Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/323830343a343234343a3a2f33322d3335203d3e20323637343839.roa
File:                     323830343a343234343a3a2f33322d3335203d3e20323637343839.roa (raw, json)
Hash identifier:          kfOAlEuTV7YUgllyaQimHZqDnsN1E6oP+7UEeK4GKtc=
Subject key identifier:   B2:51:A2:D9:7A:87:79:52:C1:E3:AD:A2:F8:1E:2B:B8:CD:50:AF:D2
Certificate issuer:       /CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
Certificate serial:       5C46FA1864B661FF940A6BC1E63A3523E22FD5E1
Authority key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/323830343a343234343a3a2f33322d3335203d3e20323637343839.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     267489
IP address blocks:        2804:4244::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:46:fa:18:64:b6:61:ff:94:0a:6b:c1:e6:3a:35:23:e2:2f:d5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ac:61:f6:5f:8d:b2:b7:59:77:68:f1:c5:01:
                    2b:d9:71:b4:27:45:aa:f2:e5:47:16:00:ae:ba:e5:
                    82:45:b0:ce:8f:a2:c6:1e:2d:f0:7f:f8:b1:35:79:
                    a5:0a:50:fe:02:3b:37:9d:56:58:bf:75:61:89:5f:
                    9a:91:ce:b4:6d:e3:51:5c:0f:c5:47:1d:7d:f0:bf:
                    0c:89:85:58:2f:e0:5f:4d:fc:7d:b0:5d:b3:45:99:
                    bf:e7:a5:aa:f6:67:73:d7:c5:a8:50:b8:e5:5b:d5:
                    83:55:e4:ad:c0:14:a5:8c:b1:20:d0:24:36:85:51:
                    ac:33:1a:ea:7a:30:74:0e:45:41:20:89:05:97:95:
                    4c:14:1a:3d:c2:a7:cb:92:a1:2c:00:60:f4:f4:7b:
                    57:37:f2:96:c2:0b:5e:b3:ae:7f:a2:49:2a:75:93:
                    0d:a0:58:0b:de:58:11:83:17:95:e4:44:7b:3d:bb:
                    f1:20:cd:7d:6a:b5:23:f7:4c:df:f5:4e:b2:59:d4:
                    d8:19:b9:f0:64:85:e0:11:e5:b1:03:d7:dc:2b:53:
                    12:4d:56:df:7a:22:dc:e2:18:31:ea:58:6e:47:55:
                    1b:61:15:e4:21:83:12:41:65:41:95:7d:09:fe:45:
                    da:db:90:dd:23:45:2a:97:ae:41:1a:5a:68:55:e0:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:51:A2:D9:7A:87:79:52:C1:E3:AD:A2:F8:1E:2B:B8:CD:50:AF:D2
            X509v3 Authority Key Identifier:
                keyid:23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/323830343a343234343a3a2f33322d3335203d3e20323637343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4244::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:3f:87:46:72:a6:ec:73:98:b3:1e:3d:6e:f0:d0:cb:f7:28:
         ee:14:06:0e:c6:bd:3b:b2:6e:79:01:0b:cb:ab:19:aa:60:69:
         9a:66:77:86:4b:e2:48:5b:5a:41:d9:f9:5a:90:6f:75:f4:7c:
         f4:ee:98:d4:33:9d:ca:b2:bc:61:1d:c9:6b:c8:35:0a:ce:e4:
         85:f0:53:3b:a1:e7:c0:4d:52:1d:b5:3f:d9:b9:f6:6f:6d:24:
         0a:50:1c:42:07:50:8c:ca:f1:3d:07:d6:ba:b5:58:79:8d:c6:
         80:ca:71:8f:d0:8a:34:9e:5c:67:ac:99:b8:cf:25:4b:82:6e:
         ba:46:be:c1:39:65:91:6d:51:3a:62:31:22:11:cf:73:9a:c3:
         21:10:f6:a9:3d:fa:f1:8e:15:16:75:f6:90:b0:c2:b7:04:f8:
         af:5f:d4:e5:fa:a2:41:f8:be:2c:b7:86:86:fa:a6:68:05:f5:
         60:e1:d5:f8:c1:fc:60:b3:75:58:25:44:39:50:bd:30:26:fc:
         e7:bb:48:78:10:ca:57:7a:74:ef:34:5d:85:2b:df:bd:8c:08:
         a8:8f:53:4f:a3:c2:c1:92:43:da:c7:ae:ec:6a:0f:78:d5:41:
         1c:38:38:e6:a1:61:1e:a6:b9:45:c8:ad:c1:25:4a:a0:b1:17:
         ac:99:61:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----