Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa
File:                     323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa (raw, json)
Hash identifier:          UHfObB46KIoIhGmZO6+WgzAp4FiTo2Q+jvvAH1jSvWg=
Subject key identifier:   B0:D9:AB:43:10:50:EA:47:A1:A9:CF:49:8C:6E:5A:33:27:A8:3A:6A
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       76B050D2E2FC6FEB0A6AF6719A1D572B542405AD
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:31 +0000
ROA not before:           Wed 03 Apr 2024 18:25:31 +0000
ROA not after:            Wed 02 Apr 2025 18:30:31 +0000
asID:                     2716
IP address blocks:        2804:0:1c00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b0:50:d2:e2:fc:6f:eb:0a:6a:f6:71:9a:1d:57:2b:54:24:05:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:31 2024 GMT
            Not After : Apr  2 18:30:31 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:03:3c:f6:b1:e9:50:62:e2:64:08:b7:af:
                    75:15:dc:bb:8d:42:6b:ab:05:1a:e7:3d:67:49:10:
                    ad:6e:d2:76:61:50:89:28:23:11:c0:23:1d:78:85:
                    63:de:6b:05:cf:d1:77:10:54:0b:d8:55:5d:54:3b:
                    d7:3a:e8:2a:77:83:82:a9:2d:eb:87:e7:50:c6:46:
                    cf:37:9e:b4:78:2a:2c:62:ff:27:5a:32:13:9a:7e:
                    2e:54:c5:c0:b6:72:b4:6b:22:1a:02:7b:dd:81:3a:
                    7f:a9:aa:26:6b:49:9e:53:a9:bd:31:85:e8:87:91:
                    7d:15:32:f1:38:52:c4:2d:dd:24:bc:94:2b:3b:bb:
                    1c:3c:0e:4e:8e:b2:e6:6d:1c:f5:ca:5b:fb:d3:9f:
                    49:39:51:9b:62:93:3b:50:51:7a:29:c2:35:58:3b:
                    ad:2b:cc:64:cd:bb:49:d0:88:2b:4b:3d:06:25:0b:
                    46:97:6a:c9:ba:07:df:f9:c5:d8:41:5e:c3:e4:67:
                    64:97:d2:84:65:22:7b:c4:65:1d:4e:38:5b:fa:45:
                    c4:24:3d:dd:23:71:9f:ea:51:44:58:f6:69:30:8f:
                    b8:d9:82:71:cd:f8:e6:18:71:18:85:8f:79:52:6b:
                    63:ef:46:5f:e8:1c:2c:48:bf:97:9c:79:1a:de:2e:
                    17:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D9:AB:43:10:50:EA:47:A1:A9:CF:49:8C:6E:5A:33:27:A8:3A:6A
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:1c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:f9:24:ad:a7:12:5c:d0:c3:1d:49:5f:8f:98:35:e5:89:56:
         91:50:5f:84:4b:59:51:43:e7:34:b5:e1:40:7d:1e:12:73:3e:
         9d:a1:fd:36:50:35:d0:75:0f:b0:63:eb:65:fc:d7:00:1f:49:
         62:43:4c:d3:ed:43:18:e0:d0:e9:46:7e:c1:0f:63:63:f6:d9:
         c5:f0:e4:73:f8:a2:ee:02:c6:44:8e:ce:07:aa:68:ab:fc:76:
         3e:e6:e3:44:4e:1f:68:bc:a9:34:0a:9b:5e:ea:f6:c0:18:0b:
         52:d5:51:b5:af:28:bf:eb:0f:f6:62:21:9a:b6:72:7b:2b:c1:
         60:bf:5d:fa:02:07:3e:2b:de:5c:3d:92:84:db:db:c8:b6:83:
         ce:0a:1a:ef:ec:49:c6:e8:5e:40:07:2a:84:bd:82:24:c4:d5:
         72:00:f4:f0:a5:1d:ad:ac:e6:05:e2:9b:fe:02:c6:6c:5a:1e:
         f9:00:44:05:86:b5:f9:46:6d:19:4e:f0:13:35:e3:28:c3:ad:
         46:6f:db:f4:8b:68:ce:d8:6a:1e:c6:f7:3e:d8:4f:8d:2f:dd:
         dd:9b:9d:b2:02:39:db:dc:d0:9a:44:79:dc:1f:a3:f7:cf:1c:
         07:42:ab:b4:84:0c:d1:2f:3f:8b:89:a4:de:3c:3a:4d:91:99:
         66:4c:53:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----