Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643830303a3a2f33372d3337203d3e20323636353531.roa
File:                     323830343a336463303a643830303a3a2f33372d3337203d3e20323636353531.roa (raw, json)
Hash identifier:          J1n79iPUNz50SoxGYTZZJFFSynEzvyWNyb5AhqDrfjY=
Subject key identifier:   65:DA:4D:D4:2F:1E:22:0D:C9:EE:80:82:B2:21:6E:93:3A:C6:92:1D
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       608F9D8E40F56DB4815680DD9EFD3B03E549EBBE
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643830303a3a2f33372d3337203d3e20323636353531.roa
Signing time:             Thu 15 Aug 2024 17:11:58 +0000
ROA not before:           Thu 15 Aug 2024 17:06:58 +0000
ROA not after:            Thu 14 Aug 2025 17:11:58 +0000
asID:                     266551
IP address blocks:        2804:3dc0:d800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8f:9d:8e:40:f5:6d:b4:81:56:80:dd:9e:fd:3b:03:e5:49:eb:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Aug 15 17:06:58 2024 GMT
            Not After : Aug 14 17:11:58 2025 GMT
        Subject: CN=65DA4DD42F1E220DC9EE8082B2216E933AC6921D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:bc:10:b6:60:b9:68:51:8d:70:be:24:01:
                    5b:fd:a0:21:34:04:a0:92:c5:bf:e0:86:e7:4e:31:
                    01:fa:d5:a5:4e:27:7b:3b:e3:02:b6:b9:e7:06:3a:
                    13:73:4a:31:c7:e0:48:60:68:62:c5:46:68:24:4d:
                    66:5a:4d:5e:c1:ad:22:76:4d:b2:98:b5:42:90:69:
                    c7:66:55:d0:af:cb:f6:fe:37:82:84:26:14:59:91:
                    c1:9b:60:a1:12:44:e2:79:8d:71:74:be:16:f5:66:
                    54:f4:46:16:01:9c:1e:4c:e6:fe:23:17:de:51:6d:
                    be:2c:da:2a:62:7d:3c:eb:43:18:98:59:c5:c2:cb:
                    8d:79:45:bc:e0:cd:6c:be:35:5b:85:48:16:2c:d8:
                    7d:9c:69:08:fd:38:10:aa:67:b0:5c:39:01:9b:3e:
                    20:60:0b:0a:e8:4d:d6:62:9a:29:2e:0b:5b:e8:50:
                    c9:0c:7a:c3:6e:12:2a:43:e5:f7:ec:f1:f5:a9:f2:
                    9e:97:39:f4:12:24:24:b1:bb:51:31:ae:15:90:14:
                    86:cb:d3:00:ed:fc:68:0e:26:e7:a7:b9:14:86:31:
                    b9:d9:ff:ad:70:d4:23:05:5e:59:05:cc:02:93:48:
                    ce:c5:d5:f8:b2:1b:fe:20:98:3e:b0:12:a1:ec:4d:
                    97:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DA:4D:D4:2F:1E:22:0D:C9:EE:80:82:B2:21:6E:93:3A:C6:92:1D
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/323830343a336463303a643830303a3a2f33372d3337203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dc0:d800::/37

    Signature Algorithm: sha256WithRSAEncryption
         05:13:94:9f:da:b8:cf:fd:d9:f9:85:40:0b:c5:e6:05:69:4c:
         0c:91:53:cb:b1:0d:f1:31:b0:81:b7:0f:7e:51:cd:45:44:a6:
         50:bf:b3:22:0d:55:e5:e8:30:ad:6f:6d:f2:cd:30:59:6b:43:
         0c:3a:2f:35:69:6f:0c:90:0c:bf:d7:fa:a0:3e:43:11:e6:00:
         73:56:30:c8:03:80:04:77:3f:1d:9d:e7:a5:0d:b9:2c:cd:f1:
         26:5f:6a:48:f4:3b:64:27:d1:91:84:0f:42:cc:6f:14:7c:5d:
         f1:b9:6b:8c:b2:e4:12:a0:e3:48:e1:4b:43:7e:cf:7c:4b:d4:
         83:bd:44:e3:7d:33:83:3e:b9:eb:58:12:76:b1:2f:77:4f:5f:
         79:28:7a:17:05:37:fc:7e:09:11:60:8d:7c:98:7d:f2:3b:f1:
         bc:a9:cb:22:c7:59:c0:3d:00:b3:de:62:fd:70:ec:43:b7:c8:
         76:2f:98:0b:d9:c0:f9:61:66:38:25:c9:fb:0e:25:8d:ae:75:
         c6:2a:ce:de:9d:83:9a:21:de:d9:9e:c6:10:15:0e:e5:20:fe:
         7f:ee:a9:23:39:ee:ee:d2:ff:45:d3:90:7b:f8:1f:96:36:ae:
         b1:ab:6f:35:ab:f4:80:69:87:97:7d:53:bf:ae:7c:8a:42:d5:
         3e:82:32:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----