Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/323830343a313631343a3a2f33322d3336203d3e20323633323636.roa
File:                     323830343a313631343a3a2f33322d3336203d3e20323633323636.roa (raw, json)
Hash identifier:          O1ZdgJEWGK+f3kNKwnNet+gUN2zvNC9SRkIbkgGZyxM=
Subject key identifier:   33:D2:69:F9:1C:82:A5:67:A8:0A:9C:BC:15:9F:69:50:D4:4D:15:6B
Certificate issuer:       /CN=60A27F042B57F4E872855F5353E0A6432DAC4AF2
Certificate serial:       233EE2FE7E4D1ADE0E67AF229791A16F123C6137
Authority key identifier: 60:A2:7F:04:2B:57:F4:E8:72:85:5F:53:53:E0:A6:43:2D:AC:4A:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/323830343a313631343a3a2f33322d3336203d3e20323633323636.roa
Signing time:             Tue 18 Jun 2024 12:24:30 +0000
ROA not before:           Tue 18 Jun 2024 12:19:30 +0000
ROA not after:            Tue 17 Jun 2025 12:24:30 +0000
asID:                     263266
IP address blocks:        2804:1614::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3e:e2:fe:7e:4d:1a:de:0e:67:af:22:97:91:a1:6f:12:3c:61:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A27F042B57F4E872855F5353E0A6432DAC4AF2
        Validity
            Not Before: Jun 18 12:19:30 2024 GMT
            Not After : Jun 17 12:24:30 2025 GMT
        Subject: CN=33D269F91C82A567A80A9CBC159F6950D44D156B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:cd:fe:77:4e:74:3e:8f:92:50:ad:63:27:
                    0f:2b:e5:8b:dc:6a:99:7c:73:ad:8a:6f:e1:6a:8f:
                    c6:b2:63:35:80:78:e9:a3:37:47:63:9b:6e:99:96:
                    2e:6c:cc:08:e8:68:ac:2d:dd:39:75:9d:29:e1:36:
                    ad:5b:f0:0c:e6:9e:cf:18:73:1a:a4:bc:89:49:21:
                    85:76:41:63:ac:5d:71:e8:45:87:3f:5e:cb:bb:1d:
                    cb:c6:8a:22:50:97:0f:bd:4e:c1:d8:5d:50:5a:6f:
                    2d:f6:f4:3c:35:76:7b:72:d8:2a:b2:41:61:e8:1e:
                    7e:42:58:a7:91:d7:b6:23:95:99:e8:0b:19:60:56:
                    eb:7e:ed:2e:a0:64:c2:78:05:bc:76:94:46:57:87:
                    e2:54:89:22:3c:9e:a4:34:52:c0:ac:03:01:b5:1f:
                    c6:74:14:8e:a2:39:8d:25:11:c0:69:17:f4:65:5a:
                    a3:0f:10:aa:c6:8f:88:70:db:7a:1e:c1:92:a8:43:
                    a0:ca:71:43:1e:a6:00:7a:03:04:78:9f:f9:3a:f6:
                    34:1c:db:c9:30:c6:42:0d:25:7f:20:e7:14:f3:06:
                    23:4b:8d:23:81:f2:28:08:7b:1a:0b:48:f9:e8:8d:
                    5c:7d:52:3a:c2:fc:64:86:17:fe:f5:be:01:ce:64:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D2:69:F9:1C:82:A5:67:A8:0A:9C:BC:15:9F:69:50:D4:4D:15:6B
            X509v3 Authority Key Identifier:
                keyid:60:A2:7F:04:2B:57:F4:E8:72:85:5F:53:53:E0:A6:43:2D:AC:4A:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/323830343a313631343a3a2f33322d3336203d3e20323633323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1614::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:3e:96:a6:e8:d0:f7:96:d6:27:80:6d:1d:b6:f6:11:fb:d0:
         48:06:e8:0f:b2:d8:31:2d:01:28:bf:c1:ed:27:b6:9d:ff:28:
         00:f8:3d:67:ec:8e:88:24:6a:7f:c5:07:6b:01:19:1a:9e:3d:
         d6:37:fb:01:39:7d:e6:39:f6:ee:22:a1:09:6e:1b:e0:42:bd:
         4e:95:a0:45:ef:78:5b:f1:98:35:a0:01:2c:4e:2b:71:c0:1a:
         38:29:74:f7:22:b4:8c:f6:47:81:d8:b2:f3:7c:c1:c1:68:b8:
         4a:e4:2f:75:1d:e0:21:47:98:b7:55:ba:fd:ce:fd:d8:42:9e:
         26:85:64:a2:91:ea:c3:68:33:7f:3c:1a:f1:6d:80:28:7a:13:
         cf:59:34:89:b0:28:59:e2:f3:3a:2f:47:28:65:42:ae:a2:43:
         d6:0d:cd:6c:e4:37:d7:e2:ff:42:84:3a:de:15:fa:aa:b4:bb:
         21:6d:a8:c4:6c:bb:9f:ab:7f:51:bd:37:dd:b7:d2:da:f7:9d:
         65:1b:23:16:a4:93:c2:66:8c:14:5c:2c:17:73:71:84:cf:35:
         04:3b:ca:2c:ef:6b:5f:f1:62:f9:c1:60:3a:12:94:59:48:e8:
         36:f3:ad:95:cd:ad:85:85:94:59:25:95:9c:1a:ab:60:d5:51:
         01:52:f4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----