Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa
File:                     323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa (raw, json)
Hash identifier:          ADrInN8ntHhqOZd+iCgS0ToLAoyLYqDRUFREVlNiCQI=
Subject key identifier:   71:2C:EF:65:FD:3F:3E:64:32:44:2B:19:88:5D:68:01:EB:D9:1B:2E
Certificate issuer:       /CN=48A5CE43DDF5F691570117B79D047D25F3A4035E
Certificate serial:       36A732B51083690682435AAF82EC01C6E7DED4B2
Authority key identifier: 48:A5:CE:43:DD:F5:F6:91:57:01:17:B7:9D:04:7D:25:F3:A4:03:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48A5CE43DDF5F691570117B79D047D25F3A4035E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa
Signing time:             Thu 30 Jan 2025 17:21:12 +0000
ROA not before:           Thu 30 Jan 2025 17:16:12 +0000
ROA not after:            Thu 29 Jan 2026 17:21:12 +0000
asID:                     274647
IP address blocks:        2804:9188:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a7:32:b5:10:83:69:06:82:43:5a:af:82:ec:01:c6:e7:de:d4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48A5CE43DDF5F691570117B79D047D25F3A4035E
        Validity
            Not Before: Jan 30 17:16:12 2025 GMT
            Not After : Jan 29 17:21:12 2026 GMT
        Subject: CN=712CEF65FD3F3E6432442B19885D6801EBD91B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:83:fc:b8:8b:f2:8e:c7:c4:fd:12:0a:59:
                    45:45:fe:78:3d:b9:69:de:7e:8f:c1:cd:96:04:79:
                    b7:73:4a:81:d7:35:1b:6d:68:d3:9f:e5:f1:dc:19:
                    ee:54:ee:bd:19:6d:4c:37:53:32:22:ff:11:f5:d8:
                    0d:95:be:1c:73:31:49:b6:3e:14:87:14:f8:b7:9e:
                    2a:d6:f4:12:ac:d3:b5:b3:e1:fd:3c:de:41:f7:3a:
                    11:3c:20:65:1d:f3:39:fa:e1:88:88:d8:28:cc:18:
                    99:27:07:ed:72:07:5d:f9:c1:30:77:2a:22:45:7e:
                    ea:fa:91:31:55:79:10:57:63:ad:35:6b:5f:2e:b1:
                    43:40:fc:12:44:22:65:36:a2:45:4e:41:bc:9d:f1:
                    e3:86:d7:63:0f:17:02:b1:53:f2:79:c3:e2:92:c3:
                    3a:fc:2c:06:24:a1:43:3b:31:10:1a:a8:87:bc:05:
                    26:17:7a:52:20:e4:04:0f:99:ef:1d:14:d6:5e:ac:
                    82:56:a9:6f:f0:7a:d2:d6:58:8b:bd:2c:1f:40:b5:
                    fc:5c:d1:d6:82:b9:b3:4e:68:5f:f8:1a:7a:ca:51:
                    07:e5:38:e8:63:5e:09:fd:eb:b2:5a:6a:74:d1:aa:
                    bc:17:ce:ac:1c:80:ea:a7:2f:75:48:79:d0:56:cf:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2C:EF:65:FD:3F:3E:64:32:44:2B:19:88:5D:68:01:EB:D9:1B:2E
            X509v3 Authority Key Identifier:
                keyid:48:A5:CE:43:DD:F5:F6:91:57:01:17:B7:9D:04:7D:25:F3:A4:03:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/48A5CE43DDF5F691570117B79D047D25F3A4035E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48A5CE43DDF5F691570117B79D047D25F3A4035E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:ad:40:6f:77:14:8e:72:2a:22:18:af:a4:55:d2:0a:1f:
         68:23:a4:f3:11:eb:8f:c2:ac:39:46:cf:78:93:59:18:7d:59:
         9f:f4:ef:e3:61:79:fd:66:d8:dc:0a:9a:1c:b1:97:40:25:75:
         0d:8c:0b:7f:90:73:98:d4:df:a1:e9:30:d2:8b:f3:9f:b3:e6:
         7e:cc:f7:ef:e8:ee:02:94:1c:00:92:28:7c:4c:54:eb:ec:51:
         28:14:db:4f:0f:7b:97:9a:f6:e5:b9:0d:fc:5d:71:4e:05:5c:
         10:dc:a4:f6:c0:0b:fe:94:21:2d:66:cf:df:43:e7:4b:1c:fc:
         c4:e5:38:2f:c4:a0:71:91:d9:b8:93:c4:fb:2b:64:ef:49:69:
         d8:cd:6c:29:ca:2f:3e:a2:0c:04:21:52:5b:3d:7d:d5:1f:6c:
         8a:f4:b5:90:d1:8c:bb:3d:55:67:9d:78:96:a7:ca:54:d8:02:
         ca:cb:09:d3:7d:70:bb:53:3b:24:01:c9:d0:98:12:c0:92:ef:
         06:3b:fa:98:85:6a:38:22:05:2e:2f:fb:4f:a0:5c:9b:5a:a7:
         45:fe:2e:e2:ba:6e:af:80:3a:de:2a:3b:43:58:39:ea:4c:b4:
         f6:35:bb:9f:2c:a6:dd:f0:b2:88:63:cf:bc:9f:84:f0:6a:33:
         de:ca:d7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----