Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa
File:                     323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa (raw, json)
Hash identifier:          BKgJupMkcmlOoQ3bWfcoBC+pCrvPGn6GuLw/NhGtQgw=
Subject key identifier:   88:6B:BE:DF:A8:0F:C4:32:42:CB:57:F4:99:FF:F6:63:49:B8:BB:51
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       6F804916EEB854FF2B2DEEF2629C330D87004A62
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa
Signing time:             Wed 03 Apr 2024 18:30:36 +0000
ROA not before:           Wed 03 Apr 2024 18:25:36 +0000
ROA not after:            Wed 02 Apr 2025 18:30:36 +0000
asID:                     271754
IP address blocks:        2804:8080:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:80:49:16:ee:b8:54:ff:2b:2d:ee:f2:62:9c:33:0d:87:00:4a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Apr  3 18:25:36 2024 GMT
            Not After : Apr  2 18:30:36 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:d1:b9:c4:9a:b1:5a:c2:99:c2:95:41:cf:
                    d1:62:e3:41:c7:d1:f4:48:a0:f9:d1:e6:d6:1a:e3:
                    fb:fb:cf:72:00:f8:6f:dd:bf:ff:0c:1c:12:58:fc:
                    e7:f4:69:fd:86:3e:51:6b:d0:39:d2:36:0f:70:67:
                    72:94:71:bd:b5:ef:88:46:64:3a:af:25:0a:2a:3d:
                    d6:d9:66:2e:dc:bf:61:70:ce:0d:5b:4c:b5:1c:67:
                    c8:35:d7:94:81:76:b8:95:45:15:ab:73:71:45:6e:
                    b4:7e:b8:c1:0b:68:a7:cf:dc:f7:ca:9b:e6:85:0d:
                    92:37:a7:eb:d8:5c:80:ef:c8:b7:d0:34:8c:e4:88:
                    fc:67:4e:af:45:52:6c:a7:89:f0:20:23:58:5c:b4:
                    4a:00:d3:12:75:56:3a:b3:fb:74:1e:ce:01:c0:1d:
                    8d:18:02:0b:50:f7:12:22:9a:a1:20:c7:c6:7d:2d:
                    27:d0:30:9b:74:fa:14:a9:ef:b6:5b:3e:a5:f7:e0:
                    f5:c6:88:b5:ea:66:b1:70:f5:26:07:04:1f:5d:7f:
                    3d:3c:ab:b0:1b:bf:aa:70:c5:46:67:06:b4:e5:a5:
                    5b:54:bc:9f:dd:59:91:9f:1a:5c:32:34:1d:c7:40:
                    84:c3:91:90:21:96:09:47:22:f5:c7:c1:c9:c9:2e:
                    49:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6B:BE:DF:A8:0F:C4:32:42:CB:57:F4:99:FF:F6:63:49:B8:BB:51
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ad:83:9d:bb:96:83:cf:74:65:5d:ef:26:4e:b0:f5:4b:d0:4c:
         c0:18:4e:38:72:b2:ec:e2:4b:42:c1:a7:c5:d4:00:41:28:fc:
         e3:8c:6c:cc:96:4b:21:f5:8f:63:74:36:15:bc:58:d1:27:a6:
         ef:c4:f8:52:1c:a3:6c:b4:89:23:0c:a6:ac:0b:70:e1:fd:19:
         d4:ed:f3:ee:f7:a8:f2:3f:d4:db:ab:83:2c:3b:7a:2e:84:90:
         82:65:4e:64:43:ea:08:45:9e:b6:43:69:89:84:64:da:09:95:
         c0:a9:c8:e2:bd:12:42:00:6f:04:09:90:65:87:c2:70:6b:7d:
         e0:a4:76:f3:4f:7b:bc:4c:96:e9:bd:0a:99:1f:d2:44:1a:27:
         9f:d1:dd:0c:e7:66:c0:ee:10:98:9c:72:ae:91:31:b2:14:ac:
         9d:9e:84:a1:d9:28:e9:e4:78:fc:8d:20:cb:70:64:c8:9b:7b:
         bd:a5:4d:a0:1a:04:e1:d7:02:2e:f9:88:d5:ef:b1:58:a4:e9:
         c6:ac:28:c3:df:ae:7c:6c:22:ec:38:fa:54:83:10:dd:6f:e6:
         4b:a6:2f:af:ec:5b:78:41:25:73:02:5d:ae:bc:df:bc:51:10:
         61:d0:a1:3b:e8:3c:0e:f5:3e:26:26:46:03:ac:cc:fa:61:9a:
         51:c5:8e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----