Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ36bow4CKhHNtpoQTvcppaiwCModEyyQCJ74gZXiamJ/0/323830343a363030633a3a2f33322d3438203d3e20323639313432.roa
File:                     323830343a363030633a3a2f33322d3438203d3e20323639313432.roa (raw, json)
Hash identifier:          YTYSJBjF5i4BXXE1s6xLLtseNcGUhHnfA74XfY8Ezvk=
Subject key identifier:   C2:39:08:39:85:E4:AD:BE:47:0F:A4:D0:FD:7B:33:37:F5:69:26:BF
Certificate issuer:       /CN=20C37C967AD9517587DAEF31174C2C326A14929F
Certificate serial:       3D53BD358E2407680C4E7515B015B7E849C72D5B
Authority key identifier: 20:C3:7C:96:7A:D9:51:75:87:DA:EF:31:17:4C:2C:32:6A:14:92:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20C37C967AD9517587DAEF31174C2C326A14929F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ36bow4CKhHNtpoQTvcppaiwCModEyyQCJ74gZXiamJ/0/323830343a363030633a3a2f33322d3438203d3e20323639313432.roa
Signing time:             Fri 15 Sep 2023 14:26:00 +0000
ROA not before:           Fri 15 Sep 2023 14:21:00 +0000
ROA not after:            Fri 13 Sep 2024 14:26:00 +0000
asID:                     269142
IP address blocks:        2804:600c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:53:bd:35:8e:24:07:68:0c:4e:75:15:b0:15:b7:e8:49:c7:2d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20C37C967AD9517587DAEF31174C2C326A14929F
        Validity
            Not Before: Sep 15 14:21:00 2023 GMT
            Not After : Sep 13 14:26:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:9f:ab:b7:58:3f:18:ac:37:09:f2:e3:7c:
                    91:4f:8c:d4:ff:e0:c5:28:97:15:1a:14:d3:4d:1d:
                    61:fb:b3:b0:5c:16:97:ed:fe:be:62:85:32:67:d0:
                    11:33:a1:9d:1d:2f:b4:f4:16:2c:d9:a8:01:3d:96:
                    e9:8c:35:36:09:1c:9e:21:51:7b:04:48:e3:e8:c7:
                    e5:d1:4c:5f:d0:78:d0:d9:36:13:d5:37:4f:89:91:
                    73:21:6a:8c:93:85:d4:65:47:55:64:63:3e:85:af:
                    d5:c2:3c:b1:8e:69:83:dd:e4:16:89:d8:2c:b6:ee:
                    ef:d3:1f:a2:99:26:c9:81:1f:bf:96:70:f1:cf:9e:
                    c3:37:f7:dd:f7:10:3f:03:47:03:f7:c3:b8:31:06:
                    36:11:1d:09:68:4a:e8:71:e2:42:66:c6:d6:83:a9:
                    25:09:14:2c:1e:c7:fb:55:e2:1d:ad:0f:94:ae:98:
                    0b:6f:e5:1e:5d:b8:1c:3b:f3:39:8d:04:7c:88:63:
                    03:e4:e8:bc:32:8c:95:f9:23:a5:a8:5e:48:61:52:
                    67:20:a1:c7:ec:0c:34:f9:3f:25:9d:ef:d5:78:81:
                    3f:07:9c:da:14:90:98:2d:2e:58:63:3a:2f:52:fb:
                    28:9c:24:81:41:1c:ab:d6:9c:3b:2c:42:e9:b1:4b:
                    1d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:39:08:39:85:E4:AD:BE:47:0F:A4:D0:FD:7B:33:37:F5:69:26:BF
            X509v3 Authority Key Identifier:
                keyid:20:C3:7C:96:7A:D9:51:75:87:DA:EF:31:17:4C:2C:32:6A:14:92:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ36bow4CKhHNtpoQTvcppaiwCModEyyQCJ74gZXiamJ/0/20C37C967AD9517587DAEF31174C2C326A14929F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20C37C967AD9517587DAEF31174C2C326A14929F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ36bow4CKhHNtpoQTvcppaiwCModEyyQCJ74gZXiamJ/0/323830343a363030633a3a2f33322d3438203d3e20323639313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:600c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:60:f2:a8:f7:3f:45:fd:7e:ba:a8:ed:72:c0:e0:bb:fb:49:
