Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/323830343a333933633a613030303a3a2f3336203d3e20323636303230.roa
File:                     323830343a333933633a613030303a3a2f3336203d3e20323636303230.roa (raw, json)
Hash identifier:          UnACqQxLPYwc1cnE8Q1EGCErL6Zm1kYjS00iW8dCOKQ=
Subject key identifier:   B4:15:56:97:BA:0E:7B:C9:FA:47:E8:03:C8:CA:3A:D8:9E:62:9D:47
Certificate issuer:       /CN=5149D310606046FDF83A78E8E9D89374FD1D0EF3
Certificate serial:       554AC9C9F3A75501C351684DDF90DCD17301D09E
Authority key identifier: 51:49:D3:10:60:60:46:FD:F8:3A:78:E8:E9:D8:93:74:FD:1D:0E:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/323830343a333933633a613030303a3a2f3336203d3e20323636303230.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     266020
IP address blocks:        2804:393c:a000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4a:c9:c9:f3:a7:55:01:c3:51:68:4d:df:90:dc:d1:73:01:d0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5149D310606046FDF83A78E8E9D89374FD1D0EF3
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:38:ee:1e:03:aa:ad:fa:01:85:a7:cf:eb:72:
                    69:40:0b:c7:0e:9f:7f:10:25:fb:26:a9:ca:93:70:
                    e1:17:71:95:e9:1a:70:cc:2c:f0:80:fd:a9:00:e1:
                    74:b9:cd:02:19:72:00:92:72:de:e3:45:fd:94:f9:
                    02:ef:a7:18:c3:18:6c:01:b9:73:f0:ea:db:d2:75:
                    b3:01:1a:ff:be:ae:99:d3:a9:86:11:5e:9c:02:91:
                    fd:fc:34:a5:df:43:3c:0a:36:f6:8a:da:ff:83:49:
                    98:2f:89:dc:b4:94:40:ad:c4:14:6d:3a:f6:1c:d9:
                    1e:64:20:f0:ab:c8:50:21:67:5c:4f:83:3d:24:fe:
                    59:78:de:51:6e:7b:ce:fc:5f:bf:ee:21:8c:ca:6b:
                    03:ed:eb:9f:ae:83:5d:94:66:66:51:37:a8:26:45:
                    41:95:e5:36:54:57:45:e5:e4:d3:84:58:53:22:d4:
                    8d:32:f3:9d:eb:64:de:dc:c7:0d:25:ca:36:19:86:
                    5e:50:a7:01:32:43:a5:11:11:36:16:32:10:1f:1f:
                    96:1c:2a:c7:3d:1c:a9:d2:7a:9d:80:5c:af:14:a3:
                    14:10:e6:0c:23:02:04:5f:99:07:a8:22:0f:a8:75:
                    9d:69:c0:e4:71:ca:83:a0:de:7d:c6:51:63:e1:43:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:15:56:97:BA:0E:7B:C9:FA:47:E8:03:C8:CA:3A:D8:9E:62:9D:47
            X509v3 Authority Key Identifier:
                keyid:51:49:D3:10:60:60:46:FD:F8:3A:78:E8:E9:D8:93:74:FD:1D:0E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5149D310606046FDF83A78E8E9D89374FD1D0EF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/1/323830343a333933633a613030303a3a2f3336203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:dd:04:fa:02:c7:f1:40:97:f9:9d:78:d7:b7:d1:d9:07:1b:
         13:50:69:88:2f:16:55:a0:dc:ed:d1:d1:36:5e:54:b2:87:7f:
         e3:25:3b:4e:52:16:13:59:0d:83:86:0a:0c:0f:b0:99:5b:b3:
         bd:aa:f7:bf:0b:3b:2d:31:fd:ae:a8:cf:0a:ad:d2:8a:4c:b5:
         5f:85:cd:7d:2b:4d:32:21:aa:a7:a9:95:8f:4b:59:fa:a2:32:
         b3:5b:9e:bf:5c:c5:fc:08:31:94:ba:a4:0b:32:49:96:8b:3f:
         74:28:99:00:3c:f0:4b:36:ec:5d:89:1c:c2:ab:b9:4d:5a:b0:
         90:a6:2a:61:13:ad:c8:ca:23:18:80:21:9f:d0:03:e3:75:55:
         6c:34:a4:d2:31:fe:9b:93:f3:a8:bf:28:e2:aa:bd:13:03:69:
         02:01:99:48:f7:2a:12:46:3b:34:4e:1a:73:66:87:f8:98:cc:
         cb:cf:7c:f0:92:e5:98:24:7f:eb:a6:8d:ad:ea:36:ca:cb:1a:
         c1:a1:8b:56:2f:59:b1:15:8b:fb:33:aa:2b:c1:55:ed:fe:7b:
         a5:b0:33:ea:34:c9:83:f0:5a:2c:e0:48:ba:3c:78:c3:d1:af:
         6a:66:d5:b7:83:eb:a9:ce:2b:2e:97:35:8b:c2:5b:f2:45:12:
         18:32:a3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----