Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a323030303a3a2f34382d3438203d3e20323638323335.roa
File:                     323830343a346530383a323030303a3a2f34382d3438203d3e20323638323335.roa (raw, json)
Hash identifier:          tB3YlS2VWq+GsFfRRdoJUTgyPw0PZpHIz82viUCtu/U=
Subject key identifier:   43:99:59:DB:EA:2B:8D:A0:FD:29:58:AB:DA:AA:00:33:7F:49:60:04
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       2874E59D7B9103F453CF3EDA624A006C8F73B0C5
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a323030303a3a2f34382d3438203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:01:18 +0000
ROA not before:           Thu 25 Jul 2024 13:56:18 +0000
ROA not after:            Fri 25 Jul 2025 14:01:18 +0000
asID:                     268235
IP address blocks:        2804:4e08:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:74:e5:9d:7b:91:03:f4:53:cf:3e:da:62:4a:00:6c:8f:73:b0:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 13:56:18 2024 GMT
            Not After : Jul 25 14:01:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:aa:ce:46:a1:b1:f8:e3:50:5e:a4:42:9c:
                    d5:69:5c:e8:73:82:6c:80:75:a7:f9:8a:f8:8f:cc:
                    a7:da:d7:a6:9e:ec:c3:cb:ad:9a:23:6c:8a:7a:2e:
                    da:c7:7e:c6:32:d4:b3:65:2e:e6:8a:c0:1b:2e:b6:
                    45:f1:fb:06:12:43:61:0c:f1:83:e7:40:b0:be:ff:
                    a0:06:17:87:b6:ee:7f:e2:e7:d1:7c:e7:cb:fd:1f:
                    12:a0:db:54:fa:2c:dd:56:48:77:e7:18:8b:37:cc:
                    c2:dc:11:ac:fa:a8:00:b8:f6:20:c6:1d:66:f5:af:
                    de:b1:6b:ae:38:fd:ad:71:f4:8a:98:85:5c:2c:d3:
                    7f:34:3d:7b:5c:f2:9c:31:5c:f2:9d:3c:ed:68:4d:
                    76:a6:53:2c:6d:d3:2e:ea:fc:6f:c4:13:1c:f7:4d:
                    84:f3:9a:fe:c6:cb:fd:f8:8a:ae:3a:ac:89:75:2b:
                    c8:b0:58:78:e8:6c:87:9f:0e:33:c9:8d:6c:c6:0b:
                    89:f2:5b:3f:25:8b:f3:55:5c:4b:fb:ce:01:79:53:
                    ee:a7:97:cd:6f:a5:a6:5f:c3:39:61:71:18:a8:a7:
                    be:8d:4e:b1:1b:fa:b7:68:4b:22:46:5f:a0:79:c3:
                    4f:4f:2f:b7:03:cb:a0:87:21:4d:bb:86:24:cd:f9:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:99:59:DB:EA:2B:8D:A0:FD:29:58:AB:DA:AA:00:33:7F:49:60:04
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a323030303a3a2f34382d3438203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:6a:36:c8:4c:78:0b:89:31:af:b6:c8:b4:f4:b1:97:f7:c0:
         fe:0b:d8:f8:1f:5f:7d:57:9a:88:f5:a8:aa:1e:db:09:d5:4e:
         f9:03:58:b7:b6:11:43:eb:b5:a4:8d:24:36:f5:f2:cd:5c:8a:
         ff:c5:17:48:42:72:aa:47:95:47:f2:87:3d:8e:20:c5:cf:1c:
         d7:76:a7:27:35:c1:22:45:81:8e:be:4b:7a:6d:b8:e6:5a:83:
         18:9b:b3:a9:d8:ad:77:db:a3:1d:46:0b:3f:50:51:c7:03:17:
         96:4e:07:62:18:8a:74:1c:a4:c0:a8:4f:f4:9a:a1:a5:2e:bb:
         d3:01:3b:71:86:34:09:ac:a7:f4:74:49:0b:1a:9c:17:15:4d:
         06:66:ab:6f:ee:93:84:1c:e8:e4:97:28:bc:a6:de:24:2e:48:
         0e:0a:d7:fc:94:70:0b:56:16:22:85:8b:48:72:ef:f8:8b:08:
         25:ae:82:e6:63:82:50:64:a3:27:2d:32:9e:4d:84:90:ff:64:
         fd:92:65:02:3b:9d:16:c7:c1:77:44:c1:ab:4a:4a:9d:90:c4:
         5f:f7:40:d8:03:b4:c9:c5:9c:f5:49:80:b4:97:76:3c:3b:d0:
         5b:2b:33:68:eb:ff:68:ec:3a:0f:78:93:de:9b:dd:9e:a7:ba:
         73:dc:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----