Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/323830343a366630303a3a2f33322d3438203d3e20323730363332.roa
File:                     323830343a366630303a3a2f33322d3438203d3e20323730363332.roa (raw, json)
Hash identifier:          jJ4INCaDtpkNTfeQF34IvHaI29xWAp3tPZEwATNryoQ=
Subject key identifier:   88:59:86:75:28:77:FD:A2:EA:9F:02:C3:5B:3F:07:C1:0E:42:DC:95
Certificate issuer:       /CN=3E1007D33C96F71F7F7B127F38EAB03E4D1CB811
Certificate serial:       178E5D2E560D5B56842CDEBD0A89FC92682A521C
Authority key identifier: 3E:10:07:D3:3C:96:F7:1F:7F:7B:12:7F:38:EA:B0:3E:4D:1C:B8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E1007D33C96F71F7F7B127F38EAB03E4D1CB811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/323830343a366630303a3a2f33322d3438203d3e20323730363332.roa
Signing time:             Fri 21 Jul 2023 21:59:49 +0000
ROA not before:           Fri 21 Jul 2023 21:54:49 +0000
ROA not after:            Fri 19 Jul 2024 21:59:49 +0000
asID:                     270632
IP address blocks:        2804:6f00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8e:5d:2e:56:0d:5b:56:84:2c:de:bd:0a:89:fc:92:68:2a:52:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E1007D33C96F71F7F7B127F38EAB03E4D1CB811
        Validity
            Not Before: Jul 21 21:54:49 2023 GMT
            Not After : Jul 19 21:59:49 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f9:d9:1a:2d:f9:87:4f:e3:72:1c:f6:ed:4c:
                    b5:6f:61:ee:fd:5a:53:f7:ff:85:3f:dc:47:6e:e5:
                    cb:43:71:df:b4:a8:76:cc:ee:d6:bc:d3:fb:bf:0e:
                    8d:0d:6c:15:b2:6d:04:25:66:7e:c9:c2:cb:0f:04:
                    c7:8f:b4:fa:9c:ac:89:cc:6a:f4:56:72:fd:da:2d:
                    d7:db:df:66:65:5f:c8:fc:e3:88:d2:f4:ca:81:5d:
                    ae:5a:ca:39:70:40:4d:38:8b:ed:54:e4:18:63:9d:
                    47:fa:d3:ac:29:6b:57:2f:87:e4:06:e6:62:81:0d:
                    83:23:9a:f9:9f:19:e5:ad:45:3b:bd:75:c4:f7:10:
                    71:9b:e7:16:65:27:5e:ff:b8:04:f7:9a:35:86:23:
                    01:29:6a:fd:16:a7:5d:09:cd:23:53:a3:3c:cd:c9:
                    83:05:74:47:af:f3:8f:cb:8d:6c:f1:38:da:7c:e2:
                    d5:db:50:1f:22:31:e9:6e:61:15:1f:e4:3f:95:f1:
                    c3:18:1e:b1:3d:43:45:27:8b:1a:33:a7:50:3c:fb:
                    5b:5e:7e:0e:26:57:dc:6a:10:3c:06:e6:ed:1b:fe:
                    11:74:41:d0:bf:dc:50:b7:23:7a:66:bf:86:5d:0f:
                    83:3d:66:9e:23:75:53:3e:84:9e:5e:8a:b8:f5:1f:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:59:86:75:28:77:FD:A2:EA:9F:02:C3:5B:3F:07:C1:0E:42:DC:95
            X509v3 Authority Key Identifier:
                keyid:3E:10:07:D3:3C:96:F7:1F:7F:7B:12:7F:38:EA:B0:3E:4D:1C:B8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/3E1007D33C96F71F7F7B127F38EAB03E4D1CB811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E1007D33C96F71F7F7B127F38EAB03E4D1CB811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/323830343a366630303a3a2f33322d3438203d3e20323730363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:20:5c:e8:fe:17:23:4d:f5:e1:83:32:66:6e:13:36:81:6b:
         cd:2e:ff:6e:6f:2e:da:9d:6c:50:da:90:1c:ae:e5:0b:d5:71:
