Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/323830343a6330343a3a2f33322d3332203d3e203532363630.roa
File:                     323830343a6330343a3a2f33322d3332203d3e203532363630.roa (raw, json)
Hash identifier:          liTe66B6gCJPmN/RiGT5lRTrcaV3CuzBF2xXqhtgFwU=
Subject key identifier:   8A:28:E6:51:C4:59:2C:CB:49:53:9A:0A:9F:FE:7A:C4:44:DC:A6:CA
Certificate issuer:       /CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
Certificate serial:       751139BE2DE08E795C85D86013A5FB0465B816C2
Authority key identifier: DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/323830343a6330343a3a2f33322d3332203d3e203532363630.roa
Signing time:             Tue 14 Feb 2023 19:58:36 +0000
ROA not before:           Tue 14 Feb 2023 19:53:36 +0000
ROA not after:            Tue 13 Feb 2024 19:58:36 +0000
asID:                     52660
IP address blocks:        2804:c04::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:11:39:be:2d:e0:8e:79:5c:85:d8:60:13:a5:fb:04:65:b8:16:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
        Validity
            Not Before: Feb 14 19:53:36 2023 GMT
            Not After : Feb 13 19:58:36 2024 GMT
        Subject: CN=8A28E651C4592CCB49539A0A9FFE7AC444DCA6CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:d8:0f:3b:af:9f:54:bb:0f:67:0e:9d:1f:
                    ac:3c:a2:e7:5e:37:51:16:78:a0:c6:6a:c7:67:e7:
                    87:41:bb:99:34:c7:44:0f:fd:c2:03:58:13:ad:21:
                    5c:82:f7:47:80:1a:d4:d1:7f:f4:f9:ff:50:b1:7c:
                    73:e6:4f:23:f5:bd:0d:12:ce:95:ab:79:89:70:98:
                    cd:59:26:a6:32:e3:3d:1e:67:a3:52:1e:ab:37:67:
                    55:bb:46:7a:78:05:f0:92:e7:42:8b:2a:ec:06:97:
                    d5:5a:42:63:4b:65:41:8b:b9:1c:e4:1a:ce:cd:6b:
                    84:da:e3:a9:0e:04:00:8d:c7:69:42:ea:56:58:a4:
                    ab:d6:c1:ee:6b:a5:df:77:70:f1:06:97:4e:3d:01:
                    80:61:88:3d:73:b3:0e:95:14:9b:1c:d5:51:fd:8b:
                    ac:24:29:90:4f:80:e1:68:86:09:1f:f5:c4:24:df:
                    67:2b:8e:4d:7c:83:f3:ec:72:57:66:57:02:dd:47:
                    33:94:be:b6:48:f4:d6:eb:c9:1e:67:ea:89:84:d7:
                    ff:77:e4:ee:16:24:d7:17:f5:4e:5b:75:1b:ed:fa:
                    4d:e0:1e:e5:39:be:0c:b7:67:a0:76:91:9c:50:f4:
                    90:fe:42:95:6e:cd:a4:5c:e3:0d:5b:22:b4:4d:65:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:28:E6:51:C4:59:2C:CB:49:53:9A:0A:9F:FE:7A:C4:44:DC:A6:CA
            X509v3 Authority Key Identifier:
                keyid:DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/323830343a6330343a3a2f33322d3332203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c04::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:c6:d8:a9:22:de:03:02:0d:1c:80:70:c1:96:89:59:fc:
         11:28:8d:10:4d:95:e2:43:83:54:be:ce:89:ff:a6:1c:7f:50:
         17:f9:67:aa:45:92:75:a1:62:b9:12:84:59:05:b6:eb:97:38:
         1f:03:a4:51:7b:11:a6:58:5c:2e:7c:33:6a:88:59:d1:a6:d6:
         14:02:0e:5e:5d:df:1f:73:79:01:91:e9:f5:af:d3:08:08:f6:
         52:12:77:03:ab:15:45:d7:3c:d3:ab:ec:d1:b6:db:af:bb:fa:
         00:57:cd:54:91:ea:44:b4:f0:c3:7f:2a:87:85:5d:21:49:29:
         6c:70:d3:b2:d3:9d:a7:8c:43:ae:4b:22:5d:2e:38:f6:74:b4:
         68:57:9e:d0:8b:f5:8f:be:d3:ca:6d:33:5c:81:b5:64:7a:03:
         a9:25:7c:b4:7c:81:ff:d6:e9:5d:3e:c1:45:2d:2f:65:7b:df:
         52:ef:76:79:fc:bd:f0:8f:63:1c:64:9e:c9:41:4d:75:3c:7b:
         2d:ab:bd:6e:fd:d0:d2:90:99:1d:71:6b:33:a5:21:68:78:65:
         e2:f3:67:b3:56:c3:eb:18:17:39:84:42:cb:4e:6c:0f:95:a8:
         bc:28:05:b7:92:57:80:12:44:1d:61:74:8d:71:6e:44:01:3f:
         5c:f2:12:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----