Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a343830303a3a2f33372d3337203d3e20323636353531.roa
File:                     323830343a336463303a343830303a3a2f33372d3337203d3e20323636353531.roa (raw, json)
Hash identifier:          ZY5mOME2HjDBDD9qrd2jC/eBHpVpeAZzU0pC5s/7m84=
Subject key identifier:   EE:31:9A:9A:40:3E:EE:B3:26:E8:8C:C6:03:07:86:27:8F:F2:6E:FA
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       30BE15DEAA2E0532EB7D4D9A2BF6C3494969C1DF
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a343830303a3a2f33372d3337203d3e20323636353531.roa
Signing time:             Thu 15 Aug 2024 17:11:57 +0000
ROA not before:           Thu 15 Aug 2024 17:06:57 +0000
ROA not after:            Thu 14 Aug 2025 17:11:57 +0000
asID:                     266551
IP address blocks:        2804:3dc0:4800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:be:15:de:aa:2e:05:32:eb:7d:4d:9a:2b:f6:c3:49:49:69:c1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Aug 15 17:06:57 2024 GMT
            Not After : Aug 14 17:11:57 2025 GMT
        Subject: CN=EE319A9A403EEEB326E88CC6030786278FF26EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:da:a9:c3:51:95:4d:de:83:e8:8b:d3:3e:
                    65:b4:64:0e:4f:65:04:97:c6:a6:cf:f9:bc:a0:75:
                    1b:36:f5:f2:96:06:8e:36:f4:34:ec:2f:36:86:52:
                    2e:5b:44:ea:48:c9:a0:3b:88:70:cd:63:bd:94:e1:
                    bf:9c:26:5f:31:3f:ae:03:6f:43:88:d1:de:21:c4:
                    5b:81:8a:18:c0:c7:f5:e8:96:8b:1d:33:ea:98:bb:
                    d8:55:2a:38:ed:22:81:18:bf:f3:2b:af:c9:b3:87:
                    f5:cb:7f:5e:e7:28:2e:36:79:f6:78:a9:ca:89:5f:
                    6f:a1:c9:6c:4d:6d:0f:3f:c0:07:d4:71:20:1c:e5:
                    53:2f:1b:89:ca:f3:35:56:f7:af:df:bd:5f:be:11:
                    81:7b:c4:b6:3a:ac:e9:f1:23:c5:a6:47:34:d7:46:
                    d2:dc:5d:6f:89:2b:d7:1b:1d:0f:66:20:96:ed:a8:
                    10:27:0c:50:b6:5f:76:07:01:08:b9:f5:63:8a:f7:
                    3b:73:2c:b9:c7:ec:0a:2d:f9:d6:6b:e0:8d:58:e5:
                    4e:7c:4c:aa:df:1a:02:52:43:1f:da:fe:ae:36:cb:
                    4a:aa:04:3c:7e:60:eb:bf:9a:b2:15:ad:e8:55:08:
                    54:87:ac:90:fc:64:ac:f4:d2:f9:86:ba:17:e7:bc:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:31:9A:9A:40:3E:EE:B3:26:E8:8C:C6:03:07:86:27:8F:F2:6E:FA
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a343830303a3a2f33372d3337203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         39:a9:6c:a0:39:a0:83:38:b0:a0:24:bb:2c:0e:fc:6f:fa:92:
         43:eb:ac:e6:16:48:52:24:2f:01:88:30:7b:ee:1e:33:5a:03:
         4e:c2:d5:f1:cd:6a:ba:f8:ef:7b:98:21:77:01:99:95:ba:db:
         dd:37:99:c2:b4:a3:ae:91:92:05:1e:5e:8b:87:fa:53:6e:5e:
         0d:a5:16:23:3d:54:99:ec:1e:a9:32:b2:59:32:1a:dd:da:15:
         f3:e9:4f:be:c7:c2:57:f9:3b:5c:9a:a0:70:54:3a:65:fc:b9:
         1e:69:85:0e:9a:64:67:92:1c:4e:f3:4a:3b:0d:ab:b6:24:1e:
         c9:d7:f4:21:d6:8e:45:fc:07:70:b3:79:7e:10:0b:b2:63:18:
         f5:40:5f:fb:15:3e:d5:57:02:d4:bc:70:76:09:6c:69:36:06:
         1f:c9:38:9b:c2:cc:af:b9:82:53:81:55:9b:3d:15:a4:0b:f4:
         62:93:86:7e:86:e8:82:99:31:04:21:24:ae:0f:91:b1:23:a5:
         5c:eb:88:e5:dc:fd:cd:dd:0f:17:46:23:3b:3b:3f:18:36:1e:
         57:c3:a9:f9:02:b3:91:38:fd:5f:60:07:f6:49:aa:e6:0f:2b:
         f8:6a:d0:2b:3e:5a:6c:7a:2c:17:0a:46:18:91:ae:f1:a4:9b:
         e3:39:6a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----