Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3632343a3a2f33322d3438203d3e203238323833.roa
File:                     323830343a3632343a3a2f33322d3438203d3e203238323833.roa (raw, json)
Hash identifier:          C3kqZE2BCpasE95TSyXpqYe7BDGa4oCKK4fgSF9g/Kw=
Subject key identifier:   90:82:86:89:CB:56:43:F5:29:73:AF:49:55:4C:5B:54:73:32:8E:F5
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       41889666A3F76C3F4A25B01086200989760CFD93
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3632343a3a2f33322d3438203d3e203238323833.roa
Signing time:             Thu 06 Mar 2025 20:00:00 +0000
ROA not before:           Thu 06 Mar 2025 19:55:00 +0000
ROA not after:            Fri 06 Mar 2026 20:00:00 +0000
asID:                     28283
IP address blocks:        2804:624::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:88:96:66:a3:f7:6c:3f:4a:25:b0:10:86:20:09:89:76:0c:fd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Mar  6 19:55:00 2025 GMT
            Not After : Mar  6 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:06:13:ca:cf:57:49:c6:a9:8a:90:9c:da:cb:
                    d3:34:0f:20:6e:30:9c:fd:e2:12:0a:aa:43:24:78:
                    3d:2f:0b:2f:59:b7:43:33:d2:b3:02:0b:4f:04:15:
                    13:ac:f5:bc:cf:74:41:c3:0b:2c:c8:10:1e:1c:0a:
                    f9:3a:fe:af:e1:e1:07:33:fe:db:31:96:42:e6:f0:
                    68:d7:a3:63:0d:97:fd:fc:2e:c8:d5:20:9f:73:27:
                    66:dd:e4:d3:89:ea:4d:d7:90:3a:ea:3a:ae:e1:f5:
                    e9:b5:02:6e:c5:cd:99:87:7c:2c:0a:d8:3f:20:92:
                    c4:a6:f9:07:3e:fd:10:d8:04:fc:89:12:0c:22:3f:
                    90:9a:9e:68:08:9d:2b:ff:e0:24:1c:b7:a3:bf:e2:
                    af:40:fc:b3:e6:ec:f4:17:bd:50:2e:89:14:41:d0:
                    ab:95:99:5e:8c:ad:47:c4:6b:5e:8d:34:62:b8:4b:
                    e2:fc:59:9a:57:2d:73:5b:ff:3b:58:56:c8:de:45:
                    61:f1:7e:bc:ae:ba:b8:83:95:b1:0c:52:2c:86:85:
                    ee:31:07:da:46:2e:c9:f1:8c:88:84:a6:0d:13:b9:
                    cc:93:79:e3:f0:59:9e:f6:b4:52:cb:3e:cb:1e:99:
                    e3:b6:9f:2c:5b:7b:c7:cb:64:cc:3b:f1:1f:d8:68:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:82:86:89:CB:56:43:F5:29:73:AF:49:55:4C:5B:54:73:32:8E:F5
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/323830343a3632343a3a2f33322d3438203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:624::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:b0:b8:09:42:eb:00:7e:c5:bd:8a:e9:be:69:9a:f3:ff:42:
         c8:3d:cd:f0:34:5a:3e:da:1b:9b:51:92:71:41:1b:39:f0:41:
         21:e6:a8:15:23:df:bd:36:b6:57:3d:a5:70:85:ee:ce:50:fe:
         69:af:be:21:ce:e2:35:67:a0:55:7c:0d:4a:e2:75:80:4d:0f:
         e1:18:23:84:61:4d:9c:da:8e:65:da:cf:c2:98:ca:98:10:2a:
         00:af:2c:da:62:40:18:fa:a3:2c:d0:d3:4f:ad:d5:ea:c2:11:
         bc:98:0d:f7:68:3f:46:5d:8e:c5:11:d8:01:60:dc:c1:b2:d4:
         22:89:ab:f5:2f:ff:15:5a:2c:8f:9c:c3:1b:22:c0:17:cd:21:
         09:98:49:0f:44:57:de:da:fb:a0:46:4e:2b:50:fb:c4:46:2d:
         eb:ae:ee:98:5c:0f:97:ff:da:92:be:68:28:85:d0:1b:40:fe:
         8e:6d:66:e3:80:6c:d4:b3:3c:b4:4c:81:fb:9e:06:8b:07:59:
         48:fa:b6:c2:ab:33:48:5d:ca:17:7c:c8:44:6b:cd:11:68:89:
         98:07:5e:c3:52:b1:79:3e:2f:3a:4e:ce:3a:18:a0:24:c0:11:
         b1:3a:ef:1a:c7:d8:60:0b:41:5c:bb:fa:d1:1b:fe:b4:a7:95:
         e8:d3:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----