Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/323830343a313635383a313030653a3a2f34382d3438203d3e20323633323833.roa
File:                     323830343a313635383a313030653a3a2f34382d3438203d3e20323633323833.roa (raw, json)
Hash identifier:          AYGmVeSrM+hcGiZl0GrHxEVY2PQufe8G+AXuVAw0eBk=
Subject key identifier:   DE:F5:4E:6C:DD:62:47:E0:D7:FE:BB:6B:85:6D:C1:76:BD:0C:AB:98
Certificate issuer:       /CN=1609A1F6F144F5436BD99A38E640B310CB679304
Certificate serial:       2AAA768BB34A415770C89CCDDEAA18BDE5BD0AA0
Authority key identifier: 16:09:A1:F6:F1:44:F5:43:6B:D9:9A:38:E6:40:B3:10:CB:67:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1609A1F6F144F5436BD99A38E640B310CB679304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/323830343a313635383a313030653a3a2f34382d3438203d3e20323633323833.roa
Signing time:             Sat 19 Oct 2024 00:11:06 +0000
ROA not before:           Sat 19 Oct 2024 00:06:06 +0000
ROA not after:            Sat 18 Oct 2025 00:11:06 +0000
asID:                     263283
IP address blocks:        2804:1658:100e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:aa:76:8b:b3:4a:41:57:70:c8:9c:cd:de:aa:18:bd:e5:bd:0a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1609A1F6F144F5436BD99A38E640B310CB679304
        Validity
            Not Before: Oct 19 00:06:06 2024 GMT
            Not After : Oct 18 00:11:06 2025 GMT
        Subject: CN=DEF54E6CDD6247E0D7FEBB6B856DC176BD0CAB98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:95:3b:e6:6c:52:aa:ae:92:14:5e:8d:4a:
                    0c:70:b1:01:23:a1:82:4c:35:4a:28:75:59:89:b3:
                    35:f7:f7:80:86:1f:49:38:9e:21:40:69:23:94:f7:
                    69:c2:43:9e:80:d8:80:f2:0b:61:8a:e6:57:59:53:
                    1e:a4:b0:ab:7d:49:0b:ed:05:07:35:1a:73:5c:aa:
                    cc:cd:d6:15:0e:ab:95:b3:a6:19:af:e0:95:df:a8:
                    2c:6c:09:d8:5e:bb:d0:52:78:a7:4e:b1:80:22:e7:
                    54:86:30:f1:91:4e:3a:44:c5:aa:db:03:9d:17:b6:
                    7f:9b:bf:02:dd:0a:a7:4b:e6:8f:5f:2d:5c:f5:b1:
                    98:4f:c5:a0:bb:59:d0:ad:b4:b7:4d:36:0c:88:97:
                    55:b9:9c:fb:64:e6:ef:24:e2:a9:f3:ce:7c:9a:2b:
                    b9:b2:e3:6e:1a:b7:54:57:12:7c:8d:ef:d0:60:bc:
                    d1:57:58:8e:0f:a4:7c:4e:89:8f:39:8f:f4:b9:fb:
                    bc:f6:22:e2:03:d4:85:1f:47:f9:d4:f8:9a:14:be:
                    99:28:6e:a0:5b:9e:62:4f:4d:62:0e:f3:5d:32:83:
                    88:53:20:08:db:6c:f5:52:f2:dc:ef:5d:60:b2:e6:
                    16:d1:ce:41:3d:e1:17:14:27:e8:1b:57:73:0c:a2:
                    d2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F5:4E:6C:DD:62:47:E0:D7:FE:BB:6B:85:6D:C1:76:BD:0C:AB:98
            X509v3 Authority Key Identifier:
                keyid:16:09:A1:F6:F1:44:F5:43:6B:D9:9A:38:E6:40:B3:10:CB:67:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/1609A1F6F144F5436BD99A38E640B310CB679304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1609A1F6F144F5436BD99A38E640B310CB679304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/323830343a313635383a313030653a3a2f34382d3438203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:100e::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:a6:9b:f7:12:eb:90:5c:aa:7d:b5:b1:c8:38:5b:03:7a:20:
         84:bd:05:e4:d2:80:9a:77:9b:d9:eb:98:6c:4c:9c:57:ee:20:
         55:5b:6e:01:43:a3:39:5f:cd:f9:c5:48:1d:b0:86:b5:0b:8f:
         3d:24:44:90:2f:5e:d6:9c:ee:49:27:3a:41:11:39:a4:15:5c:
         d6:ab:19:8d:c0:75:f1:61:f8:94:b8:6b:de:fc:86:d6:95:9b:
         51:24:63:26:95:51:4d:8d:d5:0e:24:87:5e:14:99:70:fa:c7:
         c2:ec:0a:2a:2a:a6:fb:c2:db:22:d8:ab:11:7b:ff:ef:a1:71:
         52:c2:72:4a:ac:6a:93:fe:66:69:85:6b:fc:88:f9:2c:98:20:
         93:78:07:c5:30:26:de:89:aa:cc:b1:76:2e:12:7b:6f:f6:12:
         99:34:18:cf:25:7f:98:7a:26:c8:cf:4a:fb:26:b4:cb:30:30:
         38:11:d9:dc:4e:a9:52:9f:94:81:33:c4:d4:52:e5:a5:90:f7:
         7d:bc:7b:43:65:a1:2f:9f:74:8e:be:25:78:ed:6f:5a:e8:4e:
         29:1e:a2:23:25:e4:69:cb:62:46:8c:71:48:33:3d:ee:98:61:
         86:a0:af:46:51:aa:60:d3:e6:93:de:fd:2d:09:aa:d0:42:4a:
         e0:7a:cd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----