Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/323830343a336163633a3a2f33322d313238203d3e20323636313130.roa
File:                     323830343a336163633a3a2f33322d313238203d3e20323636313130.roa (raw, json)
Hash identifier:          D1lldTeso5YQNxaOfyM+q18eMvzs1EO2DPsFeJaAkJg=
Subject key identifier:   E4:BB:EF:71:6F:91:53:2C:95:9B:ED:5A:AE:43:A1:B0:DF:EA:76:40
Certificate issuer:       /CN=C79AF87227A5408AD8E9DEB9BC437BD71BB764D8
Certificate serial:       4C69D547E713653396CA8658FF9CA2E30F9E3B8F
Authority key identifier: C7:9A:F8:72:27:A5:40:8A:D8:E9:DE:B9:BC:43:7B:D7:1B:B7:64:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C79AF87227A5408AD8E9DEB9BC437BD71BB764D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/323830343a336163633a3a2f33322d313238203d3e20323636313130.roa
Signing time:             Wed 29 Jan 2025 12:08:16 +0000
ROA not before:           Wed 29 Jan 2025 12:03:16 +0000
ROA not after:            Wed 28 Jan 2026 12:08:16 +0000
asID:                     266110
IP address blocks:        2804:3acc::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:69:d5:47:e7:13:65:33:96:ca:86:58:ff:9c:a2:e3:0f:9e:3b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C79AF87227A5408AD8E9DEB9BC437BD71BB764D8
        Validity
            Not Before: Jan 29 12:03:16 2025 GMT
            Not After : Jan 28 12:08:16 2026 GMT
        Subject: CN=E4BBEF716F91532C959BED5AAE43A1B0DFEA7640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:8a:1c:7a:ad:7c:89:c7:2a:86:6d:f0:38:
                    f9:56:8c:b8:8a:36:08:28:24:37:99:9d:e6:96:f8:
                    58:37:ef:01:ea:2a:2f:12:10:88:ec:6c:71:b3:0e:
                    61:55:83:b4:e1:33:1c:96:23:b2:8e:c2:60:83:96:
                    3a:e5:80:65:3e:5d:9d:e4:b6:e6:65:05:13:64:b4:
                    74:9b:3e:2c:01:b9:93:8f:2b:4a:3b:89:cf:65:05:
                    2a:a4:3d:66:40:c9:83:45:83:f4:10:3a:e2:11:40:
                    5c:92:5a:0f:04:1b:18:a3:28:9a:55:f5:a4:09:61:
                    67:11:67:0f:15:39:25:aa:71:01:50:1c:40:c4:f7:
                    27:8f:ff:f6:3d:69:a0:6c:0a:33:48:59:b4:b9:db:
                    c6:f0:72:93:38:78:a0:34:08:f1:95:16:2e:f9:16:
                    9a:83:4a:b2:d7:eb:a9:0d:ba:37:51:22:e0:91:d5:
                    39:27:dd:a8:94:66:d4:ea:2b:31:04:13:55:b1:48:
                    9b:ff:fe:59:1d:3b:0e:90:72:36:4b:b8:32:81:c6:
                    93:ec:19:32:6b:e7:b2:46:21:49:eb:aa:42:61:e1:
                    a0:cd:f2:55:2b:ee:09:75:0b:72:45:31:12:71:a1:
                    d1:5e:13:70:b0:da:71:bd:e8:06:50:2a:1e:b4:7a:
                    c8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BB:EF:71:6F:91:53:2C:95:9B:ED:5A:AE:43:A1:B0:DF:EA:76:40
            X509v3 Authority Key Identifier:
                keyid:C7:9A:F8:72:27:A5:40:8A:D8:E9:DE:B9:BC:43:7B:D7:1B:B7:64:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/C79AF87227A5408AD8E9DEB9BC437BD71BB764D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C79AF87227A5408AD8E9DEB9BC437BD71BB764D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/323830343a336163633a3a2f33322d313238203d3e20323636313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3acc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:be:4f:41:e1:78:a0:aa:7d:1c:33:d4:98:18:21:54:5e:
         f8:66:e3:77:b0:6c:b0:de:15:d4:45:f4:48:a9:b4:1b:9f:3b:
         fa:18:b4:07:32:d3:01:44:8b:97:cb:20:1a:78:e0:5c:6b:fa:
         50:a6:48:11:1f:18:09:fd:78:77:a2:08:af:56:a3:88:31:03:
         94:63:9b:88:31:5b:1e:b2:54:8c:44:38:f5:49:c3:50:8f:19:
         55:c8:3e:5f:0b:da:f0:5d:c0:0f:dc:0d:ad:40:1b:d7:17:31:
         d0:f4:ef:57:a9:da:db:9c:12:21:34:e6:7b:64:21:f1:ce:e5:
         80:9a:0f:5a:0a:ee:8a:24:71:7d:75:8f:7c:21:b9:1e:27:6c:
         4e:f2:ff:6c:bf:2a:f0:c8:2b:e9:32:62:67:88:5d:11:62:6f:
         0f:22:c6:fb:8d:8c:82:ce:ba:05:72:93:e3:c0:76:91:0c:57:
         43:d3:64:8a:e5:65:d7:4f:41:9d:57:4f:8f:b8:00:b4:f7:fb:
         4c:e6:cd:2b:2d:45:3b:5d:62:e9:e1:f3:02:a5:1b:d9:71:67:
         ce:b8:c5:dd:0c:21:fa:4b:3e:cc:a7:1f:3d:da:0a:61:a6:c8:
         0d:65:d1:1e:4d:50:45:be:ae:5c:7e:bb:4d:2f:e5:6a:d6:d2:
         30:3c:bd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----