Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/323830343a356631303a3a2f33322d3334203d3e20323639303734.roa
File:                     323830343a356631303a3a2f33322d3334203d3e20323639303734.roa (raw, json)
Hash identifier:          EgE12Z2r8Md4vAvu4qJLtfZSSFVDS0WEZ0j5NYecGbo=
Subject key identifier:   29:C4:47:44:23:AF:57:17:51:6A:8B:DC:62:F5:D6:70:10:0C:13:C9
Certificate issuer:       /CN=DEB3E64BDD427B030E2E130619A5C32699317FA8
Certificate serial:       37177E5E6C34C928E36498F75EB79566AD153443
Authority key identifier: DE:B3:E6:4B:DD:42:7B:03:0E:2E:13:06:19:A5:C3:26:99:31:7F:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/323830343a356631303a3a2f33322d3334203d3e20323639303734.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     269074
IP address blocks:        2804:5f10::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:17:7e:5e:6c:34:c9:28:e3:64:98:f7:5e:b7:95:66:ad:15:34:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEB3E64BDD427B030E2E130619A5C32699317FA8
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100CD338F7BE97DC0F84D9B88727DC4D42764802FF36C33C4DC8161D7617B80889BEA108C8A56812D89C9411CF65796BBAFD4B475EA1138CBAFC8B7BBADEF59DAA02614CA3262964738E6C9A35587C0E6CF027DE1CE98EBBF41D536FA46D18643D87776F107EFEED6A234508173E26F3BE86EA8EC2564E5EE541051AF1C1890427D1BBECDC8F7E1863071D96D9CAC7D6C5CE2653AC162117330A9733B783C52CD40D4EBDD4B67AF6115254CE9B7B03F4237F38BBFF785163D7E2991D6FCB4AFAB429C3A495F68C4FD0135B0D2913676ACE0DEC5579B32F9598F61686DF604EFF753995C630EE58100883EAF30F4849AA23699A81BFFDB32AC4C1E0C6EE7E2EF81710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:8f:7b:e9:7d:c0:f8:4d:9b:88:72:7d:c4:
                    d4:27:64:80:2f:f3:6c:33:c4:dc:81:61:d7:61:7b:
                    80:88:9b:ea:10:8c:8a:56:81:2d:89:c9:41:1c:f6:
                    57:96:bb:af:d4:b4:75:ea:11:38:cb:af:c8:b7:bb:
                    ad:ef:59:da:a0:26:14:ca:32:62:96:47:38:e6:c9:
                    a3:55:87:c0:e6:cf:02:7d:e1:ce:98:eb:bf:41:d5:
                    36:fa:46:d1:86:43:d8:77:76:f1:07:ef:ee:d6:a2:
                    34:50:81:73:e2:6f:3b:e8:6e:a8:ec:25:64:e5:ee:
                    54:10:51:af:1c:18:90:42:7d:1b:be:cd:c8:f7:e1:
                    86:30:71:d9:6d:9c:ac:7d:6c:5c:e2:65:3a:c1:62:
                    11:73:30:a9:73:3b:78:3c:52:cd:40:d4:eb:dd:4b:
                    67:af:61:15:25:4c:e9:b7:b0:3f:42:37:f3:8b:bf:
                    f7:85:16:3d:7e:29:91:d6:fc:b4:af:ab:42:9c:3a:
                    49:5f:68:c4:fd:01:35:b0:d2:91:36:76:ac:e0:de:
                    c5:57:9b:32:f9:59:8f:61:68:6d:f6:04:ef:f7:53:
                    99:5c:63:0e:e5:81:00:88:3e:af:30:f4:84:9a:a2:
                    36:99:a8:1b:ff:db:32:ac:4c:1e:0c:6e:e7:e2:ef:
                    81:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C4:47:44:23:AF:57:17:51:6A:8B:DC:62:F5:D6:70:10:0C:13:C9
            X509v3 Authority Key Identifier:
                keyid:DE:B3:E6:4B:DD:42:7B:03:0E:2E:13:06:19:A5:C3:26:99:31:7F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/323830343a356631303a3a2f33322d3334203d3e20323639303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:cc:e9:b8:43:3c:44:b5:f7:86:aa:ba:ab:c4:b6:46:90:6b:
         5c:9f:de:ae:15:2c:b6:18:e0:83:24:13:16:f2:b1:d8:69:3f:
         6a:1f:0a:77:92:67:33:45:28:a0:90:79:53:27:7b:55:7e:89:
         3b:a0:79:db:e8:c9:c6:ae:a3:6d:01:8d:3f:9a:4c:24:54:44:
         64:ec:da:81:ea:63:4c:45:22:83:fa:4c:b8:79:b1:89:a8:37:
         a3:cf:88:00:bd:79:f5:b3:3f:5a:e6:3d:ed:89:da:81:d9:43:
         dc:1c:67:54:ae:94:1c:d8:b2:09:b2:3e:f0:3f:78:dd:33:e3:
         80:10:71:74:0b:68:0d:af:e4:2a:45:ef:09:1a:bf:ce:3e:76:
         55:38:11:97:1e:36:1b:3c:f1:b8:9f:a3:1c:b8:d9:11:4c:6e:
         cf:dc:aa:27:1c:4e:fb:06:3c:4c:da:26:b9:7d:38:57:5e:11:
         47:ab:a9:3b:02:b8:6b:40:9f:08:13:17:22:60:44:55:f7:1e:
         59:b0:c2:9b:ee:15:02:81:ea:f4:44:09:01:bc:37:0a:68:2b:
         2e:67:9c:1c:82:5b:6a:8b:a4:49:be:8d:f5:2f:b5:e0:1a:f2:
         d6:93:e1:54:e7:c6:00:89:97:91:06:ef:dc:b1:26:18:e2:dd:
         68:28:3d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----