Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030363a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343030363a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          r+Lb/5yysGcw/ZsPxw4a1zYEqmRPHL3fGchluxTPXFo=
Subject key identifier:   A6:A7:8D:E9:F8:AE:14:0A:58:70:10:72:17:2E:19:58:D2:F7:65:EC
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3DBAE8A75F1E43479AF6142907A555A6191CE1A0
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030363a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:19:45 +0000
ROA not before:           Tue 09 Aug 2022 13:14:45 +0000
ROA not after:            Tue 08 Aug 2023 13:19:45 +0000
asID:                     262773
IP address blocks:        2804:9f8:4006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ba:e8:a7:5f:1e:43:47:9a:f6:14:29:07:a5:55:a6:19:1c:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:14:45 2022 GMT
            Not After : Aug  8 13:19:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:4f:8a:4d:c1:c0:38:cd:d0:31:40:48:34:
                    c4:11:00:94:7d:8b:89:62:11:58:20:47:4a:5e:3e:
                    08:b7:84:de:3c:25:a1:80:25:d8:f8:e2:9b:8b:ac:
                    ec:b1:b1:fc:5a:c2:3c:0d:de:1b:ef:b2:a1:b6:60:
                    f9:21:e5:18:a9:63:18:38:0a:3a:e6:aa:88:9d:67:
                    85:f2:12:3c:93:06:5b:ec:4d:05:20:ae:fe:34:14:
                    a7:72:bf:a0:ff:7b:01:a5:c0:b9:a5:5a:0f:60:93:
                    75:50:7d:9c:cb:25:31:87:0d:3c:9c:ef:cf:f9:a6:
                    f8:f6:65:84:dd:0a:95:66:14:c7:dd:09:bc:e6:1f:
                    86:19:2f:8c:8e:a3:5c:95:58:7b:91:be:53:9a:d4:
                    64:42:0d:31:f9:c2:a5:99:61:fc:de:a1:06:9e:60:
                    8b:40:a6:a3:06:34:6c:46:97:d5:d7:f6:6c:91:33:
                    9e:c7:9c:0e:14:e5:22:c9:f3:41:78:ec:5f:4a:d7:
                    80:54:7f:3b:f9:1c:03:34:ad:31:69:de:07:1b:81:
                    ed:ff:a9:7d:b2:2e:ec:56:b0:47:78:11:32:c9:d0:
                    ac:a5:b0:67:19:8b:da:3b:65:d6:4b:07:79:f2:84:
                    f5:85:ea:ac:b9:5f:40:e6:6e:74:37:e1:26:95:c0:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A7:8D:E9:F8:AE:14:0A:58:70:10:72:17:2E:19:58:D2:F7:65:EC
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030363a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:4006::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:07:39:b3:d5:f3:71:54:33:b8:29:ad:1c:fd:e5:b4:8e:a9:
         6a:0c:94:8a:df:53:6c:bf:5b:f4:6b:d5:ed:0e:50:97:a3:85:
         fc:da:bb:27:1e:6e:b6:7b:e8:88:ca:66:35:5f:28:64:99:9c:
         b7:a9:6d:74:2c:73:e0:d0:85:d7:75:da:6c:4c:55:86:a6:13:
