Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a61383a3a2f33322d3332203d3e2034323330.roa
File:                     323830343a61383a3a2f33322d3332203d3e2034323330.roa (raw, json)
Hash identifier:          xu/haIwuLN/mlZhIfubVt1B4f0HFeY5exGP6lBAvdc8=
Subject key identifier:   06:CA:57:82:5D:21:CB:3F:08:73:42:5B:51:3F:8F:C0:17:DF:A9:B8
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       145B9400180D7B43B627484AABCA1CBC689A4EA7
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a61383a3a2f33322d3332203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     4230
IP address blocks:        2804:a8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5b:94:00:18:0d:7b:43:b6:27:48:4a:ab:ca:1c:bc:68:9a:4e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:01:47:fb:49:ed:9b:0d:87:3b:36:ac:5c:
                    a7:c7:1c:64:0b:60:8a:e0:05:20:e4:e2:cc:99:5b:
                    28:1e:7b:de:67:19:bc:d6:92:f6:c1:06:98:e5:2d:
                    78:ce:2c:5b:83:15:38:a1:93:8d:c0:e5:1e:91:2e:
                    92:1d:b8:b2:29:4d:44:f0:53:e3:05:4e:92:8a:68:
                    67:ba:ba:9f:d3:83:13:aa:60:c6:9d:2c:e1:5c:e9:
                    16:40:41:c3:a7:f4:38:4d:20:4f:e3:70:65:1e:48:
                    c3:14:0c:d8:79:59:cc:22:c0:31:38:66:fc:93:e7:
                    05:db:18:65:64:dc:56:21:56:4e:0b:aa:46:3b:76:
                    ea:13:f3:ea:fc:a6:f3:1f:bb:a6:f2:03:82:68:0e:
                    3c:5b:ca:4f:1b:93:97:ca:04:b5:be:33:be:77:a2:
                    38:42:ea:73:38:3c:00:53:4d:47:30:42:dd:bc:41:
                    37:1b:ba:7a:ca:50:5f:d4:8e:f5:ae:1b:1c:c0:0c:
                    ef:0a:d8:2a:12:09:07:72:3b:50:46:43:be:b3:89:
                    37:de:9b:4b:11:79:c0:7a:84:db:8d:40:d9:42:0d:
                    9d:90:b8:b7:db:0e:04:f4:cd:6e:fd:78:6a:0b:52:
                    c2:24:ad:49:60:8e:c1:35:34:83:eb:c7:1a:6c:4e:
                    83:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CA:57:82:5D:21:CB:3F:08:73:42:5B:51:3F:8F:C0:17:DF:A9:B8
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a61383a3a2f33322d3332203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:f4:33:e5:73:3f:59:94:86:1e:f1:7b:76:b4:53:2e:40:bb:
         ca:5e:f1:7a:a4:94:63:97:0d:66:6a:4d:ee:d8:30:ad:e3:d4:
         41:24:19:f9:81:ac:92:c5:31:85:28:af:5c:52:54:69:0b:b8:
         4e:c0:d5:ee:1b:4f:2b:f6:58:3b:64:73:10:20:9e:c0:38:47:
         0a:79:47:df:8d:56:b1:1f:2f:2c:22:0a:66:24:ad:42:9d:5c:
         a8:7e:ed:4b:b4:f7:58:52:f5:a4:4e:09:07:e3:4f:70:fd:db:
         61:db:74:54:08:c8:6f:bc:24:b0:e2:af:6a:bf:e6:e2:ae:9b:
         2d:0f:aa:0e:b5:29:13:4b:65:0d:e9:1b:44:2f:6c:9f:28:6c:
         c6:a1:bc:a8:74:a2:51:86:a6:94:d4:2f:61:ba:34:c5:46:9f:
         17:d5:14:a9:4a:95:1e:4f:d0:eb:04:dd:cc:3b:5c:d4:f5:3c:
         33:25:95:5b:14:c9:ae:3d:8e:fb:75:f1:24:72:01:2c:61:2b:
         49:98:3f:b2:0e:4c:a3:51:c1:b2:ac:00:e8:cf:41:1a:ac:de:
         56:4c:a3:d0:9f:fd:f7:b4:77:bc:5a:32:b5:25:48:17:e0:79:
         2d:62:ed:d9:6b:45:95:0a:65:c5:fd:90:d5:5c:c8:4d:4d:03:
         38:35:58:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----