Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/323830343a376462383a3a2f33322d3334203d3e20323731353738.roa
File:                     323830343a376462383a3a2f33322d3334203d3e20323731353738.roa (raw, json)
Hash identifier:          zWdvY7spJtU1I3YM8NzdWE1Oldk4aR/ZzenGT3ze/i4=
Subject key identifier:   2E:3F:58:85:89:D1:CE:2E:4E:26:C8:5E:3B:27:DF:2C:E8:41:76:57
Certificate issuer:       /CN=F0FA15D2AD9F7ABCB46842B2E8E9C79B32AAC1BC
Certificate serial:       6DC08DA2B8312B91FFEE706E191D95BB1918A7BA
Authority key identifier: F0:FA:15:D2:AD:9F:7A:BC:B4:68:42:B2:E8:E9:C7:9B:32:AA:C1:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0FA15D2AD9F7ABCB46842B2E8E9C79B32AAC1BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/323830343a376462383a3a2f33322d3334203d3e20323731353738.roa
Signing time:             Tue 30 Jun 2026 15:32:06 +0000
ROA not before:           Tue 30 Jun 2026 15:27:06 +0000
ROA not after:            Tue 29 Jun 2027 15:32:06 +0000
asID:                     271578
IP address blocks:        2804:7db8::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c0:8d:a2:b8:31:2b:91:ff:ee:70:6e:19:1d:95:bb:19:18:a7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0FA15D2AD9F7ABCB46842B2E8E9C79B32AAC1BC
        Validity
            Not Before: Jun 30 15:27:06 2026 GMT
            Not After : Jun 29 15:32:06 2027 GMT
        Subject: CN=2E3F588589D1CE2E4E26C85E3B27DF2CE8417657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:b1:aa:9f:3e:aa:11:2d:8b:88:1f:eb:f2:
                    a6:4a:44:c4:ba:62:fa:ae:be:3a:b1:9e:54:71:99:
                    99:f9:5d:7c:6b:d2:53:7e:a6:71:ac:3c:2f:e6:ae:
                    fd:66:88:96:28:60:54:a4:40:90:2d:6c:a5:fc:46:
                    97:47:24:b1:00:e3:5a:8b:86:0c:5f:00:86:ba:bc:
                    1b:be:1e:71:e3:1d:43:41:5a:ec:8c:41:30:16:61:
                    18:16:b5:c2:72:19:b9:0e:e5:56:a7:29:72:69:43:
                    79:ac:ca:88:d5:74:9e:d4:2c:e2:93:72:97:7b:6e:
                    e0:6c:73:c7:a8:3a:32:21:cf:9c:53:81:a0:1c:95:
                    e5:35:99:44:ca:59:ba:80:8d:f1:f4:da:7d:e8:3a:
                    00:bb:af:bb:46:0c:bc:a6:6f:6a:ae:75:38:d7:8a:
                    8c:bb:a4:e3:91:19:75:52:dd:82:40:1b:5b:40:89:
                    d0:2b:e0:7e:f4:98:f0:4b:79:d2:b7:9e:14:28:b2:
                    b3:f2:9b:50:f9:b6:50:9d:31:4c:91:65:59:f1:90:
                    78:fd:67:0f:ce:30:cf:b8:d3:49:50:11:0e:4d:23:
                    58:23:7f:6d:c7:2c:15:a8:09:4e:31:24:fd:1f:50:
                    79:c3:28:1b:b6:4d:b3:39:44:91:aa:6b:5e:e1:34:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3F:58:85:89:D1:CE:2E:4E:26:C8:5E:3B:27:DF:2C:E8:41:76:57
            X509v3 Authority Key Identifier:
                keyid:F0:FA:15:D2:AD:9F:7A:BC:B4:68:42:B2:E8:E9:C7:9B:32:AA:C1:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/F0FA15D2AD9F7ABCB46842B2E8E9C79B32AAC1BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0FA15D2AD9F7ABCB46842B2E8E9C79B32AAC1BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/323830343a376462383a3a2f33322d3334203d3e20323731353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7db8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:0e:15:47:45:6a:2f:21:f7:44:bd:1c:07:76:d9:1c:d6:2f:
         98:47:e2:e6:a8:fc:bb:0a:86:4a:ae:4b:83:16:60:88:1a:8b:
         05:94:60:99:45:1d:91:9d:a9:20:3a:e4:67:77:38:4a:71:ee:
         6c:a1:27:6d:84:ac:74:8e:21:fe:b2:77:65:ac:23:6f:9d:4d:
         7b:5b:fe:68:ed:43:16:81:55:4b:6c:4e:67:48:ad:46:ef:20:
         c2:26:5b:63:c0:9d:33:14:e9:b4:51:66:0a:d2:43:bf:5b:4c:
         2c:77:66:93:71:49:cf:9f:cf:41:69:94:87:1f:74:03:b9:73:
         20:14:68:f2:7d:de:e1:45:c9:5d:4f:0d:7e:42:64:e8:6a:93:
         d1:02:20:85:36:38:40:cb:ef:96:e0:c9:88:a8:65:fc:25:6c:
         4c:4a:49:67:1f:87:09:5e:82:79:35:84:8d:5a:ed:29:6d:be:
         4a:8f:ff:e2:bc:f7:a9:48:36:77:c7:ff:d4:50:19:91:14:10:
         3e:d0:67:89:0c:1b:93:67:0b:a9:9f:c1:a9:47:c5:22:1d:3c:
         8d:81:7e:bf:68:bc:17:20:ae:04:b1:5c:b0:8e:cf:56:6a:31:
         2a:e4:dd:7a:da:e0:e5:37:fd:96:a6:77:2a:b0:c4:f4:af:c9:
         9c:d8:5c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----