Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/323830343a343938633a3a2f33322d3335203d3e20323637313930.roa
File:                     323830343a343938633a3a2f33322d3335203d3e20323637313930.roa (raw, json)
Hash identifier:          JDwbfuv5X7DqFEyL057JsWXmm5+K2thACvC5bw280n4=
Subject key identifier:   1B:C8:D0:8D:1F:9A:C6:83:4D:45:AF:8D:3E:A7:B8:81:4A:F7:CE:19
Certificate issuer:       /CN=4273B563259728F1EFD6BB3011E0F26828FB113D
Certificate serial:       51C8E8E7820DBCF25CB902EA6E9405D3BAB1773C
Authority key identifier: 42:73:B5:63:25:97:28:F1:EF:D6:BB:30:11:E0:F2:68:28:FB:11:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/323830343a343938633a3a2f33322d3335203d3e20323637313930.roa
Signing time:             Wed 03 Apr 2024 18:32:03 +0000
ROA not before:           Wed 03 Apr 2024 18:27:03 +0000
ROA not after:            Wed 02 Apr 2025 18:32:03 +0000
asID:                     267190
IP address blocks:        2804:498c::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c8:e8:e7:82:0d:bc:f2:5c:b9:02:ea:6e:94:05:d3:ba:b1:77:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4273B563259728F1EFD6BB3011E0F26828FB113D
        Validity
            Not Before: Apr  3 18:27:03 2024 GMT
            Not After : Apr  2 18:32:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:61:60:15:0a:dd:6e:96:3c:14:7d:a4:55:
                    7b:fc:a7:4c:84:30:a2:68:75:9c:ea:c0:4f:fb:a1:
                    8c:3b:a1:1a:f1:76:7c:d4:0b:64:94:2a:a8:e8:ca:
                    18:77:26:03:d4:e6:5d:3b:69:2f:ef:fe:ca:c8:cb:
                    f1:e1:ea:fe:b8:19:a9:f6:31:4c:f1:7c:f8:d8:20:
                    27:87:20:35:95:61:de:84:80:5c:84:61:e3:15:4b:
                    bd:9b:d7:55:4d:1d:bd:42:f0:f4:6e:eb:bf:4d:c8:
                    35:01:07:de:4c:69:72:8c:20:08:cc:75:6b:52:49:
                    34:53:12:bd:00:99:d0:e1:11:47:5a:83:30:d8:c1:
                    f9:50:b3:44:75:08:59:1a:d0:62:9d:d0:cc:22:5b:
                    b2:a3:e5:9b:e5:84:ab:aa:79:f5:6a:a8:fa:3d:cc:
                    f3:c5:32:aa:d8:9d:5c:2f:f0:a2:e8:1d:67:87:97:
                    72:10:1e:ed:37:f4:fb:59:7c:63:5a:80:54:60:a3:
                    16:28:70:48:ce:2d:17:5a:ab:b8:35:b4:b9:a9:a5:
                    52:f3:0c:9f:7a:9b:0e:6d:6b:34:9b:37:c6:fc:4b:
                    e2:72:5d:a9:f5:5f:26:1a:88:b1:d6:c1:a1:11:1e:
                    8d:7d:0a:a9:07:ed:ce:57:00:ca:46:e3:91:1b:1f:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C8:D0:8D:1F:9A:C6:83:4D:45:AF:8D:3E:A7:B8:81:4A:F7:CE:19
            X509v3 Authority Key Identifier:
                keyid:42:73:B5:63:25:97:28:F1:EF:D6:BB:30:11:E0:F2:68:28:FB:11:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/323830343a343938633a3a2f33322d3335203d3e20323637313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:498c::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:2c:4b:80:f3:84:6c:07:56:ee:cf:46:ce:4f:99:13:0c:d8:
         ac:72:d4:bc:88:4c:5a:9d:50:08:aa:d6:6c:5b:5f:f0:d9:12:
         47:3f:9e:01:3f:56:be:77:90:d7:41:f3:44:81:f0:d1:d3:16:
         5d:f5:62:ad:83:38:1b:1c:15:12:f8:75:95:6b:39:e6:2b:07:
         47:e7:86:cf:1d:a8:1d:23:09:a2:87:82:45:6d:8d:e9:61:ef:
         63:45:37:01:e7:52:b4:56:60:a1:68:fb:f5:60:4f:09:a7:72:
         9e:b6:74:21:6a:25:8e:0f:0d:63:f5:49:11:4d:c5:f8:50:ae:
         4d:9d:5c:b4:6d:7a:c5:06:25:e5:d8:cf:83:8d:c3:bc:91:e6:
         db:5d:1b:a2:8e:6e:6f:e8:70:a4:98:b3:9d:e2:0e:a9:7c:c4:
         69:a3:ea:5a:aa:d3:7b:8b:01:29:44:0e:08:1c:ae:a1:c8:fb:
         a0:53:9d:07:63:ba:d3:b9:aa:6b:ba:b0:dc:40:89:2d:26:95:
         e0:ed:55:d9:58:4d:bf:27:b1:a6:7e:7f:a9:11:9b:77:c0:af:
         11:11:d8:08:5c:f4:e4:c4:0d:8f:4e:ea:e4:de:81:b9:87:b3:
         e3:59:9e:8d:05:59:8f:e2:6f:e0:b8:f6:97:4b:66:96:c8:da:
         53:5d:c5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----