Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/323830343a353866343a343030303a3a2f33342d3334203d3e20323638313630.roa
File:                     323830343a353866343a343030303a3a2f33342d3334203d3e20323638313630.roa (raw, json)
Hash identifier:          RfAjsHDLmzGP7gThIh5WTZY7AEQ0P71IK33qrh9NZCo=
Subject key identifier:   B8:49:81:81:E2:07:3F:C2:C1:D2:03:5F:DF:B2:9D:24:47:74:F0:CF
Certificate issuer:       /CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
Certificate serial:       7C17112A84286B642D67BB0B80DFD3369CF05751
Authority key identifier: 1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/323830343a353866343a343030303a3a2f33342d3334203d3e20323638313630.roa
Signing time:             Tue 06 Dec 2022 15:22:48 +0000
ROA not before:           Tue 06 Dec 2022 15:17:48 +0000
ROA not after:            Tue 05 Dec 2023 15:22:48 +0000
asID:                     268160
IP address blocks:        2804:58f4:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:17:11:2a:84:28:6b:64:2d:67:bb:0b:80:df:d3:36:9c:f0:57:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
        Validity
            Not Before: Dec  6 15:17:48 2022 GMT
            Not After : Dec  5 15:22:48 2023 GMT
        Subject: CN=B8498181E2073FC2C1D2035FDFB29D244774F0CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:43:6c:f1:61:07:cf:b9:a9:bf:71:59:a9:4b:
                    30:2b:1f:59:9a:3e:1b:d0:90:0c:aa:b0:83:61:64:
                    7e:6d:9a:29:ec:fc:54:69:99:92:38:e9:40:ee:65:
                    87:35:89:ce:f2:ce:e9:29:ff:51:83:44:33:8e:a3:
                    07:68:06:69:e7:67:9a:10:c2:f1:46:cb:86:30:dc:
                    7d:65:77:cd:47:b8:b3:86:25:66:6d:f5:10:1e:4e:
                    0e:34:b8:b9:e9:35:d9:88:3d:43:2d:39:78:34:a5:
                    89:f6:a4:f3:f0:7b:01:9d:f3:94:03:bb:c7:af:64:
                    95:e5:b2:5e:a1:f0:07:c0:a7:32:7e:05:56:5e:ff:
                    18:24:02:02:56:b2:95:7d:a6:c1:2c:53:bd:8f:df:
                    49:a9:2f:8a:02:10:6d:cc:c2:cd:6e:ae:f7:40:7d:
                    c8:1f:61:d7:80:8a:dc:f2:6b:44:08:a9:f7:28:15:
                    9f:f0:a3:33:bb:30:7a:6a:16:d5:ab:bf:2b:b9:4d:
                    67:2a:20:be:07:59:a3:77:51:58:08:25:8f:59:6e:
                    47:2f:a6:17:d2:3d:02:31:67:15:ef:c7:55:a4:c6:
                    7d:61:f0:98:f0:57:ef:78:3f:5e:63:16:a6:d5:f3:
                    ca:c0:80:fe:fd:ce:86:c1:e8:28:93:07:48:d3:30:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:49:81:81:E2:07:3F:C2:C1:D2:03:5F:DF:B2:9D:24:47:74:F0:CF
            X509v3 Authority Key Identifier:
                keyid:1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/323830343a353866343a343030303a3a2f33342d3334203d3e20323638313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58f4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:75:0b:88:c8:52:e4:6c:5e:9e:48:b0:b0:47:85:8a:4c:
         e8:5d:f3:69:01:1a:a7:96:69:97:e3:11:76:30:3d:6c:3d:7b:
         39:75:cc:f0:cb:dd:13:ca:88:2e:dc:7d:74:45:38:7b:e3:ea:
         74:9d:68:81:36:45:71:18:90:4b:19:08:0e:d8:fb:47:53:3f:
         78:16:bf:4b:3d:33:3b:f4:15:d7:e7:fc:44:1a:b5:fd:a9:2d:
         3c:23:a7:e5:1b:19:a6:b9:f5:00:36:d7:94:66:98:50:04:7f:
         90:71:ba:e5:25:5e:bf:5d:5f:f1:1b:ce:ad:a8:f9:07:e1:b7:
         d8:cb:41:13:8a:c3:20:ea:4b:70:90:d8:a2:70:dc:c6:71:82:
         ef:2a:ab:00:4f:c5:3a:3f:bf:d2:ec:33:8b:98:8f:04:12:7c:
         66:3d:4e:b5:f3:ca:2e:ea:52:a4:c1:63:f1:fc:11:12:08:ae:
         62:48:53:5c:2b:87:3d:e6:dc:92:f2:62:fa:1e:23:91:a0:61:
         ec:9e:fc:90:b4:d7:f6:e7:2e:f3:78:26:cd:80:33:7c:f1:dd:
         05:b0:1a:f6:18:94:c6:fa:9d:a0:35:ac:a1:c6:9c:ff:20:cb:
         eb:df:1d:07:d8:65:c2:f3:af:8b:ce:5e:c9:b9:52:06:79:59:
         cd:07:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----