Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3a2f33322d3438203d3e20323637333235.roa
File:                     323830343a346262343a3a2f33322d3438203d3e20323637333235.roa (raw, json)
Hash identifier:          eusenEyKRDg9pKAbGS8DZKrRiqtFmxG4iEB/2qcZ0/Y=
Subject key identifier:   56:6E:72:4C:04:F0:D2:B7:0B:2D:93:53:A7:6D:C8:86:8A:E3:DC:73
Certificate issuer:       /CN=E297D7E4600902A15DE37C20708CF7BC5A3BF010
Certificate serial:       72C36491CFC5B513AF66EC5A6E59BCAD2ABA3D2A
Authority key identifier: E2:97:D7:E4:60:09:02:A1:5D:E3:7C:20:70:8C:F7:BC:5A:3B:F0:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E297D7E4600902A15DE37C20708CF7BC5A3BF010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3a2f33322d3438203d3e20323637333235.roa
Signing time:             Wed 21 Sep 2022 11:21:49 +0000
ROA not before:           Wed 21 Sep 2022 11:16:49 +0000
ROA not after:            Wed 20 Sep 2023 11:21:49 +0000
asID:                     267325
IP address blocks:        2804:4bb4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c3:64:91:cf:c5:b5:13:af:66:ec:5a:6e:59:bc:ad:2a:ba:3d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E297D7E4600902A15DE37C20708CF7BC5A3BF010
        Validity
            Not Before: Sep 21 11:16:49 2022 GMT
            Not After : Sep 20 11:21:49 2023 GMT
        Subject: CN=566E724C04F0D2B70B2D9353A76DC8868AE3DC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:b5:68:0f:8f:2a:42:67:37:38:76:66:2e:
                    a6:1d:46:3d:0c:53:a1:d0:d3:f5:50:b2:c6:ab:5a:
                    47:26:4c:ec:9c:af:65:df:4a:4e:66:8f:b8:90:36:
                    d5:50:5c:12:14:c7:ad:44:76:3a:3e:8c:ee:58:b6:
                    bb:c8:1f:e1:b2:a4:54:86:62:6f:45:ce:85:f3:3d:
                    4b:a4:b0:a9:bd:1f:6a:0a:49:bd:0a:22:72:85:be:
                    cd:f3:0c:6e:02:02:17:8d:de:0d:01:e0:3a:e3:48:
                    c9:65:47:cb:b1:5a:8b:04:f5:22:d1:33:68:c9:75:
                    64:89:2d:9e:9c:9b:57:51:34:2d:5e:38:87:2c:fd:
                    c8:96:7f:0a:89:c0:1b:17:db:95:ad:13:26:e1:10:
                    ff:c9:3e:74:d8:7c:20:44:e4:2b:49:75:41:3c:0b:
                    96:f7:ab:c9:20:1d:5f:1e:21:e4:d4:02:91:c6:33:
                    e8:dc:51:a0:5e:2b:f2:8a:34:d8:82:2e:85:20:b7:
                    36:5f:70:9b:fe:9d:06:75:7e:e1:52:18:18:98:04:
                    2a:6a:bd:cc:d0:d3:a0:0f:1e:1e:fc:0b:cf:01:e3:
                    b9:94:db:8b:70:39:58:77:15:5d:96:93:b0:9e:78:
                    32:30:4b:b3:51:51:f6:4c:69:9c:02:2b:5f:99:f6:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6E:72:4C:04:F0:D2:B7:0B:2D:93:53:A7:6D:C8:86:8A:E3:DC:73
            X509v3 Authority Key Identifier:
                keyid:E2:97:D7:E4:60:09:02:A1:5D:E3:7C:20:70:8C:F7:BC:5A:3B:F0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/E297D7E4600902A15DE37C20708CF7BC5A3BF010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E297D7E4600902A15DE37C20708CF7BC5A3BF010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3a2f33322d3438203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:f9:ab:1a:2c:92:bf:68:42:f8:1f:9c:5e:51:77:db:ff:32:
         47:d7:f3:b6:a8:c6:b7:4c:0e:61:c1:27:4e:7a:11:74:8c:e4:
         7e:49:3d:79:49:dc:90:01:f5:d8:c7:92:32:9a:9b:fc:28:a0:
         66:ab:d2:6c:d6:fe:bf:2a:75:37:37:d5:bb:9b:5b:45:fe:80:
         24:9d:c9:62:bd:b7:72:ad:a4:3a:f2:7d:17:89:7e:50:66:2e:
         d8:31:57:e0:d5:fb:59:0b:b7:4b:c5:01:b7:1c:c9:ee:9f:42:
         38:02:b2:22:3b:35:25:da:3d:46:b4:1f:b9:63:e1:bb:0c:35:
         19:a0:bd:0a:0d:b3:38:9c:c6:9d:c4:75:9c:ee:e3:50:92:a5:
         23:28:0a:77:4f:ff:a8:c6:5b:85:fc:99:79:41:bc:c3:af:09:
         90:32:3c:9a:1d:a5:0a:0b:96:ca:49:8f:07:c2:d1:2b:c3:c7:
         dc:9f:44:42:fd:4f:0a:d4:a1:64:77:3d:83:8b:e5:cc:95:c5:
         43:99:eb:47:3e:bb:62:53:15:ed:bf:db:f2:cf:9e:8a:0b:7a:
         b1:5b:76:d0:9d:2e:d2:58:7e:eb:39:e7:e4:4c:96:b7:ff:28:
         53:2e:1a:5b:67:99:9c:c5:fd:de:40:f2:d4:8e:50:e5:ef:87:
         be:21:8b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----