Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/323830343a343036633a3a2f33322d3334203d3e20323635393538.roa
File:                     323830343a343036633a3a2f33322d3334203d3e20323635393538.roa (raw, json)
Hash identifier:          Jvn2kKyHv/w58j8FJqh0s8j1Zu08DizTjW/eiVddDq4=
Subject key identifier:   FE:B0:C4:FE:C3:94:24:6D:0C:52:09:53:B7:B4:35:35:BC:B3:11:A3
Certificate issuer:       /CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
Certificate serial:       7D4CC41324093EC8FE5BA5DC1314A5188752D26C
Authority key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/323830343a343036633a3a2f33322d3334203d3e20323635393538.roa
Signing time:             Tue 12 Nov 2024 18:30:11 +0000
ROA not before:           Tue 12 Nov 2024 18:25:11 +0000
ROA not after:            Tue 11 Nov 2025 18:30:11 +0000
asID:                     265958
IP address blocks:        2804:406c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4c:c4:13:24:09:3e:c8:fe:5b:a5:dc:13:14:a5:18:87:52:d2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
        Validity
            Not Before: Nov 12 18:25:11 2024 GMT
            Not After : Nov 11 18:30:11 2025 GMT
        Subject: CN=FEB0C4FEC394246D0C520953B7B43535BCB311A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:ed:15:dc:4c:ff:1f:35:3c:9e:cb:1e:e5:
                    40:2a:4b:01:a6:00:9a:ed:2f:f8:71:1f:bc:70:c2:
                    b8:57:83:cc:b1:51:53:b8:08:ed:55:19:2b:58:ba:
                    12:cd:3b:87:f6:fe:6e:57:78:e4:3c:09:0c:13:b9:
                    d9:bc:9d:27:04:7f:1d:5d:c7:d3:56:b7:15:d0:7c:
                    40:06:5d:a3:04:3f:66:87:62:7c:f6:13:5a:c5:f3:
                    c1:00:27:ec:e9:7f:95:3d:c0:12:93:71:a4:fb:1c:
                    91:9c:f9:f1:2f:4b:6e:df:a0:32:16:1f:3f:77:bf:
                    8e:a6:54:7a:a4:9b:39:4a:f3:fb:3e:44:4d:ff:37:
                    37:73:34:48:7d:13:5f:0f:d5:33:86:e7:c1:67:4f:
                    a2:8b:e9:4d:eb:d5:23:9d:49:3a:7b:39:d2:da:c6:
                    51:63:0b:57:99:f8:7d:28:f3:89:1a:03:46:28:7b:
                    18:00:ec:01:12:82:6c:fd:a8:81:db:1f:e3:67:86:
                    84:ab:d8:8b:55:8c:12:d3:c6:15:90:30:ee:4f:84:
                    d1:9b:59:6e:dc:f8:3d:09:c9:80:90:be:64:ec:fd:
                    f2:a7:fd:e7:e8:ce:83:39:87:5e:c6:b3:50:6c:47:
                    67:8f:5e:95:a4:8b:d8:72:c8:9b:96:cd:60:c7:bb:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B0:C4:FE:C3:94:24:6D:0C:52:09:53:B7:B4:35:35:BC:B3:11:A3
            X509v3 Authority Key Identifier:
                keyid:64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/323830343a343036633a3a2f33322d3334203d3e20323635393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:406c::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:e2:64:a1:39:fb:d3:53:b3:a7:af:d0:c2:ff:8a:18:1b:ce:
         fb:a2:ee:e2:e1:28:a0:50:a5:af:84:aa:a3:a4:ea:be:fe:96:
         72:de:9e:67:38:08:e6:69:86:27:4e:d4:39:12:fd:bd:ae:fa:
         e5:a5:96:78:26:17:43:d1:05:f9:e9:93:1a:f2:46:36:c8:12:
         0f:6d:74:f8:2d:f8:9d:4e:5a:c8:5e:37:09:84:2d:e0:34:36:
         1b:83:6a:db:e7:ee:65:61:29:25:5d:79:40:24:26:7c:dc:0e:
         ac:bd:5f:54:9d:1c:ae:4f:13:27:98:e2:8f:fe:19:26:c2:61:
         b2:93:b4:d0:66:f0:a3:c5:d4:73:69:07:8e:02:db:2b:de:f1:
         6b:05:a8:ed:4c:f0:cb:68:2f:96:f9:65:23:d5:38:59:08:31:
         37:18:8c:1f:db:6c:11:2e:c1:ff:cc:02:78:b0:99:90:bf:3b:
         cb:c3:86:8a:cb:73:41:5a:75:4e:72:7a:df:0d:2b:b1:58:24:
         9e:cd:63:02:d7:50:49:0b:0c:e8:28:66:02:7a:af:4e:4c:f9:
         72:1b:c9:41:cd:19:43:3c:e6:1b:5a:7a:cd:57:97:dc:0a:b4:
         81:31:69:8a:48:29:dc:eb:6d:95:35:dc:ae:fd:75:59:c9:8f:
         b3:a1:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----