:e9:68:96:ee:55:d6:76:b7:15:bc:75:d9:0a:9e:59:
         b9:95:69:9e:77:e0:e0:8f:a1:3b:db:05:56:9a:68:69:35:59:
         b6:f8:8c:54:4e:c8:6f:4c:0b:86:c4:5d:ef:64:0e:b5:c3:a2:
         a4:98:07:d6:ff:2a:c3:fc:9a:70:e9:21:ac:62:32:49:af:80:
         fe:9c:fb:9b:69:6a:51:96:2a:13:f1:9e:f1:0f:57:dd:86:bd:
         d9:55:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----