         65:6b:90:a7:cd:64:e9:35:88:09:c2:eb:aa:0f:e1:38:c3:8e:
         36:c4:04:1b:16:62:86:44:de:3d:6f:c5:c3:bc:54:f5:95:be:
         55:5c:17:e6:56:2b:a4:8e:03:97:7a:9c:86:52:f6:2b:9b:40:
         c2:1f:82:d4:a0:c7:51:75:3c:fd:7a:c0:f2:8e:91:b8:c8:7b:
         2c:0f:d7:b8:c0:3a:bf:75:d0:db:ed:b4:e1:84:e1:82:7b:e0:
         f4:43:c7:1f:9f:d7:9a:7c:b5:93:69:a8:01:b9:62:e3:35:9a:
         62:a3:c7:59:f1:19:3e:ec:b2:3f:ce:52:4b:12:12:3a:86:fc:
         0b:58:97:00:0a:2a:f0:e2:78:6b:0f:58:44:b4:10:cf:c2:6d:
         3c:db:2c:7f:c2:d7:85:5c:cc:a8:20:59:3b:6f:86:cf:5d:8b:
         ce:5e:1e:3c:c0:62:d9:77:32:54:ac:cf:17:7a:c8:ba:66:6b:
         62:01:b1:63
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUPbrop18eQ0ea9hQpB6VVphkc4aAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA4MDkxMzE0NDVaFw0yMzA4MDgxMzE5NDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzY4QzRGOEE0REMxQzAzOENE
RDAzMTQwNDgzNEM0MTEwMDk0N0Q4Qjg5NjIxMTU4MjA0NzRBNUUzRTA4Qjc4NERF
M0MyNUExODAyNUQ4RjhFMjlCOEJBQ0VDQjFCMUZDNUFDMjNDMERERTFCRUZCMkEx
QjY2MEY5MjFFNTE4QTk2MzE4MzgwQTNBRTZBQTg4OUQ2Nzg1RjIxMjNDOTMwNjVC
RUM0RDA1MjBBRUZFMzQxNEE3NzJCRkEwRkY3QjAxQTVDMEI5QTU1QTBGNjA5Mzc1
NTA3RDlDQ0IyNTMxODcwRDNDOUNFRkNGRjlBNkY4RjY2NTg0REQwQTk1NjYxNEM3
REQwOUJDRTYxRjg2MTkyRjhDOEVBMzVDOTU1ODdCOTFCRTUzOUFENDY0NDIwRDMx
RjlDMkE1OTk2MUZDREVBMTA2OUU2MDhCNDBBNkEzMDYzNDZDNDY5N0Q1RDdGNjZD
OTEzMzlFQzc5QzBFMTRFNTIyQzlGMzQxNzhFQzVGNEFENzgwNTQ3RjNCRjkxQzAz
MzRBRDMxNjlERTA3MUI4MUVERkZBOTdEQjIyRUVDNTZCMDQ3NzgxMTMyQzlEMEFD
QTVCMDY3MTk4QkRBM0I2NUQ2NEIwNzc5RjI4NEY1ODVFQUFDQjk1RjQwRTY2RTc0
MzdFMTI2OTVDMDE5QjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxoxPik3BwDjN0DFASDTEEQCUfYuJYhFYIEdKXj4It4TePCWhgCXY
+OKbi6zssbH8WsI8Dd4b77KhtmD5IeUYqWMYOAo65qqInWeF8hI8kwZb7E0FIK7+
NBSncr+g/3sBpcC5pVoPYJN1UH2cyyUxhw08nO/P+ab49mWE3QqVZhTH3Qm85h+G
GS+MjqNclVh7kb5TmtRkQg0x+cKlmWH83qEGnmCLQKajBjRsRpfV1/ZskTOex5wO
FOUiyfNBeOxfSteAVH87+RwDNK0xad4HG4Ht/6l9si7sVrBHeBEyydCspbBnGYva
O2XWSwd58oT1heqsuV9A5m50N+EmlcAZtwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FKanjen4rhQKWHAQchcuGVjS92XsMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMyMzgzMDM0M2EzOTY2MzgzYTM0
MzAzMDM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQJ+EAGMA0GCSqGSIb3DQEBCwUAA4IBAQAoBzmz1fNxVDO4Ka0c/eW0
jqlqDJSK31Nsv1v0a9XtDlCXo4X82rsnHm62e+iIymY1XyhkmZy3qW10LHPg0IXX
ddpsTFWGphNla5CnzWTpNYgJwuuqD+E4w442xAQbFmKGRN49b8XDvFT1lb5VXBfm
ViukjgOXepyGUvYrm0DCH4LUoMdRdTz9esDyjpG4yHssD9e4wDq/ddDb7bThhOGC
e+D0Q8cfn9eafLWTaagBuWLjNZpio8dZ8Rk+7LI/zlJLEhI6hvwLWJcACirw4nhr
D1hEtBDPwm082yx/wteFXMyoIFk7b4bPXYvOXh48wGLZdzJUrM8Xesi6ZmtiAbFj
-----END CERTIFICATE-----