Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a383030303a3a2f33332d3333203d3e20323733363539.roa
File:                     323830343a386134383a383030303a3a2f33332d3333203d3e20323733363539.roa (raw, json)
Hash identifier:          zS4dhE58ZRxZMsFqMWxJKOgip4I4t+aYvtcqJhkcjQA=
Subject key identifier:   41:68:85:72:E8:B6:8C:9E:85:1B:8F:AA:F4:13:1A:48:DF:51:AB:5E
Certificate issuer:       /CN=A18299AB9A7616C093827EEE6A67FF105E7C632E
Certificate serial:       1191B0B19DB17A3BE5E31D7301E599ACD088FA6C
Authority key identifier: A1:82:99:AB:9A:76:16:C0:93:82:7E:EE:6A:67:FF:10:5E:7C:63:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a383030303a3a2f33332d3333203d3e20323733363539.roa
Signing time:             Tue 14 Jan 2025 19:56:46 +0000
ROA not before:           Tue 14 Jan 2025 19:51:46 +0000
ROA not after:            Tue 13 Jan 2026 19:56:46 +0000
asID:                     273659
IP address blocks:        2804:8a48:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:91:b0:b1:9d:b1:7a:3b:e5:e3:1d:73:01:e5:99:ac:d0:88:fa:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18299AB9A7616C093827EEE6A67FF105E7C632E
        Validity
            Not Before: Jan 14 19:51:46 2025 GMT
            Not After : Jan 13 19:56:46 2026 GMT
        Subject: CN=3082010A0282010100DF4A86B47577628719BC9F62B4C4A88DB4918F1311686994E93CB8A1F6E0BC2C7781DB54DB951B09040FD115C65D9BBA53792E50B0FD6EDF5F84F76C565BC681C78759C86BB68BF496FDA61D0BE67960900B76E5BAB12A504EB85047F7DE87AAF9C3FC58BE33818363E760E7CE8C6D9D74777D381B03F2999A88C087CBAB4CDB5D69500C87A4517E35FEB75B3909FCFA5F762FB621EE80F4F4CAF1DC4DB170F5C897D8552A327667C2DBAF3874B73E28032ECACAFFBB4C7CCB34BC1676B7A0512D74D2A39661782B8B3EF8692F5C7899A3FB65F5914DFFE25909FB4E102B39131253D36EA1A7A03EBFAD7BEC6CAFB68480F7DAAD41A41FBD85AFC32F84A414090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:86:b4:75:77:62:87:19:bc:9f:62:b4:c4:
                    a8:8d:b4:91:8f:13:11:68:69:94:e9:3c:b8:a1:f6:
                    e0:bc:2c:77:81:db:54:db:95:1b:09:04:0f:d1:15:
                    c6:5d:9b:ba:53:79:2e:50:b0:fd:6e:df:5f:84:f7:
                    6c:56:5b:c6:81:c7:87:59:c8:6b:b6:8b:f4:96:fd:
                    a6:1d:0b:e6:79:60:90:0b:76:e5:ba:b1:2a:50:4e:
                    b8:50:47:f7:de:87:aa:f9:c3:fc:58:be:33:81:83:
                    63:e7:60:e7:ce:8c:6d:9d:74:77:7d:38:1b:03:f2:
                    99:9a:88:c0:87:cb:ab:4c:db:5d:69:50:0c:87:a4:
                    51:7e:35:fe:b7:5b:39:09:fc:fa:5f:76:2f:b6:21:
                    ee:80:f4:f4:ca:f1:dc:4d:b1:70:f5:c8:97:d8:55:
                    2a:32:76:67:c2:db:af:38:74:b7:3e:28:03:2e:ca:
                    ca:ff:bb:4c:7c:cb:34:bc:16:76:b7:a0:51:2d:74:
                    d2:a3:96:61:78:2b:8b:3e:f8:69:2f:5c:78:99:a3:
                    fb:65:f5:91:4d:ff:e2:59:09:fb:4e:10:2b:39:13:
                    12:53:d3:6e:a1:a7:a0:3e:bf:ad:7b:ec:6c:af:b6:
                    84:80:f7:da:ad:41:a4:1f:bd:85:af:c3:2f:84:a4:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:68:85:72:E8:B6:8C:9E:85:1B:8F:AA:F4:13:1A:48:DF:51:AB:5E
            X509v3 Authority Key Identifier:
                keyid:A1:82:99:AB:9A:76:16:C0:93:82:7E:EE:6A:67:FF:10:5E:7C:63:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a383030303a3a2f33332d3333203d3e20323733363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a48:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         85:5a:42:ad:a5:a3:eb:86:60:d2:dd:72:20:08:4c:c7:3c:ae:
         ef:b9:6e:fd:4b:6e:c2:58:af:c6:3f:21:82:c9:3a:08:87:97:
         34:a9:82:97:c3:48:9b:f0:97:e1:2a:13:f4:e8:2f:e8:cf:5e:
         ff:89:2b:26:59:bf:92:b9:0d:57:69:46:44:2f:13:47:90:7c:
         3c:42:7a:53:d5:7d:ec:85:67:d5:1f:6a:9a:42:9f:9c:8b:ef:
         b4:00:af:8f:fe:24:1b:3a:84:0f:27:c8:7e:99:6a:17:f1:5a:
         23:63:da:3d:6f:3e:cc:a9:54:80:49:ed:34:5f:87:5f:3b:b9:
         3a:63:2a:9d:33:a9:09:ef:1a:26:ba:51:63:66:0f:94:4d:bd:
         b7:e9:93:1b:ee:15:e9:53:2c:43:67:64:e5:b1:a0:41:73:12:
         f3:02:dc:5b:72:f2:8f:f1:f8:7e:0b:ca:f2:9a:3e:06:71:ca:
         00:03:d3:c7:8d:9c:43:e2:3c:bc:b6:69:6f:15:3e:73:9e:18:
         47:92:aa:5e:93:ea:75:35:8c:4e:fe:0a:36:de:d6:2c:32:06:
         4b:60:2d:93:65:00:ec:59:9c:5a:e3:52:53:94:a7:5b:bb:5a:
         dd:1f:4c:21:c3:14:25:a2:28:a9:e4:5d:f5:89:dd:1b:a8:57:
         d3:4f:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----