Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/323830343a333638343a3a2f33322d313238203d3e20323636333533.roa
File:                     323830343a333638343a3a2f33322d313238203d3e20323636333533.roa (raw, json)
Hash identifier:          G/ZJovYrdmUElrwmL+KVXviLurNj01ggeZrasqL5W+s=
Subject key identifier:   F6:AC:ED:2E:BC:11:73:3A:E0:13:03:53:AD:F5:D7:5D:71:76:EB:C4
Certificate issuer:       /CN=0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9
Certificate serial:       27803920107ADF1D6EC558435ACF73ACCFE8437E
Authority key identifier: 0D:92:63:21:47:5D:43:A8:FD:9B:5E:13:76:B9:FC:E5:5D:3E:AA:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/323830343a333638343a3a2f33322d313238203d3e20323636333533.roa
Signing time:             Tue 26 Nov 2024 13:03:06 +0000
ROA not before:           Tue 26 Nov 2024 12:58:06 +0000
ROA not after:            Tue 25 Nov 2025 13:03:06 +0000
asID:                     266353
IP address blocks:        2804:3684::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:80:39:20:10:7a:df:1d:6e:c5:58:43:5a:cf:73:ac:cf:e8:43:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9
        Validity
            Not Before: Nov 26 12:58:06 2024 GMT
            Not After : Nov 25 13:03:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:ef:2f:d7:ac:d8:a6:c4:97:ee:7a:67:04:
                    69:db:18:59:df:1d:94:c2:ce:d6:00:ae:f0:c9:54:
                    0f:4e:dc:db:1b:85:cc:4c:7e:a0:71:81:29:08:e5:
                    bd:2a:e6:bb:80:1c:02:7d:f7:da:87:53:5d:c1:33:
                    a7:f4:2b:52:bd:3d:d4:1d:5d:15:74:d7:5c:8d:4a:
                    f2:48:3d:d2:61:0b:30:17:e4:ed:43:a9:8b:00:f0:
                    c9:ca:11:c6:97:b3:13:55:b1:71:30:e5:e2:6f:77:
                    fa:fd:0f:2d:67:6e:28:b8:95:14:40:76:e1:7b:92:
                    e1:29:d0:39:de:d5:f1:10:1a:6b:b3:bb:65:60:71:
                    0a:ff:fe:5f:b5:3c:98:d5:4b:f0:2a:d7:da:9a:75:
                    70:e5:0d:05:e8:6e:ed:7b:ec:46:fb:2a:c3:dd:44:
                    be:7c:e8:18:34:8d:57:b6:49:a1:35:e1:3a:d1:9d:
                    a0:0f:2d:ef:ca:7a:46:86:f0:a9:dd:f9:27:53:70:
                    60:af:3b:9b:a8:bb:18:29:01:8d:64:a9:09:be:3f:
                    e1:92:a0:c6:52:92:50:24:d3:8a:8f:00:83:5f:c8:
                    12:8c:61:0e:c9:65:89:18:6c:90:e6:38:d7:9a:6a:
                    76:bc:8c:45:f0:82:30:80:87:0a:77:01:f4:10:25:
                    67:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AC:ED:2E:BC:11:73:3A:E0:13:03:53:AD:F5:D7:5D:71:76:EB:C4
            X509v3 Authority Key Identifier:
                keyid:0D:92:63:21:47:5D:43:A8:FD:9B:5E:13:76:B9:FC:E5:5D:3E:AA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/323830343a333638343a3a2f33322d313238203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3684::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:e6:3c:42:85:62:a1:40:c9:d2:40:4a:5d:40:f3:d7:c8:c5:
         05:02:bb:4b:fd:57:9d:e5:46:14:4d:21:2b:2a:7b:72:2e:1e:
         ff:2a:df:c0:94:2b:49:7d:e4:f3:af:fc:2d:0d:a7:de:70:6a:
         68:da:f0:54:bb:4f:c8:0d:37:bc:05:a2:88:42:fe:b4:ef:49:
         f8:1f:7d:35:35:a4:7d:87:c0:12:66:3b:79:37:73:70:e4:08:
         0a:64:44:08:cb:fe:3a:2d:58:77:ce:d6:db:66:94:6b:af:5f:
         57:69:b0:b0:e4:84:49:bf:70:a0:f5:9e:98:8a:a7:e2:4e:29:
         8f:a4:28:03:c2:f6:19:42:ac:cf:fd:ad:ef:b5:fc:ff:b6:e8:
         8d:ce:6f:b5:4a:a1:ac:8c:86:5a:29:1b:b2:ac:77:59:0d:ea:
         6a:3c:7b:bb:cc:b8:1f:0a:2b:6d:ef:8c:ed:8d:4e:9e:5c:07:
         aa:87:b4:7e:db:8e:5a:4c:24:79:d1:09:f4:64:9e:08:28:08:
         d0:1f:25:9f:0d:82:69:6a:79:51:81:a2:d9:a4:ed:c0:df:8d:
         db:15:4e:2e:55:1c:51:d2:1c:3a:dc:c6:cf:e7:aa:28:8a:72:
         2b:d9:84:00:0f:8d:c9:e5:f2:0d:dc:1d:89:03:dc:20:ac:96:
         11:a9:28:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----