Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/323830343a316331633a3a2f33322d3438203d3e203631363338.roa
File:                     323830343a316331633a3a2f33322d3438203d3e203631363338.roa (raw, json)
Hash identifier:          5C4AxMmgyGQhNPTYUI9tR133Uv1TobCM6tY/d6KCMpM=
Subject key identifier:   19:B9:08:9D:92:8B:B4:A3:5A:43:3D:36:E7:A1:5E:AC:93:4D:28:DB
Certificate issuer:       /CN=07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7
Certificate serial:       4A596ABB8870B81BEB94D957E82305B4F95EA14F
Authority key identifier: 07:C1:E5:D4:D7:A2:FE:F7:AB:C3:80:98:00:24:FA:8E:5F:36:67:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/323830343a316331633a3a2f33322d3438203d3e203631363338.roa
Signing time:             Thu 29 Jun 2023 12:00:00 +0000
ROA not before:           Thu 29 Jun 2023 11:55:00 +0000
ROA not after:            Sat 29 Jun 2024 12:00:00 +0000
asID:                     61638
IP address blocks:        2804:1c1c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:59:6a:bb:88:70:b8:1b:eb:94:d9:57:e8:23:05:b4:f9:5e:a1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7
        Validity
            Not Before: Jun 29 11:55:00 2023 GMT
            Not After : Jun 29 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:b5:4a:d9:16:33:d8:28:19:0a:00:03:8b:
                    c5:f1:21:f5:1d:59:88:4a:6f:51:2f:f8:46:3a:f0:
                    28:94:7b:e6:94:01:d6:88:4d:6d:7c:e2:1e:a8:92:
                    5b:7e:6e:46:4d:61:4f:3e:16:32:ab:e3:e7:9b:d7:
                    df:f0:e4:dd:ee:90:46:2e:24:f1:73:f2:cc:ab:c3:
                    1c:9c:14:bd:be:c7:90:ac:93:f8:82:40:6f:62:45:
                    d5:c2:7f:ba:88:70:f9:f6:e5:20:c4:e8:d7:8a:01:
                    af:e5:27:3d:98:29:33:b9:f7:3e:99:61:a1:41:e0:
                    05:c6:07:26:b8:31:a1:86:db:c2:4a:31:d3:cf:2a:
                    44:34:17:0e:b2:f8:02:fd:0b:2f:93:90:70:c5:a6:
                    8c:c8:47:3d:ef:23:2e:53:54:11:82:8e:52:39:05:
                    25:cc:59:e5:53:a7:40:3b:5a:08:f0:0c:09:f8:9b:
                    53:26:92:31:ec:8a:e9:8a:2c:56:6f:c1:ea:88:9f:
                    03:d2:fd:ba:b1:83:94:b8:1a:b3:4b:0c:97:f6:53:
                    a8:c7:ec:58:a6:5e:67:88:00:7b:f6:12:ce:35:d6:
                    d3:1b:54:89:a2:01:5b:05:cd:b9:dc:35:05:43:a1:
                    11:13:07:fb:97:64:fb:88:55:a9:cc:d9:ad:96:dc:
                    d1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B9:08:9D:92:8B:B4:A3:5A:43:3D:36:E7:A1:5E:AC:93:4D:28:DB
            X509v3 Authority Key Identifier:
                keyid:07:C1:E5:D4:D7:A2:FE:F7:AB:C3:80:98:00:24:FA:8E:5F:36:67:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/323830343a316331633a3a2f33322d3438203d3e203631363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:92:89:cb:77:fc:b9:ef:43:18:3e:4a:b6:98:83:b6:ef:98:
         20:e1:ca:19:58:ff:3f:df:57:dc:61:d9:26:a5:49:23:cf:d5:
         74:92:c1:27:bd:55:9b:1c:f4:a7:e5:30:87:92:f9:82:86:5b:
         a2:96:19:f7:e3:d8:65:58:a3:db:c4:b9:4d:b3:52:ed:a1:b6:
         25:61:b1:33:28:69:59:cd:7b:89:c5:66:e3:c9:f1:ef:0b:e1:
         9a:80:f5:ef:a5:15:86:b8:a9:a0:96:55:1b:d5:bc:db:c8:0b:
         62:fd:71:9c:51:32:88:bd:74:65:f0:f6:60:69:e2:8c:73:65:
         55:a4:f2:a7:c4:aa:b1:e0:c9:4a:aa:85:b5:5b:1d:84:01:e1:
         fd:74:3c:6a:e0:9a:d8:d7:0f:fa:d4:aa:0c:75:e4:6b:47:a7:
         51:de:2a:0e:72:79:c9:e8:37:f7:3a:f6:59:0b:f1:17:05:59:
         08:55:e0:74:ba:4c:b6:f3:52:f8:ad:1c:76:40:90:d4:62:7f:
         f2:ef:c3:4d:57:bc:bb:1f:e0:17:21:8c:2b:4e:db:48:eb:1a:
         4f:12:c4:86:74:a6:22:6b:08:e0:0d:74:0c:b6:09:c3:23:ee:
         b9:1d:26:6b:24:3e:9c:13:53:57:5b:ee:c2:0f:a8:b9:11:9e:
         de:e3:3e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----