Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/323830343a316331633a3a2f33322d313238203d3e203631363338.roa
File:                     323830343a316331633a3a2f33322d313238203d3e203631363338.roa (raw, json)
Hash identifier:          p6JVDrvlc0qtxSKAfqRS9/4cqWcw9HZMmVR2Su97ZyU=
Subject key identifier:   DB:CF:2A:3B:9A:A9:8C:AE:B1:86:DA:94:1F:43:0D:AA:3A:BD:A9:50
Certificate issuer:       /CN=E57F8D91E328DC79CA4961B77D81A3140C83DB08
Certificate serial:       18321153FB7DA664F4866E2A59ECC514675F4F2F
Authority key identifier: E5:7F:8D:91:E3:28:DC:79:CA:49:61:B7:7D:81:A3:14:0C:83:DB:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E57F8D91E328DC79CA4961B77D81A3140C83DB08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/323830343a316331633a3a2f33322d313238203d3e203631363338.roa
Signing time:             Sat 01 Jul 2023 12:48:22 +0000
ROA not before:           Sat 01 Jul 2023 12:43:22 +0000
ROA not after:            Sat 29 Jun 2024 12:48:22 +0000
asID:                     61638
IP address blocks:        2804:1c1c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:32:11:53:fb:7d:a6:64:f4:86:6e:2a:59:ec:c5:14:67:5f:4f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E57F8D91E328DC79CA4961B77D81A3140C83DB08
        Validity
            Not Before: Jul  1 12:43:22 2023 GMT
            Not After : Jun 29 12:48:22 2024 GMT
        Subject: CN=DBCF2A3B9AA98CAEB186DA941F430DAA3ABDA950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:12:c6:10:46:31:85:d2:7a:04:9a:05:4d:d8:
                    18:84:6d:03:0b:95:22:eb:44:a3:df:df:25:84:70:
                    5a:42:26:07:03:86:0a:22:85:16:cc:64:d2:99:f7:
                    2b:07:03:a7:d5:b5:ea:8d:e6:76:95:4c:03:b1:f3:
                    62:69:38:6b:87:1c:1d:11:b2:ad:af:0b:82:ff:91:
                    4e:fa:08:33:1e:5a:45:8c:7f:f8:5a:b8:e7:f6:8f:
                    dc:8b:8b:13:fe:b7:26:1d:12:0b:9d:e0:4a:0c:d6:
                    21:28:7a:f8:ab:59:bd:38:ca:d1:7b:a6:5a:9e:3d:
                    b3:33:c2:63:f8:3c:12:cc:f3:42:04:b4:0a:37:5f:
                    8a:32:a4:fd:be:01:04:e4:83:23:22:67:17:d4:92:
                    6a:92:a0:a9:a9:ce:f0:a7:bf:96:3b:6b:98:c1:6b:
                    85:b5:df:fd:a3:31:ea:ab:57:ba:59:30:3d:e0:d6:
                    8d:4e:70:3a:12:51:a2:c4:44:97:05:86:42:1c:09:
                    f2:3f:06:ea:31:a3:fa:9b:bd:83:45:cb:03:98:52:
                    7f:84:87:b7:4a:82:c4:b5:d8:41:72:05:43:99:13:
                    02:10:77:3f:a3:63:b3:ae:4d:70:31:60:51:ca:3e:
                    77:7a:de:9c:a5:dc:ab:cc:12:0e:83:5d:ae:7c:e8:
                    5d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CF:2A:3B:9A:A9:8C:AE:B1:86:DA:94:1F:43:0D:AA:3A:BD:A9:50
            X509v3 Authority Key Identifier:
                keyid:E5:7F:8D:91:E3:28:DC:79:CA:49:61:B7:7D:81:A3:14:0C:83:DB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/E57F8D91E328DC79CA4961B77D81A3140C83DB08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E57F8D91E328DC79CA4961B77D81A3140C83DB08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/323830343a316331633a3a2f33322d313238203d3e203631363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:60:00:11:d2:4a:29:2f:e9:4f:38:bd:46:e1:bb:5c:cf:72:
         d8:c0:3d:3a:47:c1:9b:30:00:df:9d:02:5a:2a:96:e6:55:dd:
         2b:dd:d3:a4:f1:25:f5:5d:77:91:48:64:f0:16:10:5e:0c:36:
         e5:2f:3a:0f:25:44:64:04:18:ce:bf:8a:af:94:b5:e1:72:94:
         8e:8e:80:1a:85:52:48:b5:0d:d8:67:83:9f:cb:03:b2:a4:d6:
         25:37:8c:f3:6f:66:3c:18:72:59:2a:11:48:21:63:96:45:6f:
         9e:fa:d1:96:eb:a0:70:d4:7e:ea:7f:49:c7:d2:4f:4e:4a:99:
         83:61:e8:5a:81:5f:d8:cf:c0:64:ce:9b:33:b6:33:e3:db:95:
         40:02:5c:fe:db:18:70:f6:57:ed:82:93:a2:88:b9:c9:85:04:
         a8:b9:ac:11:08:bd:ac:14:b3:e4:da:87:e6:70:85:08:cd:47:
         64:e7:3b:d5:0c:09:41:3c:98:ba:a0:ce:e4:08:f7:e3:55:89:
         49:54:cb:8c:4e:b3:ba:6d:41:c5:2d:00:36:20:e1:b2:8e:aa:
         e8:1e:b8:f5:28:04:33:00:67:47:49:08:de:3a:fb:80:e2:95:
         3f:6f:a8:73:43:5f:e0:73:8d:73:f2:48:2b:bc:0a:e0:3d:cf:
         84:5f:2a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----