Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/323830343a316331633a3a2f33322d3438203d3e203631363338.roa
File:                     323830343a316331633a3a2f33322d3438203d3e203631363338.roa (raw, json)
Hash identifier:          Caj6uQvWc/Szw9LymWY4MeyumojATK1JU3hFX5gp9VU=
Subject key identifier:   54:CC:61:61:23:89:A1:03:46:42:C6:25:5C:7E:0C:BC:85:A0:A8:CD
Certificate issuer:       /CN=07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7
Certificate serial:       6309054DCE46174584255EDD2DDBAAD9BEE2F936
Authority key identifier: 07:C1:E5:D4:D7:A2:FE:F7:AB:C3:80:98:00:24:FA:8E:5F:36:67:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/323830343a316331633a3a2f33322d3438203d3e203631363338.roa
Signing time:             Wed 27 Jul 2022 12:00:00 +0000
ROA not before:           Wed 27 Jul 2022 11:55:00 +0000
ROA not after:            Thu 27 Jul 2023 12:00:00 +0000
asID:                     61638
IP address blocks:        2804:1c1c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:09:05:4d:ce:46:17:45:84:25:5e:dd:2d:db:aa:d9:be:e2:f9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7
        Validity
            Not Before: Jul 27 11:55:00 2022 GMT
            Not After : Jul 27 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:18:3a:95:85:9b:80:fb:de:73:bb:54:01:
                    41:ec:7c:cc:ba:82:0f:1b:31:cd:76:97:78:ee:18:
                    be:e6:b4:bc:a5:22:d8:64:27:c1:fc:68:73:22:e1:
                    f6:9a:e1:4c:ae:73:8f:2b:d3:0f:fc:aa:6d:a9:9a:
                    d2:e2:52:69:7f:4b:90:52:8d:b7:fa:38:64:5b:28:
                    a9:c1:77:c4:f4:3a:3e:6e:93:be:5f:0a:2f:00:87:
                    ce:3a:22:fe:19:ab:3b:c3:2f:04:4a:5c:e0:c3:e2:
                    7a:3c:3b:a1:5b:a5:aa:51:57:e4:32:3e:85:78:46:
                    71:c9:9e:49:f6:e8:9a:ef:d9:e3:b0:02:3e:e0:f9:
                    d9:eb:24:e2:92:32:26:b7:02:1d:74:f3:44:2d:b4:
                    67:69:56:a0:50:50:ec:6c:68:a4:82:cc:95:4d:f4:
                    65:c2:6e:d4:5e:50:b2:c3:b3:5b:1f:d3:50:45:11:
                    48:be:83:2c:a0:75:52:a4:b5:61:13:4b:3a:e8:ae:
                    6a:19:7b:b7:78:18:12:35:1e:27:46:7c:7f:b2:be:
                    27:68:b5:b4:1f:17:b3:24:5a:b4:6f:16:6f:57:20:
                    d7:cc:9a:4e:ce:20:f1:cf:6a:fb:ea:2b:9f:7c:4d:
                    9d:c3:76:d7:19:67:4e:30:c5:c3:36:9b:6a:9e:38:
                    47:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CC:61:61:23:89:A1:03:46:42:C6:25:5C:7E:0C:BC:85:A0:A8:CD
            X509v3 Authority Key Identifier:
                keyid:07:C1:E5:D4:D7:A2:FE:F7:AB:C3:80:98:00:24:FA:8E:5F:36:67:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07C1E5D4D7A2FEF7ABC380980024FA8E5F3667F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/323830343a316331633a3a2f33322d3438203d3e203631363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:9c:95:ad:5a:17:63:8d:e7:5c:67:e7:58:12:c1:05:fb:cc:
         67:f6:d5:a5:ae:4a:cc:0a:ab:b4:76:b0:7b:a3:aa:0d:6a:c2:
         33:10:d0:42:c7:1d:42:35:c7:a9:1c:71:c5:84:d5:f7:99:b0:
         3f:66:49:ef:db:6a:9b:f7:5c:b3:12:a1:5f:22:0b:d8:41:85:
         70:f9:8e:45:d9:98:bf:f8:13:b4:1a:6f:5a:c6:45:6d:22:fa:
         11:68:b7:1c:cf:04:9a:f4:5c:4b:f4:7f:44:5b:96:e4:34:58:
         76:87:56:79:03:b6:61:e1:e4:b3:0d:94:83:c7:d5:e3:cb:63:
         12:4d:76:a9:1a:4e:1e:77:8b:81:cc:10:5b:93:73:a8:80:13:
         bc:95:a6:ce:50:60:27:85:42:36:56:4e:e5:52:5a:99:18:e1:
         26:59:72:49:4b:5d:d6:de:cf:1b:59:04:2c:92:d0:d6:0b:06:
         ae:05:03:b4:1c:d3:80:5b:0a:15:b3:e7:2c:ee:6e:b6:06:d1:
         45:6e:2d:23:b4:06:88:09:5e:6a:d3:f9:7c:6a:19:97:e4:52:
         2d:48:d4:00:e2:e5:56:14:cd:57:ac:d2:f4:66:6a:78:cf:9f:
         8a:58:b9:8c:34:4b:71:72:24:2e:7b:0c:26:d3:e7:58:32:9c:
         f8:c6:3e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----