Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3337383a3a2f33322d3438203d3e203238323833.roa
File:                     323830343a3337383a3a2f33322d3438203d3e203238323833.roa (raw, json)
Hash identifier:          q0f+USvDHxCNSWqMKt0/JW6vRCo07QQqe0Zrnttx4WA=
Subject key identifier:   6C:04:7F:E4:85:04:CB:B0:96:52:C1:AF:C7:93:23:1F:4D:F3:58:19
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       4860796998E2B83F2A8886716DD1D10B6452B53C
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3337383a3a2f33322d3438203d3e203238323833.roa
Signing time:             Thu 06 Mar 2025 20:00:01 +0000
ROA not before:           Thu 06 Mar 2025 19:55:01 +0000
ROA not after:            Fri 06 Mar 2026 20:00:01 +0000
asID:                     28283
IP address blocks:        2804:378::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:60:79:69:98:e2:b8:3f:2a:88:86:71:6d:d1:d1:0b:64:52:b5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Mar  6 19:55:01 2025 GMT
            Not After : Mar  6 20:00:01 2026 GMT
        Subject: CN=3082010A0282010100B37AD307B5BFC0E98DD17CE76A515FF179FEDDC421060F9B3F0B56BC99197AB1743F59868C6202B35CE4AB9961B50B984BE538C2C5A04596B05237869D6955A0E89A1AB40803671A4B0EE6E3DAD78B1F88CBADCB39F92246AE9616088D37BA22A5788296855736118241E492AE523D19F1190E2A43C38F013E4D1CF2F8AE07F4C1EBE2C4401CF9EF65610BA78A8A1609EFD3B4757BCF75B69A5A75F208549056170595AEA0F59A485C7570BA3FC36A5837E5D2B29F0B9C60B62914447969C9FD3DBCCAFE084642C3051BAF8FF1C83F11AA556EEDB0DD2D99B54307677A489596A558E4608256337C769892B6353B1E7F81208F97B41FDE043D39E6CE0907CFFB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:d3:07:b5:bf:c0:e9:8d:d1:7c:e7:6a:51:
                    5f:f1:79:fe:dd:c4:21:06:0f:9b:3f:0b:56:bc:99:
                    19:7a:b1:74:3f:59:86:8c:62:02:b3:5c:e4:ab:99:
                    61:b5:0b:98:4b:e5:38:c2:c5:a0:45:96:b0:52:37:
                    86:9d:69:55:a0:e8:9a:1a:b4:08:03:67:1a:4b:0e:
                    e6:e3:da:d7:8b:1f:88:cb:ad:cb:39:f9:22:46:ae:
                    96:16:08:8d:37:ba:22:a5:78:82:96:85:57:36:11:
                    82:41:e4:92:ae:52:3d:19:f1:19:0e:2a:43:c3:8f:
                    01:3e:4d:1c:f2:f8:ae:07:f4:c1:eb:e2:c4:40:1c:
                    f9:ef:65:61:0b:a7:8a:8a:16:09:ef:d3:b4:75:7b:
                    cf:75:b6:9a:5a:75:f2:08:54:90:56:17:05:95:ae:
                    a0:f5:9a:48:5c:75:70:ba:3f:c3:6a:58:37:e5:d2:
                    b2:9f:0b:9c:60:b6:29:14:44:79:69:c9:fd:3d:bc:
                    ca:fe:08:46:42:c3:05:1b:af:8f:f1:c8:3f:11:aa:
                    55:6e:ed:b0:dd:2d:99:b5:43:07:67:7a:48:95:96:
                    a5:58:e4:60:82:56:33:7c:76:98:92:b6:35:3b:1e:
                    7f:81:20:8f:97:b4:1f:de:04:3d:39:e6:ce:09:07:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:04:7F:E4:85:04:CB:B0:96:52:C1:AF:C7:93:23:1F:4D:F3:58:19
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3337383a3a2f33322d3438203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:378::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:a6:2d:18:86:3f:05:b3:9a:f2:44:b0:d1:f0:44:76:8f:ab:
         07:0f:41:d5:f0:4e:ea:51:f6:83:7b:b1:ac:fd:39:bd:72:62:
         1d:fb:b2:30:b5:12:3d:fa:9e:83:cb:a6:a5:db:d3:02:3e:dd:
         3a:11:66:34:60:8e:85:53:70:61:7c:43:6a:36:a8:63:32:2a:
         19:42:ec:71:fc:80:93:3b:28:72:55:50:9e:6a:06:2c:83:5b:
         c2:b9:ea:84:7e:a3:7c:30:eb:4c:34:96:b0:8c:a0:a7:75:bd:
         6e:a8:22:13:f7:fd:85:a7:f3:da:8c:5a:93:2f:e4:fb:1a:c8:
         a7:25:5c:bb:8e:bf:20:a6:79:20:f8:8c:78:02:69:fb:67:0f:
         7a:6d:2d:86:5e:5c:55:97:b3:e2:22:73:89:a1:c5:39:81:d9:
         61:a9:3e:e9:62:da:93:fe:e1:fb:d3:56:a0:22:57:e7:a2:d9:
         64:6e:dc:e0:78:24:63:5b:01:76:eb:4a:62:72:b2:15:31:ca:
         81:8c:ae:c1:f7:5a:48:39:89:67:3b:c2:32:7a:f5:c2:b6:93:
         25:5a:15:0d:6c:38:42:9e:87:42:ab:e9:d9:33:4b:95:b8:eb:
         9b:c3:b8:09:eb:32:96:57:54:35:0e:ba:46:e7:8f:2a:59:54:
         ed:d3:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----