Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/323830343a333937633a3a2f33322d3435203d3e203532353932.roa
File:                     323830343a333937633a3a2f33322d3435203d3e203532353932.roa (raw, json)
Hash identifier:          dcq3dipA6Suhn/pnbL71Y7RzPLzgVr/OjmiGotrj9G4=
Subject key identifier:   75:21:8D:C7:1D:9B:BE:A4:56:2F:DD:C3:79:7A:A2:E9:3E:0E:88:77
Certificate issuer:       /CN=C0B102878E6E3362B6C8761382E427E0B4EA5A67
Certificate serial:       2E319C230599A6A596823AEC226724316AB200A0
Authority key identifier: C0:B1:02:87:8E:6E:33:62:B6:C8:76:13:82:E4:27:E0:B4:EA:5A:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0B102878E6E3362B6C8761382E427E0B4EA5A67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/323830343a333937633a3a2f33322d3435203d3e203532353932.roa
Signing time:             Wed 29 Jun 2022 17:22:26 +0000
ROA not before:           Wed 29 Jun 2022 17:17:26 +0000
ROA not after:            Wed 28 Jun 2023 17:22:26 +0000
asID:                     52592
IP address blocks:        2804:397c::/32 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:31:9c:23:05:99:a6:a5:96:82:3a:ec:22:67:24:31:6a:b2:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0B102878E6E3362B6C8761382E427E0B4EA5A67
        Validity
            Not Before: Jun 29 17:17:26 2022 GMT
            Not After : Jun 28 17:22:26 2023 GMT
        Subject: CN=75218DC71D9BBEA4562FDDC3797AA2E93E0E8877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b0:e3:1c:a3:e9:aa:27:8d:98:3e:be:2b:52:
                    6c:36:45:0b:67:2a:67:66:3f:50:80:65:9c:6f:62:
                    d0:2e:07:17:1e:79:c5:fe:46:ee:88:ee:59:fb:31:
                    73:1e:df:bf:4c:73:6e:bf:56:ae:21:48:41:35:e2:
                    f8:2e:f5:16:d8:8a:c6:35:0f:cc:00:f8:cf:32:2a:
                    89:81:30:0c:ec:6c:54:81:55:93:e5:50:92:9c:34:
                    42:ac:7a:d8:70:44:04:b8:46:74:20:d8:e4:4e:20:
                    1d:5f:4e:42:7b:d3:b1:20:50:91:be:4f:79:c3:e3:
                    4f:6e:ce:26:73:ab:c2:5b:29:f1:3d:66:76:2c:90:
                    c4:33:31:77:5b:03:1b:34:5f:98:b2:bc:c1:f4:cb:
                    67:c5:96:1b:b3:3f:06:c0:ae:05:b7:d1:8e:f0:e7:
                    81:ac:a7:1b:01:04:ba:cd:3b:ac:86:89:f6:c6:33:
                    80:67:84:70:b4:8f:62:cb:a0:32:84:ff:fe:81:dd:
                    a3:ae:7a:98:8e:c3:0d:8c:73:b6:a7:66:29:d3:e3:
                    43:dd:69:c1:35:d7:38:ff:cb:f7:f3:14:a8:c3:f7:
                    41:4f:ba:3a:38:6d:a1:e9:20:74:78:bd:70:4b:3c:
                    8e:b3:f3:1b:40:2e:9f:0b:bd:d6:55:b5:96:06:6a:
                    36:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:21:8D:C7:1D:9B:BE:A4:56:2F:DD:C3:79:7A:A2:E9:3E:0E:88:77
            X509v3 Authority Key Identifier:
                keyid:C0:B1:02:87:8E:6E:33:62:B6:C8:76:13:82:E4:27:E0:B4:EA:5A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/C0B102878E6E3362B6C8761382E427E0B4EA5A67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0B102878E6E3362B6C8761382E427E0B4EA5A67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/323830343a333937633a3a2f33322d3435203d3e203532353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:397c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:83:96:19:c3:73:23:42:a7:c5:37:bc:ce:51:a6:a7:7e:83:
         29:bc:5b:9f:d2:31:b2:88:43:17:68:af:1b:ba:00:56:01:2a:
         ef:87:93:2b:21:52:c8:bf:57:38:05:61:96:40:ba:70:47:2a:
         6d:ce:65:70:a1:7d:eb:10:eb:9e:9d:e3:4b:72:0a:ff:b0:fb:
         63:11:40:21:19:60:1d:ad:86:4b:1b:5a:ee:49:0a:45:80:48:
         70:d0:66:bc:43:4d:f3:b9:8d:4d:e0:d4:de:71:c8:9e:1c:50:
         c6:2e:39:d6:10:3f:c2:c0:95:7b:7e:a3:cf:0e:d3:96:20:32:
         3f:82:83:18:3d:7c:69:8d:66:0b:fc:df:b8:37:44:43:1f:61:
         3e:7c:9b:ea:88:65:10:fe:b4:81:2c:5f:3c:a9:74:ff:30:a3:
         5b:e3:5d:d7:84:de:ce:59:07:b8:e4:2c:9d:c9:61:1d:ec:16:
         8f:b6:2e:49:06:87:f2:8f:b4:f7:9a:a9:ba:c4:f1:0e:2f:1a:
         86:2d:b8:ad:e4:76:e4:6d:a4:15:ca:d8:fd:c4:88:db:f5:c7:
         cf:46:72:0e:3e:20:c6:26:e7:16:0e:4b:73:99:15:0a:6c:ca:
         d5:cc:b6:12:fd:85:8d:ce:1e:fc:c9:b0:07:95:dc:10:20:39:
         f4:53:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----