Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a3a2f33322d3332203d3e20323635333030.roa
File:                     323830343a326462633a3a2f33322d3332203d3e20323635333030.roa (raw, json)
Hash identifier:          f6EkxbxpsIS8LgGLigHywC81es6LQoMd/B3R8QpTNEE=
Subject key identifier:   70:84:6F:7B:19:C4:1F:18:10:02:00:E4:E0:1B:EF:4D:A1:C9:CD:9E
Certificate issuer:       /CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
Certificate serial:       6CFEB5E95F87EEBED044502CF76B1A29DFC737E5
Authority key identifier: FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a3a2f33322d3332203d3e20323635333030.roa
Signing time:             Wed 18 Dec 2024 04:11:09 +0000
ROA not before:           Wed 18 Dec 2024 04:06:09 +0000
ROA not after:            Wed 17 Dec 2025 04:11:09 +0000
asID:                     265300
IP address blocks:        2804:2dbc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fe:b5:e9:5f:87:ee:be:d0:44:50:2c:f7:6b:1a:29:df:c7:37:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA878ADB9FDAB7635D897E861584C927DCBA2827
        Validity
            Not Before: Dec 18 04:06:09 2024 GMT
            Not After : Dec 17 04:11:09 2025 GMT
        Subject: CN=70846F7B19C41F18100200E4E01BEF4DA1C9CD9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:1a:d0:a9:be:92:2f:a0:ea:d5:af:1b:42:
                    67:36:73:d9:56:1e:1d:16:15:04:66:7f:5b:c1:8b:
                    e0:95:52:63:4f:f6:65:0b:17:cf:1a:10:04:0a:16:
                    e9:a3:70:0d:ed:d7:33:d8:19:f9:90:31:91:8e:7f:
                    3e:e5:a9:ba:32:58:f1:b9:0e:b4:20:3d:25:f2:7f:
                    e5:49:5f:2c:50:a6:a0:4b:0b:d2:7c:cf:82:4b:5c:
                    e3:4e:d5:5f:4f:2d:e6:d8:1c:70:d1:36:99:5b:ba:
                    3c:2c:91:2d:54:12:42:08:1c:67:d3:c4:ea:64:f3:
                    56:e7:a3:27:6c:66:1d:71:17:71:ba:02:ac:de:d9:
                    5e:8f:20:6d:a2:aa:5e:a1:bc:39:bc:d2:8a:26:76:
                    9a:e7:f0:84:39:6d:ed:e2:fc:e7:a9:44:07:6a:6a:
                    c2:57:51:f5:df:ab:43:17:4b:6d:a7:84:5a:a7:dd:
                    98:ec:36:c0:87:e8:76:e1:8f:53:c9:5a:63:ea:fe:
                    ea:24:3a:eb:62:cc:d9:08:3a:46:10:a8:88:20:19:
                    ed:78:cc:99:ea:c5:32:e7:46:d1:bc:e3:a2:69:d4:
                    f7:41:d9:58:6e:05:a7:a9:61:b7:f7:56:af:da:f5:
                    69:d4:a0:ac:11:22:67:f3:d8:f2:46:2c:c0:46:12:
                    99:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:84:6F:7B:19:C4:1F:18:10:02:00:E4:E0:1B:EF:4D:A1:C9:CD:9E
            X509v3 Authority Key Identifier:
                keyid:FA:87:8A:DB:9F:DA:B7:63:5D:89:7E:86:15:84:C9:27:DC:BA:28:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/FA878ADB9FDAB7635D897E861584C927DCBA2827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA878ADB9FDAB7635D897E861584C927DCBA2827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a3a2f33322d3332203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:fa:13:5c:e6:15:95:5b:2f:7e:fa:29:3d:b4:d5:af:c3:77:
         19:94:58:fd:12:1c:e9:a6:77:c1:ba:fa:3d:ad:aa:02:44:ff:
         4e:28:0a:64:2d:7c:24:ec:aa:52:a9:df:7c:85:f9:69:be:de:
         f3:81:10:1e:41:d4:03:67:20:0a:0a:d7:44:73:03:48:5f:23:
         00:66:3c:55:37:eb:df:fb:29:ba:0d:ba:4a:e9:d2:5b:39:12:
         12:22:84:f6:e0:f5:bd:c2:d4:f6:d6:81:08:e8:f3:ae:ec:a4:
         f6:6c:f1:96:31:1c:2d:9b:2f:d3:e3:0a:46:05:85:1d:65:56:
         4d:f1:a6:0c:a4:e7:09:e8:76:59:e0:53:19:ae:3a:0b:fd:19:
         e0:b3:06:e7:7b:94:54:f5:ab:31:5f:61:e2:57:c8:25:13:88:
         d0:3c:a7:cc:ca:62:e6:1c:cf:d8:36:95:ab:a1:e8:3e:de:45:
         7c:e8:a0:f5:e9:f3:a3:44:c7:f0:c0:69:f8:26:01:d6:f3:c1:
         40:52:3f:28:f9:58:f4:e5:f0:f0:14:8f:af:b0:d7:29:95:34:
         df:8b:d2:51:43:37:0b:44:11:32:e1:f0:05:6f:6c:35:d8:6d:
         cb:63:4f:76:b5:9e:64:41:6b:a1:50:85:44:8b:93:62:47:43:
         20:1c:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----