Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33342d3334203d3e20323635313735.roa
File:                     323830343a326263383a3a2f33342d3334203d3e20323635313735.roa (raw, json)
Hash identifier:          829WNxue/X5slbr8dUsPQG+1I12Y5987Gtzbom/zvqw=
Subject key identifier:   37:B5:E9:50:5C:1C:43:01:15:9F:30:C5:68:43:45:32:CC:E9:FB:D0
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       20E82040BD427269AAD3392E39E671FA7BEB4515
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33342d3334203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:52 +0000
ROA not before:           Tue 01 Oct 2024 14:00:52 +0000
ROA not after:            Tue 30 Sep 2025 14:05:52 +0000
asID:                     265175
IP address blocks:        2804:2bc8::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e8:20:40:bd:42:72:69:aa:d3:39:2e:39:e6:71:fa:7b:eb:45:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:52 2024 GMT
            Not After : Sep 30 14:05:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f8:e7:55:bf:8d:d3:ed:0e:ef:b6:7f:e6:22:
                    a2:b8:18:48:42:c3:44:2e:5e:5d:82:ff:95:74:11:
                    d0:95:ee:54:bd:40:75:83:24:6c:4e:a2:a5:8c:87:
                    11:a5:15:50:81:c6:2f:c0:15:de:cd:9f:42:4b:f5:
                    a9:2c:11:86:90:0d:db:aa:e6:b3:d5:c7:b8:ce:c9:
                    7d:ef:01:fe:ee:9d:85:02:93:e7:74:c5:36:e3:3b:
                    47:7b:d2:62:0d:70:f7:a2:93:72:fb:9c:3c:ed:a4:
                    0f:34:1d:9e:de:2e:8f:72:69:40:b6:1a:c3:58:1c:
                    2c:cc:18:e5:f3:71:6c:9e:da:a1:bb:01:06:5c:48:
                    94:74:2b:1b:8d:ee:ac:82:72:32:8f:45:26:78:02:
                    9f:af:e2:0c:48:36:f2:4a:e9:5f:e5:bf:9b:5c:96:
                    e1:53:9f:47:c3:37:6b:7e:25:cf:7b:7f:bc:b0:32:
                    fc:96:0e:a8:0f:3f:ff:66:da:72:81:81:49:49:5b:
                    07:81:11:25:32:ce:fd:ae:01:05:fc:75:7d:24:39:
                    ed:71:d1:10:f9:bb:33:64:b7:0a:da:c2:a6:eb:4c:
                    ea:85:10:ac:b7:3f:64:ef:98:76:95:5f:3f:42:05:
                    ee:36:00:b8:8d:80:fb:de:d8:7f:32:07:84:e5:e6:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B5:E9:50:5C:1C:43:01:15:9F:30:C5:68:43:45:32:CC:E9:FB:D0
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33342d3334203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8::/34

    Signature Algorithm: sha256WithRSAEncryption
         6a:7e:67:26:41:94:50:39:3b:9d:b5:82:12:17:8b:9e:cd:aa:
         cb:86:06:a7:75:05:b1:fd:b2:5e:bf:0d:a1:5e:e3:bb:a6:44:
         b5:40:b4:a8:de:54:0f:bf:00:3b:84:a9:0e:9b:52:2f:d3:f2:
         9a:7e:17:01:4c:2a:c3:f4:2e:8b:98:8e:fb:2c:c5:b4:fa:8f:
         fc:19:21:16:9a:88:3f:7f:e1:40:7d:3c:05:e9:c2:67:89:47:
         79:f2:8c:0c:be:e5:28:91:de:dd:f3:ea:70:d6:91:d9:b2:be:
         69:7a:bf:86:28:6e:80:66:53:75:20:91:bf:62:91:ae:5a:5d:
         4a:ef:ba:5e:a3:92:0d:bf:6b:ea:af:95:f1:63:95:88:0b:19:
         36:5a:74:d4:16:0f:1d:84:e1:84:30:32:ce:32:66:83:18:68:
         78:db:ef:47:a4:23:26:cd:49:30:be:3e:eb:1b:56:11:e8:71:
         94:08:40:0b:33:33:f5:6a:eb:99:aa:d6:f8:52:3c:1b:fc:f0:
         23:de:a3:5c:2b:32:c2:da:73:0d:73:61:e7:65:fb:4b:1b:65:
         66:0b:20:33:6d:c3:cf:5e:b5:31:5d:61:fa:0f:7a:3c:40:b3:
         82:cc:d5:f1:18:d4:43:d6:da:7e:29:a7:c4:d2:7d:32:a3:7e:
         c6:b6:a1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----