Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/323830343a313635383a666666643a3a2f34382d3438203d3e20323633323833.roa
File:                     323830343a313635383a666666643a3a2f34382d3438203d3e20323633323833.roa (raw, json)
Hash identifier:          NHfe892JH4zuSMRyoYzsB+YTEL4vOtXssY+tFEeRiuQ=
Subject key identifier:   A4:BD:FB:36:71:4B:97:37:CE:3F:B2:ED:42:55:A6:8C:73:83:95:06
Certificate issuer:       /CN=1609A1F6F144F5436BD99A38E640B310CB679304
Certificate serial:       29516BA1899778E83062E02564C3CEF276935ED6
Authority key identifier: 16:09:A1:F6:F1:44:F5:43:6B:D9:9A:38:E6:40:B3:10:CB:67:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1609A1F6F144F5436BD99A38E640B310CB679304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/323830343a313635383a666666643a3a2f34382d3438203d3e20323633323833.roa
Signing time:             Sat 19 Oct 2024 00:11:05 +0000
ROA not before:           Sat 19 Oct 2024 00:06:05 +0000
ROA not after:            Sat 18 Oct 2025 00:11:05 +0000
asID:                     263283
IP address blocks:        2804:1658:fffd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:51:6b:a1:89:97:78:e8:30:62:e0:25:64:c3:ce:f2:76:93:5e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1609A1F6F144F5436BD99A38E640B310CB679304
        Validity
            Not Before: Oct 19 00:06:05 2024 GMT
            Not After : Oct 18 00:11:05 2025 GMT
        Subject: CN=A4BDFB36714B9737CE3FB2ED4255A68C73839506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:45:6e:bf:d1:44:7b:2b:af:6b:96:c0:0e:
                    af:9f:2a:b3:22:a7:ab:ca:7a:f3:7d:67:73:6f:c9:
                    61:1f:e5:2b:ae:bb:e1:ce:3e:ae:aa:e2:44:ca:3a:
                    b0:3f:7f:08:77:60:72:d9:f7:16:82:69:39:bb:df:
                    d6:38:24:28:27:f2:4b:37:15:17:fe:aa:b6:40:16:
                    51:65:68:9c:e1:60:0e:1e:d4:72:22:de:f5:2c:f9:
                    97:b7:01:76:fe:7a:18:a9:7f:e7:f4:b1:e9:f2:96:
                    23:96:ca:08:81:f2:95:2b:d4:a8:9c:fc:45:24:da:
                    3f:dc:ba:01:f5:f3:6f:a0:29:fa:43:32:d2:f1:d6:
                    ba:4d:74:90:d3:68:02:7c:36:3b:59:62:d7:ed:81:
                    7e:fc:e9:a7:a1:0e:8d:cf:ff:3f:1b:e9:fc:91:c9:
                    ee:a9:30:77:75:34:3b:aa:e2:c0:0c:01:b0:21:35:
                    bf:13:ec:4c:3f:cf:63:ad:9c:86:57:65:40:e0:dd:
                    fb:93:8d:48:8e:69:5d:b2:68:3e:71:6c:91:22:94:
                    1e:b3:e8:94:34:db:67:5f:93:6b:22:eb:70:fc:30:
                    a3:58:27:69:75:fd:09:26:02:eb:30:8c:dd:8d:fb:
                    a1:94:72:09:85:7d:76:fb:72:9a:7f:2e:32:7b:4a:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BD:FB:36:71:4B:97:37:CE:3F:B2:ED:42:55:A6:8C:73:83:95:06
            X509v3 Authority Key Identifier:
                keyid:16:09:A1:F6:F1:44:F5:43:6B:D9:9A:38:E6:40:B3:10:CB:67:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/1609A1F6F144F5436BD99A38E640B310CB679304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1609A1F6F144F5436BD99A38E640B310CB679304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/2/323830343a313635383a666666643a3a2f34382d3438203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:fb:dc:56:79:ae:b1:6f:87:05:65:75:71:db:c9:6e:8a:37:
         50:25:06:35:bd:dc:ad:50:3f:e2:bb:23:ee:e0:0f:b1:7c:2a:
         c5:77:65:8b:7d:a7:dd:3e:6f:e2:33:67:a7:17:12:3a:7e:e8:
         dd:15:f9:8f:15:f4:fe:14:38:cd:a8:0d:0f:3e:c1:db:00:79:
         22:ef:89:0e:c0:46:b2:67:7e:32:93:df:25:d6:86:f0:cb:da:
         8c:f3:42:a0:0c:a0:b2:a6:d1:88:c8:2e:ee:0b:bc:14:fa:82:
         a4:a5:96:ff:56:32:f3:a5:e1:eb:84:12:93:a1:9f:30:4f:8c:
         6e:31:e6:1f:8f:0e:c5:fc:01:55:b6:ff:3e:b8:a7:48:b0:e3:
         cb:d6:86:98:cb:44:e1:0b:be:32:19:67:ba:d2:20:0d:ec:f9:
         4c:5d:64:17:b9:1d:6c:4e:74:8e:e8:80:b9:b4:2c:cc:fb:cf:
         5b:af:ae:94:67:fa:98:b0:22:ee:3e:19:13:48:9b:98:e1:8f:
         03:ae:1c:93:fc:0e:24:88:da:35:b0:1d:8c:be:e2:32:35:af:
         83:a3:aa:26:94:10:0b:b7:a3:3f:59:8b:39:2f:23:6e:6d:34:
         eb:c3:06:6f:6c:83:b8:43:cd:14:f9:5a:94:e7:1e:39:80:06:
         55:4f:52:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----