Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/323830343a333035383a3a2f33322d3332203d3e20323632353039.roa
File:                     323830343a333035383a3a2f33322d3332203d3e20323632353039.roa (raw, json)
Hash identifier:          xMxB3ZP5BmiZzUZFhafHkwwdvw4UHrbJjuQmDO+HTiM=
Subject key identifier:   59:5F:AF:2B:A2:38:8C:AE:D6:DE:FC:38:CC:09:07:00:1E:1C:C6:1A
Certificate issuer:       /CN=781AC5A062EABB611A9D1B0BB056385DCABD6150
Certificate serial:       2612F53B723BA36638738A8EA8439A7242F2BAAD
Authority key identifier: 78:1A:C5:A0:62:EA:BB:61:1A:9D:1B:0B:B0:56:38:5D:CA:BD:61:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/781AC5A062EABB611A9D1B0BB056385DCABD6150.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/323830343a333035383a3a2f33322d3332203d3e20323632353039.roa
Signing time:             Mon 23 Jan 2023 21:37:42 +0000
ROA not before:           Mon 23 Jan 2023 21:32:42 +0000
ROA not after:            Mon 22 Jan 2024 21:37:42 +0000
asID:                     262509
IP address blocks:        2804:3058::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:12:f5:3b:72:3b:a3:66:38:73:8a:8e:a8:43:9a:72:42:f2:ba:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781AC5A062EABB611A9D1B0BB056385DCABD6150
        Validity
            Not Before: Jan 23 21:32:42 2023 GMT
            Not After : Jan 22 21:37:42 2024 GMT
        Subject: CN=595FAF2BA2388CAED6DEFC38CC0907001E1CC61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e9:de:9e:00:ea:3d:e4:c4:4b:2a:1c:ea:e6:
                    e0:9b:cb:93:06:f5:63:fb:8e:96:a9:b7:2f:8c:2a:
                    ab:fc:81:6e:60:ff:96:01:45:b3:cc:b6:69:ed:63:
                    00:9e:06:82:ab:2e:65:6b:c5:73:07:08:c1:ec:01:
                    65:b0:04:1b:a3:7f:9e:76:d5:d2:a7:2d:ac:96:60:
                    14:f0:c5:d7:d1:e5:c9:58:c5:e6:47:f1:4e:93:5d:
                    54:6a:fb:7b:53:a0:ef:f9:0c:a8:7f:74:32:5a:f9:
                    b9:e1:6a:85:e0:30:30:4f:1d:15:0d:58:70:00:bc:
                    1f:93:44:1a:42:fd:f2:3d:bb:2c:9c:13:72:5a:0c:
                    43:78:1e:1a:3c:87:a4:9e:a9:24:fc:2a:37:78:51:
                    fa:5f:0b:0f:b7:81:76:40:90:01:d1:e9:3c:b9:8b:
                    6e:12:0f:8b:9f:19:63:d1:ec:a2:84:80:a1:bc:92:
                    06:b1:b3:dd:7b:19:d1:b0:9e:29:b1:69:67:8c:af:
                    0b:bb:31:c8:43:ee:bc:60:cf:14:56:cd:f0:ad:0d:
                    eb:45:e9:cd:a7:62:12:46:46:53:71:51:76:1a:7f:
                    50:55:67:f2:0c:c4:53:4a:05:5b:4e:12:8d:cc:62:
                    c3:ce:7e:58:ae:83:3f:e1:34:91:0e:6f:5f:50:f4:
                    67:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5F:AF:2B:A2:38:8C:AE:D6:DE:FC:38:CC:09:07:00:1E:1C:C6:1A
            X509v3 Authority Key Identifier:
                keyid:78:1A:C5:A0:62:EA:BB:61:1A:9D:1B:0B:B0:56:38:5D:CA:BD:61:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/781AC5A062EABB611A9D1B0BB056385DCABD6150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/781AC5A062EABB611A9D1B0BB056385DCABD6150.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/323830343a333035383a3a2f33322d3332203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3058::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:99:b3:6a:cb:66:79:ac:7f:e3:29:c9:25:f6:f4:17:e2:8d:
         26:d1:1c:b6:17:df:37:ac:2e:e1:00:bd:69:c8:bb:19:77:bd:
         35:23:1e:41:93:86:17:e9:88:4c:71:7c:73:65:f0:e6:25:89:
         ab:5f:3f:5c:ba:b5:bc:15:93:13:c0:7c:79:bc:67:69:79:c4:
         50:fc:d1:cc:a2:f4:7e:99:15:ba:e2:a3:fb:df:e1:b0:88:db:
         8e:1f:81:3e:9a:37:64:6b:82:43:fb:c8:ae:96:f1:26:fa:84:
         1a:05:d6:c9:59:b8:1c:fe:eb:99:85:15:33:f9:4e:95:b8:3b:
         1a:d3:04:23:9e:8b:e2:d9:fa:15:64:21:86:c9:01:a3:32:1d:
         33:fc:1f:b4:58:3c:da:20:91:25:98:53:87:7d:c9:d1:cb:ea:
         57:4c:63:93:29:3c:d8:5e:19:46:f7:db:fa:a2:83:9e:71:9f:
         0e:2b:09:87:46:f4:02:b5:83:98:e1:20:13:01:6a:c7:9a:62:
         e7:26:2d:f4:40:bd:56:91:7b:33:a0:dd:45:25:a4:e0:66:4f:
         71:b1:f5:25:a1:88:e4:24:16:3a:02:7f:05:b0:d5:3f:6f:f4:
         ef:c4:fe:9e:68:38:10:37:d9:b8:1f:b2:78:b8:45:1a:74:34:
         4d:5c:9e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----