Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/323830343a353537303a3a2f33322d3332203d3e20323637393335.roa
File:                     323830343a353537303a3a2f33322d3332203d3e20323637393335.roa (raw, json)
Hash identifier:          DB8h6UWVONteRh9HyEzYGBx9BFOdOFPyEDCnHLTKNLU=
Subject key identifier:   A1:3C:39:34:77:FE:CD:CD:15:57:DE:35:69:C0:5B:9F:38:3A:CA:B5
Certificate issuer:       /CN=1959051F4935A111953C994E631635C9603EF7DD
Certificate serial:       204AA8EA8661829E7B5DEAF6FE22955D4B8768CE
Authority key identifier: 19:59:05:1F:49:35:A1:11:95:3C:99:4E:63:16:35:C9:60:3E:F7:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1959051F4935A111953C994E631635C9603EF7DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/323830343a353537303a3a2f33322d3332203d3e20323637393335.roa
Signing time:             Mon 22 Jul 2024 14:56:04 +0000
ROA not before:           Mon 22 Jul 2024 14:51:04 +0000
ROA not after:            Mon 21 Jul 2025 14:56:04 +0000
asID:                     267935
IP address blocks:        2804:5570::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4a:a8:ea:86:61:82:9e:7b:5d:ea:f6:fe:22:95:5d:4b:87:68:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1959051F4935A111953C994E631635C9603EF7DD
        Validity
            Not Before: Jul 22 14:51:04 2024 GMT
            Not After : Jul 21 14:56:04 2025 GMT
        Subject: CN=A13C393477FECDCD1557DE3569C05B9F383ACAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:5a:3d:40:97:7a:4a:38:e7:0b:17:94:5a:
                    fd:9b:b3:9c:26:10:d7:2a:9f:99:cb:65:4a:f7:bc:
                    49:eb:0f:04:25:39:6f:0d:ca:d2:5b:e7:e2:e1:2d:
                    17:2e:f9:b4:14:08:04:7f:60:62:9a:57:39:4f:73:
                    10:f4:fa:9e:ee:ba:98:8b:1a:cb:04:26:8e:37:96:
                    bc:10:1b:97:00:b2:64:fb:b4:71:05:b8:71:6c:ed:
                    77:6f:d7:bb:52:0a:22:d4:84:72:09:1b:90:fe:6d:
                    ba:c1:bd:8e:54:6d:dd:22:a3:5c:33:92:c1:ae:ef:
                    bd:00:cd:67:cc:23:1b:51:ee:41:c0:4e:b4:20:ef:
                    2e:d7:0b:04:4a:5b:2e:94:47:e3:e9:b0:87:84:6d:
                    bf:0b:5e:67:ef:ac:a4:41:65:c6:e5:5e:e8:cb:d2:
                    35:aa:77:ed:dc:02:50:df:54:0c:0d:97:c3:70:83:
                    26:1f:5d:55:73:80:5a:e2:98:f6:a7:a0:2c:58:33:
                    de:1d:61:14:c8:10:9d:d7:3d:12:90:d0:05:84:09:
                    61:15:c4:e6:02:9e:ee:45:b6:07:11:3a:01:fc:ed:
                    e4:3e:48:a1:d5:e6:4f:42:c2:bf:03:b9:1e:3c:12:
                    e0:e0:32:f6:40:1b:1f:1d:21:4b:18:85:9c:87:d9:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3C:39:34:77:FE:CD:CD:15:57:DE:35:69:C0:5B:9F:38:3A:CA:B5
            X509v3 Authority Key Identifier:
                keyid:19:59:05:1F:49:35:A1:11:95:3C:99:4E:63:16:35:C9:60:3E:F7:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/1959051F4935A111953C994E631635C9603EF7DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1959051F4935A111953C994E631635C9603EF7DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/323830343a353537303a3a2f33322d3332203d3e20323637393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5570::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:67:9a:f7:48:52:3c:ea:f8:db:48:18:9b:8d:82:6b:c8:05:
         d7:dd:c4:5f:5e:ae:b0:51:71:ef:4a:54:70:d4:a3:2c:7b:f2:
         33:82:cc:7e:e7:da:64:41:bd:9b:7b:09:ea:9f:04:63:ae:c3:
         98:c5:96:77:9d:09:e5:3c:61:a8:37:68:49:0f:fd:5c:d4:2c:
         52:1e:8a:80:68:5c:c5:74:44:de:fd:6b:66:0c:23:4f:08:b5:
         9c:10:e3:34:f7:2a:4f:06:b5:e4:e2:5f:3a:e5:4c:27:25:17:
         32:45:43:d3:e3:01:7f:1b:f7:c3:ce:7a:23:da:fe:e1:2a:f9:
         40:6d:e2:b5:59:32:8a:82:46:f5:3d:c7:86:9d:b4:3c:56:7e:
         87:bf:55:a4:c1:17:bd:a1:36:b2:4a:99:3b:1d:29:e7:18:3e:
         a4:a4:17:60:04:36:b5:94:f8:94:21:dd:85:da:8a:25:5f:53:
         50:0b:ed:50:4a:66:d5:e3:31:bb:4b:c2:e5:86:9d:b0:fe:37:
         d5:94:3b:b9:88:ea:24:20:4d:fd:27:2f:9d:eb:3b:d9:cf:de:
         20:35:e4:af:22:2b:59:5d:81:e1:99:08:b7:f3:63:70:e5:41:
         df:ac:1d:55:2c:3c:b8:84:cd:6b:d3:aa:a9:0e:db:57:95:e5:
         b5:58:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----