Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373738303a3a2f34312d3431203d3e203631353931.roa
File:                     323830343a323331633a373738303a3a2f34312d3431203d3e203631353931.roa (raw, json)
Hash identifier:          apfQIZnJf/0OSLfXVdHu48tWxCwkuSMV9HJjVYrdZJI=
Subject key identifier:   37:79:99:4E:7F:1D:DF:CE:E8:30:B9:B6:5F:10:DC:F0:15:E2:A3:BC
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       51B54A4F44D08CF7D3E9F1E6156E103E86E91A19
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373738303a3a2f34312d3431203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 18:34:46 +0000
ROA not before:           Sat 01 Feb 2025 18:29:46 +0000
ROA not after:            Sat 31 Jan 2026 18:34:46 +0000
asID:                     61591
IP address blocks:        2804:231c:7780::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b5:4a:4f:44:d0:8c:f7:d3:e9:f1:e6:15:6e:10:3e:86:e9:1a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 18:29:46 2025 GMT
            Not After : Jan 31 18:34:46 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:01:b0:58:2f:1d:49:fe:ef:f3:3f:2b:1d:
                    00:07:81:5b:1f:26:fa:f7:07:85:90:34:33:12:12:
                    78:ab:3a:1b:45:ce:d9:6c:90:4a:4f:08:7f:a0:ee:
                    58:c8:91:19:f8:3a:78:7a:8e:f9:64:b0:e7:c7:e7:
                    1b:df:b1:8d:41:9e:a2:54:14:a4:5d:3e:a0:61:15:
                    f8:3e:0c:a9:ce:0c:0b:f7:dd:ac:42:56:02:21:20:
                    75:ec:5e:bf:09:21:d7:ca:ad:99:e3:b9:16:00:a9:
                    5b:8a:ba:f8:df:ec:c7:b1:cc:1d:e3:12:e2:31:9c:
                    48:b9:55:1d:dc:3c:52:1a:28:74:13:6d:fa:e8:91:
                    8e:ec:5d:28:43:98:cf:8c:7f:0a:8c:27:e8:c5:86:
                    36:d9:cd:cd:3d:7b:a3:f8:64:b5:ea:da:43:c9:56:
                    9e:12:5e:5e:21:9e:c5:20:19:e7:6f:38:94:64:31:
                    3c:61:50:b2:e6:bd:e0:7a:ba:3d:94:ff:0f:50:74:
                    1c:a0:1a:06:ad:7b:29:3b:df:b2:cb:85:56:66:2c:
                    04:b5:3c:45:df:52:85:a9:45:ff:6b:d6:92:dd:1b:
                    9b:18:27:d8:18:16:7c:3c:df:58:f0:9a:ab:7d:cd:
                    e5:1a:89:4b:d8:00:f2:09:c0:b9:57:cc:17:6e:2c:
                    b6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:79:99:4E:7F:1D:DF:CE:E8:30:B9:B6:5F:10:DC:F0:15:E2:A3:BC
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373738303a3a2f34312d3431203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:7780::/41

    Signature Algorithm: sha256WithRSAEncryption
         57:23:16:ce:03:ed:4d:b1:c7:87:5e:2d:c8:df:60:f5:66:8f:
         41:8f:5b:2f:6e:bb:fb:fc:08:e1:48:ff:4f:0a:19:aa:6d:90:
         82:78:46:d7:fe:ab:be:94:4d:e6:ac:0c:d3:e8:b2:65:3d:37:
         ca:88:4e:e5:c6:af:c4:45:7a:19:a8:40:3a:12:23:f4:bb:8a:
         ba:a9:12:fa:6a:c9:3c:f4:dc:a6:db:36:ab:17:96:ff:a1:91:
         86:e6:f9:2c:76:52:c2:c8:67:89:99:eb:84:e6:c7:12:5a:8a:
         0e:2e:44:05:12:18:fa:49:ef:85:fe:0d:c9:99:0c:26:e8:fb:
         35:5c:ee:fb:1e:b1:42:73:cc:06:0e:60:05:ec:b6:9a:89:53:
         9a:b0:b2:da:88:9c:5e:11:77:d4:a6:a3:b2:65:b6:b6:79:de:
         6d:24:ff:2d:1b:6d:28:f0:37:2e:06:73:ae:fd:63:21:8b:01:
         87:6d:1a:18:e1:b4:7b:e2:dd:55:f9:71:47:42:cf:7f:ea:9c:
         ef:09:d6:8b:e2:c5:e7:76:db:21:6c:15:b6:1d:9b:85:60:4b:
         b3:77:19:2e:b9:eb:77:d8:4a:69:22:ad:d4:e0:d6:9a:ee:0f:
         61:5d:b0:04:c7:ad:50:2c:6a:ce:b7:d9:84:ef:f2:de:9c:49:
         62:55:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----