Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa
File:                     323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa (raw, json)
Hash identifier:          j9OxZaQHdzc2R7KrQc9iX0ZNlNyuWqCB2+QX6lNe7Tc=
Subject key identifier:   13:18:8B:35:0C:45:4E:DC:2B:C6:23:3A:8C:4F:C8:31:4F:7D:53:3E
Certificate issuer:       /CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
Certificate serial:       5E66F5E73279334C8E9D04ED37F22D7E3C4DB4A5
Authority key identifier: 79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa
Signing time:             Wed 05 Jun 2024 17:49:59 +0000
ROA not before:           Wed 05 Jun 2024 17:44:59 +0000
ROA not after:            Wed 04 Jun 2025 17:49:59 +0000
asID:                     269595
IP address blocks:        2804:66f8:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:66:f5:e7:32:79:33:4c:8e:9d:04:ed:37:f2:2d:7e:3c:4d:b4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
        Validity
            Not Before: Jun  5 17:44:59 2024 GMT
            Not After : Jun  4 17:49:59 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:ee:56:da:19:bf:c1:50:53:84:d4:85:c6:
                    66:e1:c1:43:5e:df:1f:26:57:f2:f3:dc:16:86:82:
                    a9:55:b8:85:2e:68:91:ec:ed:e4:98:e8:6b:04:bb:
                    54:81:40:68:eb:af:03:53:b9:97:b6:4f:9f:d6:47:
                    d0:aa:9a:2f:74:eb:36:88:f4:a7:f8:b8:6e:52:07:
                    e9:03:16:d8:08:4b:b8:2d:94:de:36:aa:8a:fb:54:
                    d4:6e:df:6a:67:46:fc:46:5b:8d:5c:82:a0:e0:53:
                    c1:d1:f4:ce:b9:fd:c8:6a:98:b4:f2:f2:0e:f2:2b:
                    5a:5a:5b:7d:9e:75:44:d0:32:48:c1:23:31:b7:91:
                    d9:20:d3:65:c1:12:df:b6:d7:5f:80:af:42:a4:e2:
                    28:5e:50:da:8b:73:a0:40:3a:e3:a4:9e:35:fb:1a:
                    2e:88:56:13:ca:28:25:2d:5d:52:91:ca:4d:99:c6:
                    00:7f:75:d1:1d:41:62:7e:1a:08:ef:02:d8:ac:4a:
                    9c:eb:90:8e:58:bf:cc:63:e5:67:e7:4e:5e:9e:6c:
                    91:7f:50:34:76:91:b5:a0:07:68:d2:9f:c8:63:53:
                    ff:b6:a4:9c:8b:95:ef:b1:83:d5:7f:45:72:e8:a4:
                    99:9c:55:96:ff:6c:82:e9:c9:10:86:f9:3e:ae:07:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:18:8B:35:0C:45:4E:DC:2B:C6:23:3A:8C:4F:C8:31:4F:7D:53:3E
            X509v3 Authority Key Identifier:
                keyid:79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66f8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cf:75:9e:ed:fc:75:49:97:11:b2:39:e4:07:2a:1e:21:b6:70:
         2d:c7:e0:46:50:b4:ca:07:0a:94:23:15:f1:52:0a:94:db:33:
         71:3a:22:54:44:91:27:45:3b:b8:32:70:88:14:10:ff:5f:5e:
         14:e9:d7:38:09:76:f1:53:1b:ad:e4:76:a1:2b:e5:e5:20:21:
         5d:b8:52:10:66:09:73:07:79:4b:96:4f:d5:bb:b3:72:8b:9e:
         89:67:e1:fd:61:42:a4:fc:f6:b6:5b:9f:06:18:0a:84:c1:d6:
         9d:d2:f8:34:fc:f6:4a:39:66:e1:01:81:e8:43:2b:98:39:17:
         23:21:07:85:35:8d:ff:56:d2:97:86:12:8f:2f:eb:c4:ad:f6:
         4a:d4:6d:61:dc:12:f8:f6:68:b1:e0:2d:35:cc:fb:ec:76:5a:
         6b:c4:d3:13:3d:21:30:f0:4e:02:65:fc:b3:41:10:90:b4:d7:
         00:63:8b:2e:f3:33:e1:f2:4d:84:e2:a4:71:6b:44:e5:ac:c3:
         3a:b9:19:a3:cc:94:02:b0:e6:d3:3e:92:2e:55:f3:99:de:3d:
         a1:1b:ed:71:c0:79:82:3d:8f:1c:ed:e3:aa:78:16:5b:ef:0c:
         c5:71:0f:77:0b:5a:51:a5:25:6f:31:ac:89:19:05:59:62:dc:
         e0:23:6e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----