         65:1d:36:2c:54:b8:49:64:63:6b:c6:7e:27:7a:4d:e7:1c:2a:
         c8:3a:d1:ac:66:82:fe:05:a4:76:1f:08:56:eb:9b:11:ff:d6:
         81:ca:a0:97:c5:19:bd:bb:6a:e5:be:98:62:4c:b1:a2:dd:d0:
         aa:75:4c:8e:c4:75:a6:4b:e9:29:c4:90:55:ad:a0:4f:1c:9f:
         83:cf:bc:cf:16:c5:6d:13:e1:89:9f:17:d4:f2:36:1a:14:cb:
         91:3e:4d:f9:90:99:ef:26:b7:6f:2c:5d:f4:67:b6:88:e9:2b:
         5e:0a:e4:24:3d:13:a1:ca:0d:51:14:b5:ad:d4:57:58:9c:73:
         f3:a5:3e:1d:31:9b:b5:9e:1f:f5:e5:e1:7c:bc:c6:1e:4b:0b:
         7b:3e:33:b8:94:7e:7a:ed:b2:c2:3a:35:96:c6:bd:e3:50:fb:
         2b:fc:54:c0:10:af:d3:ef:46:be:5d:cb:d1:ad:4c:2d:12:89:
         7d:88:75:f5:a7:b7:3c:73:93:18:d2:53:4a:09:a5:52:fa:fa:
         9a:a7:e6:e7:ac:f6:31:0c:3a:4a:96:7b:26:73:e6:ad:8a:2b:
         b3:bf:49:f7:5d:dd:b9:d4:9b:b0:15:fb:1a:87:15:6c:ff:0a:
         aa:f1:5e:a9
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUPVO9NY4kB2gMTnUVsBW36EnHLVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBDMzdDOTY3QUQ5NTE3NTg3REFFRjMxMTc0QzJDMzI2
QTE0OTI5RjAeFw0yMzA5MTUxNDIxMDBaFw0yNDA5MTMxNDI2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkUxNTlGQUJCNzU4M0YxOEFD
MzcwOUYyRTM3QzkxNEY4Q0Q0RkZFMEM1Mjg5NzE1MUExNEQzNEQxRDYxRkJCM0Iw
NUMxNjk3RURGRUJFNjI4NTMyNjdEMDExMzNBMTlEMUQyRkI0RjQxNjJDRDlBODAx
M0Q5NkU5OEMzNTM2MDkxQzlFMjE1MTdCMDQ0OEUzRThDN0U1RDE0QzVGRDA3OEQw
RDkzNjEzRDUzNzRGODk5MTczMjE2QThDOTM4NUQ0NjU0NzU1NjQ2MzNFODVBRkQ1
QzIzQ0IxOEU2OTgzRERFNDE2ODlEODJDQjZFRUVGRDMxRkEyOTkyNkM5ODExRkJG
OTY3MEYxQ0Y5RUMzMzdGN0RERjcxMDNGMDM0NzAzRjdDM0I4MzEwNjM2MTExRDA5
Njg0QUU4NzFFMjQyNjZDNkQ2ODNBOTI1MDkxNDJDMUVDN0ZCNTVFMjFEQUQwRjk0
QUU5ODBCNkZFNTFFNURCODFDM0JGMzM5OEQwNDdDODg2MzAzRTRFOEJDMzI4Qzk1
RjkyM0E1QTg1RTQ4NjE1MjY3MjBBMUM3RUMwQzM0RjkzRjI1OURFRkQ1Nzg4MTNG
MDc5Q0RBMTQ5MDk4MkQyRTU4NjMzQTJGNTJGQjI4OUMyNDgxNDExQ0FCRDY5QzNC
MkM0MkU5QjE0QjFEODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvhWfq7dYPxisNwny43yRT4zU/+DFKJcVGhTTTR1h+7OwXBaX7f6+
YoUyZ9ARM6GdHS+09BYs2agBPZbpjDU2CRyeIVF7BEjj6Mfl0Uxf0HjQ2TYT1TdP
iZFzIWqMk4XUZUdVZGM+ha/VwjyxjmmD3eQWidgstu7v0x+imSbJgR+/lnDxz57D
N/fd9xA/A0cD98O4MQY2ER0JaEroceJCZsbWg6klCRQsHsf7VeIdrQ+UrpgLb+Ue
XbgcO/M5jQR8iGMD5Oi8MoyV+SOlqF5IYVJnIKHH7Aw0+T8lne/VeIE/B5zaFJCY
LS5YYzovUvsonCSBQRyr1pw7LELpsUsdgQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FMI5CDmF5K2+Rw+k0P17Mzf1aSa/MB8GA1UdIwQYMBaAFCDDfJZ62VF1h9rvMRdM
LDJqFJKfMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dKMzZib3c0Q0toSE50
cG9RVHZjcHBhaXdDTW9kRXl5UUNKNzRnWlhpYW1KLzAvMjBDMzdDOTY3QUQ5NTE3
NTg3REFFRjMxMTc0QzJDMzI2QTE0OTI5Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yMEMzN0M5NjdBRDk1MTc1ODdEQUVGMzExNzRDMkMzMjZBMTQ5
MjlGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HSjM2Ym93NENLaEhOdHBvUVR2
Y3BwYWl3Q01vZEV5eVFDSjc0Z1pYaWFtSi8wLzMyMzgzMDM0M2EzNjMwMzA2MzNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzOTMxMzQzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
YAwwDQYJKoZIhvcNAQELBQADggEBAK5g8qj3P0X9frqo7XLA4Lv7SWUdNixUuElk
Y2vGfid6TeccKsg60axmgv4FpHYfCFbrmxH/1oHKoJfFGb27auW+mGJMsaLd0Kp1
TI7EdaZL6SnEkFWtoE8cn4PPvM8WxW0T4YmfF9TyNhoUy5E+TfmQme8mt28sXfRn
tojpK14K5CQ9E6HKDVEUta3UV1icc/OlPh0xm7WeH/Xl4Xy8xh5LC3s+M7iUfnrt
ssI6NZbGveNQ+yv8VMAQr9PvRr5dy9GtTC0SiX2IdfWntzxzkxjSU0oJpVL6+pqn
5ues9jEMOkqWeyZz5q2KK7O/Sfdd3bnUm7AV+xqHFWz/CqrxXqk=
-----END CERTIFICATE-----