Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/323830343a313635383a313030633a3a2f34382d3438203d3e20323633323833.roa
File:                     323830343a313635383a313030633a3a2f34382d3438203d3e20323633323833.roa (raw, json)
Hash identifier:          bKARXaefWdjppFcoyWjqh1kcV/5ExShdeaJkHu3xpbU=
Subject key identifier:   7C:4D:55:8D:36:5D:5A:5C:FD:1A:AD:8A:59:2E:46:7A:0F:29:EC:EF
Certificate issuer:       /CN=1609A1F6F144F5436BD99A38E640B310CB679304
Certificate serial:       733F055A64EDD3262E204125248FB76B28392525
Authority key identifier: 16:09:A1:F6:F1:44:F5:43:6B:D9:9A:38:E6:40:B3:10:CB:67:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1609A1F6F144F5436BD99A38E640B310CB679304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/323830343a313635383a313030633a3a2f34382d3438203d3e20323633323833.roa
Signing time:             Sat 19 Oct 2024 00:11:04 +0000
ROA not before:           Sat 19 Oct 2024 00:06:04 +0000
ROA not after:            Sat 18 Oct 2025 00:11:04 +0000
asID:                     263283
IP address blocks:        2804:1658:100c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3f:05:5a:64:ed:d3:26:2e:20:41:25:24:8f:b7:6b:28:39:25:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1609A1F6F144F5436BD99A38E640B310CB679304
        Validity
            Not Before: Oct 19 00:06:04 2024 GMT
            Not After : Oct 18 00:11:04 2025 GMT
        Subject: CN=7C4D558D365D5A5CFD1AAD8A592E467A0F29ECEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f5:cb:3b:80:d7:ac:60:93:f3:74:8b:e1:f4:
                    ca:08:2b:90:dd:cd:0a:87:de:d7:14:bf:2a:35:d9:
                    ad:aa:0f:3c:20:bb:12:f3:4e:66:db:e6:23:df:f5:
                    ad:91:2a:ff:69:6c:f3:9c:ce:d6:b6:8c:b4:98:23:
                    df:87:71:52:93:6d:c3:ff:7f:d2:b9:8f:86:f9:a1:
                    32:41:21:5d:d7:8c:5f:5b:cc:18:47:f6:fb:8c:e6:
                    a4:8a:ac:19:9f:5d:5f:1a:78:ba:98:a9:db:e9:e8:
                    70:69:f9:ca:b9:95:1c:a8:f2:e9:56:25:6f:ba:0c:
                    ea:08:37:18:92:32:a8:16:be:c6:53:66:0c:d3:4e:
                    de:11:d0:a8:9a:9f:2c:12:99:f7:95:e0:20:79:d3:
                    a9:a0:3a:d0:ce:e3:fe:e5:d5:51:e8:1b:39:2d:e1:
                    5a:3a:c9:2f:b3:11:fe:39:dd:15:5b:fa:5f:74:f5:
                    f9:da:cb:7c:35:71:2c:bf:f4:4d:2f:c1:7f:6b:9a:
                    30:fe:43:b6:f8:7d:66:2f:89:1f:79:c7:fd:ce:3c:
                    6f:03:f2:cc:ff:2b:d8:b2:e4:53:dd:17:6c:68:16:
                    1c:db:d7:90:ba:87:7e:dc:6b:07:60:45:b9:31:be:
                    6e:ac:81:4c:25:b0:c7:57:70:32:fc:92:a5:ab:df:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4D:55:8D:36:5D:5A:5C:FD:1A:AD:8A:59:2E:46:7A:0F:29:EC:EF
            X509v3 Authority Key Identifier:
                keyid:16:09:A1:F6:F1:44:F5:43:6B:D9:9A:38:E6:40:B3:10:CB:67:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/1609A1F6F144F5436BD99A38E640B310CB679304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1609A1F6F144F5436BD99A38E640B310CB679304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/323830343a313635383a313030633a3a2f34382d3438203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:100c::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:99:be:88:78:e4:92:3c:46:fd:60:6c:e1:c8:85:11:76:be:
         8c:d7:14:3c:69:00:8f:ac:d8:2a:07:0c:e4:43:31:1d:16:d3:
         61:f8:f5:f5:32:c8:b9:ff:81:1b:36:75:1f:3e:6e:f6:a7:1d:
         ea:6d:f9:be:76:14:48:22:9e:50:15:f3:94:70:c0:95:b9:cf:
         19:ea:aa:1f:fc:69:d3:a3:d5:bc:18:9d:fb:b6:d7:a8:00:7a:
         c9:93:62:79:e4:38:bd:46:32:3b:6c:c5:38:e3:d6:d2:d1:a5:
         b3:01:60:1b:a9:b0:7a:38:1f:81:d2:79:b7:a0:83:c1:4e:b6:
         08:d4:10:c6:d4:c2:62:bf:91:64:fc:29:d8:ad:53:47:8d:0a:
         83:ac:f3:3c:f6:a7:7b:5f:3e:b1:91:8b:ec:b6:04:f7:9c:13:
         f8:8c:e8:d6:9b:98:75:5a:bc:fa:cf:8d:27:e0:00:61:7d:bb:
         47:8d:94:45:77:66:06:b6:f1:b7:9a:54:4f:8c:af:43:73:95:
         c1:4e:a6:6b:56:f4:cf:a0:75:a9:d7:3f:7b:f3:66:5f:be:b1:
         4c:10:e8:71:7e:17:b1:e1:d0:08:54:59:19:0f:9e:02:f6:fd:
         3f:06:28:e8:83:cf:2e:8c:4a:76:4b:15:78:c7:7b:27:f2:26:
         b5:ed:cf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----