         7f:82:13:2c:56:eb:05:97:bc:82:e3:7e:6a:72:f7:21:c8:09:
         fe:ba:4a:7a:22:67:6e:46:3c:91:da:49:90:05:23:f8:a9:57:
         be:93:38:9a:43:0e:c5:b3:19:66:f4:5b:60:d3:24:28:ab:52:
         41:48:dc:8d:4f:7c:f0:c7:34:15:43:4b:e6:f5:96:e5:72:23:
         36:ea:ca:fd:d7:68:9f:c4:4c:3e:1d:74:f0:ad:eb:bb:3e:08:
         68:be:b7:66:b5:d6:a9:bc:1b:1c:41:e4:2f:5c:98:58:d6:9d:
         3e:9b:53:49:0d:2f:72:f7:e2:02:fb:2c:09:8c:45:b0:0e:d0:
         fb:ba:3e:4f:26:ee:cd:81:c4:b5:de:83:de:09:8c:9f:9c:ea:
         f5:d7:c5:8b:0e:5a:0b:c1:ba:bc:83:1b:72:e2:77:e6:a2:ed:
         d1:ac:a1:a4:ff:d7:02:d1:b5:69:5f:bf:19:92:18:5b:2d:98:
         1c:9d:04:d6:cd:06:02:ca:87:ce:24:d1:15:68:cc:45:92:fb:
         91:6e:d6:11:40:d1:b7:9a:7a:c2:c6:28:0c:95:e8:66:e5:7f:
         7d:38:e6:4f
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUF45dLlYNW1aELN69Con8kmgqUhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UxMDA3RDMzQzk2RjcxRjdGN0IxMjdGMzhFQUIwM0U0
RDFDQjgxMTAeFw0yMzA3MjEyMTU0NDlaFw0yNDA3MTkyMTU5NDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTlGOUQ5MUEyREY5ODc0RkUz
NzIxQ0Y2RUQ0Q0I1NkY2MUVFRkQ1QTUzRjdGRjg1M0ZEQzQ3NkVFNUNCNDM3MURG
QjRBODc2Q0NFRUQ2QkNEM0ZCQkYwRThEMEQ2QzE1QjI2RDA0MjU2NjdFQzlDMkNC
MEYwNEM3OEZCNEZBOUNBQzg5Q0M2QUY0NTY3MkZEREEyREQ3REJERjY2NjU1RkM4
RkNFMzg4RDJGNENBODE1REFFNUFDQTM5NzA0MDREMzg4QkVENTRFNDE4NjM5RDQ3
RkFEM0FDMjk2QjU3MkY4N0U0MDZFNjYyODEwRDgzMjM5QUY5OUYxOUU1QUQ0NTNC
QkQ3NUM0RjcxMDcxOUJFNzE2NjUyNzVFRkZCODA0Rjc5QTM1ODYyMzAxMjk2QUZE
MTZBNzVEMDlDRDIzNTNBMzNDQ0RDOTgzMDU3NDQ3QUZGMzhGQ0I4RDZDRjEzOERB
N0NFMkQ1REI1MDFGMjIzMUU5NkU2MTE1MUZFNDNGOTVGMUMzMTgxRUIxM0Q0MzQ1
Mjc4QjFBMzNBNzUwM0NGQjVCNUU3RTBFMjY1N0RDNkExMDNDMDZFNkVEMUJGRTEx
NzQ0MUQwQkZEQzUwQjcyMzdBNjZCRjg2NUQwRjgzM0Q2NjlFMjM3NTUzM0U4NDlF
NUU4QUI4RjUxRjk1M0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6fnZGi35h0/jchz27Uy1b2Hu/VpT9/+FP9xHbuXLQ3HftKh2zO7W
vNP7vw6NDWwVsm0EJWZ+ycLLDwTHj7T6nKyJzGr0VnL92i3X299mZV/I/OOI0vTK
gV2uWso5cEBNOIvtVOQYY51H+tOsKWtXL4fkBuZigQ2DI5r5nxnlrUU7vXXE9xBx
m+cWZSde/7gE95o1hiMBKWr9FqddCc0jU6M8zcmDBXRHr/OPy41s8TjafOLV21Af
IjHpbmEVH+Q/lfHDGB6xPUNFJ4saM6dQPPtbXn4OJlfcahA8BubtG/4RdEHQv9xQ
tyN6Zr+GXQ+DPWaeI3VTPoSeXoq49R+VPwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FIhZhnUod/2i6p8Cw1s/B8EOQtyVMB8GA1UdIwQYMBaAFD4QB9M8lvcff3sSfzjq
sD5NHLgRMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pEQUZDR01Hc2dydTFl
eURrZXkzcEhkQ1hLWWMzMlV3eTFUd3E3dkFpc2thLzAvM0UxMDA3RDMzQzk2Rjcx
RjdGN0IxMjdGMzhFQUIwM0U0RDFDQjgxMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zRTEwMDdEMzNDOTZGNzFGN0Y3QjEyN0YzOEVBQjAzRTREMUNC
ODExLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KREFGQ0dNR3NncnUxZXlEa2V5
M3BIZENYS1ljMzJVd3kxVHdxN3ZBaXNrYS8wLzMyMzgzMDM0M2EzNjY2MzAzMDNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMDM2MzMzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
bwAwDQYJKoZIhvcNAQELBQADggEBAJsgXOj+FyNN9eGDMmZuEzaBa80u/25vLtqd
bFDakByu5QvVcX+CEyxW6wWXvILjfmpy9yHICf66SnoiZ25GPJHaSZAFI/ipV76T
OJpDDsWzGWb0W2DTJCirUkFI3I1PfPDHNBVDS+b1luVyIzbqyv3XaJ/ETD4ddPCt
67s+CGi+t2a11qm8GxxB5C9cmFjWnT6bU0kNL3L34gL7LAmMRbAO0Pu6Pk8m7s2B
xLXeg94JjJ+c6vXXxYsOWgvBuryDG3Lid+ai7dGsoaT/1wLRtWlfvxmSGFstmByd
BNbNBgLKh84k0RVozEWS+5Fu1hFA0beaesLGKAyV6Gblf3045k8=
-----END CERTIFICATE-----