Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/323830343a386463383a3a2f33322d313238203d3e20323733333830.roa
File:                     323830343a386463383a3a2f33322d313238203d3e20323733333830.roa (raw, json)
Hash identifier:          gwtqThmFfBBRfY5zv0KC/+3RZZWjpt+QItHoZWMT4JQ=
Subject key identifier:   4E:84:13:00:6D:10:5D:A3:20:ED:B5:C1:A6:E9:6B:F2:F4:1F:BF:3F
Certificate issuer:       /CN=20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32
Certificate serial:       5711B08769B2A2E15264FAD5281EF63470086B2E
Authority key identifier: 20:A6:A3:D5:A5:B9:41:5D:EF:FE:9F:19:45:F6:AD:A2:46:CD:7F:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/323830343a386463383a3a2f33322d313238203d3e20323733333830.roa
Signing time:             Tue 21 Jan 2025 19:44:47 +0000
ROA not before:           Tue 21 Jan 2025 19:39:47 +0000
ROA not after:            Tue 20 Jan 2026 19:44:47 +0000
asID:                     273380
IP address blocks:        2804:8dc8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:11:b0:87:69:b2:a2:e1:52:64:fa:d5:28:1e:f6:34:70:08:6b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32
        Validity
            Not Before: Jan 21 19:39:47 2025 GMT
            Not After : Jan 20 19:44:47 2026 GMT
        Subject: CN=4E8413006D105DA320EDB5C1A6E96BF2F41FBF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7b:38:f9:e1:e9:2e:61:c9:65:ac:39:00:93:
                    f0:6e:27:44:f8:47:83:9d:63:0f:2a:fe:93:36:ff:
                    8b:e7:6b:33:4d:1e:30:dd:2a:61:27:3e:e1:d6:16:
                    89:00:fb:dd:5d:ba:de:f8:e5:fe:c7:59:a2:4b:7d:
                    ea:bd:95:fe:da:85:65:95:ef:df:91:95:ba:05:98:
                    ca:cf:df:de:ff:2a:61:c4:5a:71:4a:34:1e:7d:ee:
                    8a:f8:de:44:14:bc:e5:87:9c:76:d9:14:b4:eb:65:
                    5a:d6:13:ec:53:2b:1b:a7:ab:97:96:68:06:0c:fc:
                    e5:c2:a4:0b:79:59:28:14:62:3c:04:43:cf:a8:8c:
                    38:29:84:bd:0d:58:6a:98:41:7b:6d:47:cb:53:26:
                    f3:1f:10:f0:e0:64:87:8b:c7:69:6f:f0:dc:3e:c2:
                    a4:4a:9c:55:1f:74:16:cc:a3:7d:50:43:da:21:03:
                    66:38:6f:11:ba:f5:6f:41:62:f0:46:29:12:27:76:
                    91:90:94:a6:59:c9:f9:a7:d6:60:57:98:61:cf:4b:
                    80:f4:02:34:ac:ec:15:d8:ec:b1:66:8b:84:bb:d4:
                    40:b5:9b:d8:0f:4f:22:f2:f0:91:07:65:d6:aa:0f:
                    5d:82:37:bc:9f:3c:3e:12:94:6c:f5:67:cc:35:58:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:84:13:00:6D:10:5D:A3:20:ED:B5:C1:A6:E9:6B:F2:F4:1F:BF:3F
            X509v3 Authority Key Identifier:
                keyid:20:A6:A3:D5:A5:B9:41:5D:EF:FE:9F:19:45:F6:AD:A2:46:CD:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20A6A3D5A5B9415DEFFE9F1945F6ADA246CD7F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1ozXjpPjhjyM2R8SeRFGC8NTG8mLnpGtbPngX9MNxFS/0/323830343a386463383a3a2f33322d313238203d3e20323733333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:c2:bb:df:22:01:b3:d4:48:33:49:15:af:51:7b:19:54:d5:
         06:8f:bc:67:14:b3:bf:43:4e:38:1a:cb:47:42:55:1a:fd:05:
         2d:78:37:98:e7:35:bb:8e:2f:6d:17:81:94:61:3e:73:5a:4b:
         c0:db:41:11:e5:9e:c3:75:0f:46:af:f7:ba:c0:0a:ae:47:ad:
         cc:56:37:dc:b2:c2:f4:18:1c:90:b8:2d:43:53:5e:4d:35:24:
         b8:e9:7b:ea:86:cd:b5:c7:f2:8d:ca:88:a7:ff:02:08:a4:17:
         0d:2b:04:81:18:8a:ac:7b:35:7f:53:14:fc:a3:9b:1b:5d:2c:
         aa:40:eb:3a:fb:10:f4:a9:97:df:0a:82:95:ee:7e:b7:53:79:
         5e:74:33:e7:91:ae:41:be:25:19:20:93:57:3d:c6:6f:51:73:
         e9:b7:25:33:23:91:ed:0e:4b:9b:19:7b:17:28:56:f9:37:53:
         54:f9:d3:34:d6:72:27:fa:b9:22:c9:44:a6:4d:f2:9b:7a:1c:
         39:a3:2c:48:1e:22:0a:f6:5f:1b:49:39:4d:f1:e2:41:d0:9b:
         17:58:2c:ca:f1:8e:6c:e5:6c:4a:4e:e3:17:00:22:25:aa:e2:
         76:a5:f6:12:03:24:87:50:44:93:6a:d6:7f:d7:72:7f:d0:a6:
         0c:b8:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----