Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666430303a3a2f34302d3430203d3e20323632373235.roa
File:                     323830343a333336303a666430303a3a2f34302d3430203d3e20323632373235.roa (raw, json)
Hash identifier:          6MF/Zn7KOWg8ZoXu2Na6kSsgjNj26+us3ro0P8JYY4Y=
Subject key identifier:   A7:0C:0F:27:C9:56:63:67:D8:A3:17:3A:E4:A2:97:64:5E:3E:90:84
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       174433745624EC39C0B574FB9C1DC1BB9CB41BCD
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666430303a3a2f34302d3430203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:49 +0000
ROA not before:           Mon 11 Nov 2024 20:56:49 +0000
ROA not after:            Mon 10 Nov 2025 21:01:49 +0000
asID:                     262725
IP address blocks:        2804:3360:fd00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:44:33:74:56:24:ec:39:c0:b5:74:fb:9c:1d:c1:bb:9c:b4:1b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:49 2024 GMT
            Not After : Nov 10 21:01:49 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:31:5b:d3:21:17:1c:6e:ab:4c:66:92:19:
                    74:85:bd:fc:74:32:44:f1:70:c2:95:82:09:cd:b7:
                    68:b0:41:d5:1d:1d:0c:2a:cd:8c:48:f7:26:ab:1e:
                    03:c3:4f:bf:36:e3:2d:22:32:59:70:3d:3b:f9:36:
                    96:9a:83:46:f8:8a:cc:bd:15:85:17:84:d2:1c:67:
                    66:de:16:aa:04:84:87:7c:1d:2a:86:1a:23:44:a1:
                    11:ea:ac:cb:25:fc:b0:62:83:76:0e:79:63:cb:ad:
                    f8:09:14:c8:e0:41:fa:66:02:c3:34:70:d5:fc:5a:
                    7b:ca:3d:f7:ba:57:d8:82:15:02:ae:3b:ef:33:7b:
                    14:ba:ff:cf:dc:e8:e2:c9:ba:2b:d4:33:b7:1b:fd:
                    a9:e0:6f:e4:04:78:24:3b:08:eb:b1:25:69:72:94:
                    09:5d:b3:aa:68:55:d4:69:9a:f5:24:b1:13:c2:dd:
                    95:38:af:74:83:87:2a:b4:76:6c:07:2d:68:84:d2:
                    e1:05:c4:14:40:4a:a3:25:ca:d6:4f:69:cc:42:28:
                    3b:f8:a0:e1:57:e5:15:e4:d1:eb:40:d3:a5:b4:28:
                    ed:c1:2a:c0:db:72:7c:d4:80:84:9f:f2:1e:59:b3:
                    99:73:7a:e8:27:3c:f7:ed:3e:b4:44:27:00:b4:77:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0C:0F:27:C9:56:63:67:D8:A3:17:3A:E4:A2:97:64:5E:3E:90:84
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a666430303a3a2f34302d3430203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:f6:22:4a:19:e4:a8:7e:aa:c0:02:74:68:2b:d9:b4:69:78:
         36:55:a3:74:0f:81:54:c8:5e:bd:86:c9:42:62:14:d5:cc:bc:
         2b:c4:e7:80:cf:9e:51:cf:32:4b:03:9b:c5:95:15:b6:ba:d9:
         dc:22:2e:08:68:2e:fc:f0:9d:54:74:ec:6d:55:4b:37:ff:7d:
         d8:e1:ce:c4:21:ea:9b:92:1b:81:40:e7:53:47:06:11:ca:4c:
         81:7f:6f:e7:0f:e0:e5:7d:44:7b:58:6d:dc:3e:aa:7d:ba:48:
         72:3c:ce:d8:ae:d0:bd:80:b4:08:c4:df:2e:c7:fc:f4:6a:76:
         f1:9d:52:13:1e:a1:19:55:ab:77:88:e3:a4:94:ee:aa:80:d4:
         89:ed:30:dd:a9:82:8f:1b:f0:96:ae:4f:43:07:67:eb:1a:d6:
         14:2b:c0:e8:da:aa:1b:d5:c9:2f:8f:b4:10:57:8f:e3:d3:92:
         39:44:4d:50:86:a3:0b:b2:63:94:1e:c1:9b:3b:32:f8:9b:5d:
         aa:9b:9e:78:31:c7:66:4f:b8:b9:34:7f:ad:2a:75:91:af:f9:
         d9:f8:7d:4e:d2:19:88:f6:65:de:17:2f:41:ab:f5:f5:6c:18:
         47:d4:ca:9d:46:fb:b0:73:6f:e9:1b:98:e5:60:7c:95:92:bf:
         8d:95:4e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----