Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3138313a3a2f34382d3438203d3e20323632373235.roa
File:                     323830343a333336303a3138313a3a2f34382d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          bQAz/YusNkhMEoP6jRtPUET9xnrPEbrZiO/AHY/DeIY=
Subject key identifier:   80:E8:50:29:A5:3D:57:9E:9A:56:F1:5B:2C:A9:8F:67:67:93:BB:C5
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       5A90F1307EC732DFDE5E3BB550D0DECBA4A4B77D
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3138313a3a2f34382d3438203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:49 +0000
ROA not before:           Mon 11 Nov 2024 20:56:49 +0000
ROA not after:            Mon 10 Nov 2025 21:01:49 +0000
asID:                     262725
IP address blocks:        2804:3360:181::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:90:f1:30:7e:c7:32:df:de:5e:3b:b5:50:d0:de:cb:a4:a4:b7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:49 2024 GMT
            Not After : Nov 10 21:01:49 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:73:9f:ab:2c:ea:a9:a2:b1:ce:85:d6:db:
                    d9:9a:0d:4f:71:c6:ff:04:87:8c:fb:39:bf:f0:18:
                    a2:d8:0b:f9:0f:46:32:4f:43:06:97:eb:1a:e3:6b:
                    9a:b6:ff:bc:d4:49:cc:e0:6d:44:04:65:dc:5b:7d:
                    3e:7e:e2:79:73:57:17:4f:91:b1:3f:c6:75:93:4e:
                    5f:a4:59:9e:87:47:0a:7a:df:23:5e:a1:cc:57:db:
                    b2:01:e4:7f:be:4a:b6:ae:de:ce:24:d6:b2:cb:9a:
                    d4:e0:9c:c9:7b:6b:d2:88:f0:05:56:4b:e7:6e:d6:
                    b5:c5:e6:7a:58:cf:e7:20:fa:3f:21:f2:f8:47:5e:
                    5d:ce:ab:ec:d8:7f:a4:bc:29:ff:67:6d:83:1a:ad:
                    58:74:0e:28:20:d3:2f:91:a4:9a:e8:5a:95:f3:59:
                    62:63:43:1d:65:21:e7:77:a2:87:92:a3:74:ab:32:
                    f0:d9:42:2f:51:f7:70:c0:04:e7:0f:36:37:77:8a:
                    98:62:c4:94:1c:05:e8:82:a6:db:b8:0d:23:57:56:
                    99:ac:9e:41:bb:cf:ee:62:8e:b0:3c:20:16:71:c7:
                    a8:0a:6c:f2:79:ea:c4:77:63:a7:a9:1e:17:af:75:
                    e7:27:87:68:97:20:14:68:8a:03:d5:67:d5:30:6f:
                    f5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E8:50:29:A5:3D:57:9E:9A:56:F1:5B:2C:A9:8F:67:67:93:BB:C5
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3138313a3a2f34382d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:181::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:e9:ab:f1:9e:d3:32:25:76:bd:36:23:79:80:ba:ba:c0:62:
         2c:78:25:6e:0a:68:9f:7f:25:ee:1c:fe:45:f1:05:1b:80:6e:
         fc:f5:15:0b:80:a8:cb:a5:93:79:1e:d3:45:c5:4b:30:f6:11:
         f9:26:d1:34:22:5a:c3:52:b6:cc:d8:73:97:50:62:e3:25:31:
         9a:c4:4c:9e:ae:de:86:86:a1:df:c7:a8:80:e8:01:3e:be:ef:
         40:80:33:99:8d:b5:4d:91:5d:35:13:04:9d:2b:ab:ce:b4:cf:
         c6:0b:0b:28:12:9e:36:df:be:e1:b0:27:40:38:e2:31:77:1e:
         1f:20:e6:40:bb:78:26:b0:e8:88:a7:1e:e0:e7:db:13:a1:75:
         cc:18:1e:5d:24:30:7a:c3:25:52:56:fd:04:01:ca:f4:d4:28:
         f7:14:c4:34:45:a3:db:d1:5d:fc:55:b0:ee:46:9d:bd:f9:aa:
         d1:7a:29:c1:92:89:1d:b7:fd:fc:e4:80:7f:23:eb:a6:f0:91:
         97:7c:7d:ef:e6:bd:85:d1:b7:82:37:0b:d0:e5:ca:8a:26:f7:
         be:9a:ab:62:18:ac:72:a6:76:87:30:87:45:36:f0:48:3a:b3:
         f9:1f:51:26:de:82:97:8b:41:46:fc:bc:5c:d4:4b:33:1a:f8:
         2e:3b:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----