Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PBA4yrX8UxhiTYuQsDmzo1HVY8fXMw2re1CdYBNAsfa/0/323830343a313636633a3a2f33322d313238203d3e20323632333130.roa
File:                     323830343a313636633a3a2f33322d313238203d3e20323632333130.roa (raw, json)
Hash identifier:          hn6B1PUxgozuF7/hPnMmVqGnrWpREJvfbl01q//GHAM=
Subject key identifier:   27:AC:B2:5A:92:32:B3:A5:DE:AD:1D:8A:8A:31:52:69:D7:B0:B9:03
Certificate issuer:       /CN=15FAE1DAEE4377F151B6F71CA4052F0484861346
Certificate serial:       3F27B545610A891CE7F63A75C2EA5346BE25E531
Authority key identifier: 15:FA:E1:DA:EE:43:77:F1:51:B6:F7:1C:A4:05:2F:04:84:86:13:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15FAE1DAEE4377F151B6F71CA4052F0484861346.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PBA4yrX8UxhiTYuQsDmzo1HVY8fXMw2re1CdYBNAsfa/0/323830343a313636633a3a2f33322d313238203d3e20323632333130.roa
Signing time:             Thu 30 Jan 2025 13:18:04 +0000
ROA not before:           Thu 30 Jan 2025 13:13:04 +0000
ROA not after:            Thu 29 Jan 2026 13:18:04 +0000
asID:                     262310
IP address blocks:        2804:166c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:27:b5:45:61:0a:89:1c:e7:f6:3a:75:c2:ea:53:46:be:25:e5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15FAE1DAEE4377F151B6F71CA4052F0484861346
        Validity
            Not Before: Jan 30 13:13:04 2025 GMT
            Not After : Jan 29 13:18:04 2026 GMT
        Subject: CN=27ACB25A9232B3A5DEAD1D8A8A315269D7B0B903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c3:22:8e:89:d9:13:af:de:56:05:d9:89:3f:
                    57:cb:92:32:4e:97:da:18:1b:a0:68:69:67:2d:91:
                    78:59:22:78:80:4e:98:c2:2b:9e:03:63:2b:fd:9c:
                    7d:12:8b:8e:6d:bb:4d:0b:6f:6f:54:96:b6:12:b8:
                    1b:b4:cb:7e:46:68:81:f3:35:18:d1:46:7d:3b:d9:
                    d2:a5:dd:6b:ba:d0:b4:95:e6:25:c7:b9:27:80:29:
                    9b:55:5c:34:8b:10:d3:81:71:6b:70:67:fa:fd:45:
                    d5:a7:21:b0:86:f1:dc:56:b0:49:85:8a:1b:df:b6:
                    72:33:f2:83:81:52:6a:6f:62:1b:dc:88:b7:a4:c6:
                    bc:49:10:17:78:cf:17:78:86:81:6c:d8:7f:66:5f:
                    98:39:5b:56:b2:9f:1a:f8:6b:24:fa:a1:73:ac:2b:
                    21:31:81:d3:c4:22:5e:23:24:ea:93:88:a4:18:08:
                    d2:7e:ec:5f:5a:e6:25:b8:17:ee:35:0b:a8:4c:e6:
                    7f:23:6f:81:4f:e3:c0:9a:c0:97:6c:77:0a:c2:ac:
                    c8:14:00:7b:7b:88:2a:8c:90:8c:32:f2:84:04:91:
                    fc:ed:c6:b8:12:b4:62:5d:ff:67:ef:6d:41:84:4f:
                    55:b2:8f:e7:f4:24:67:2e:61:34:14:8f:d9:f6:3f:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AC:B2:5A:92:32:B3:A5:DE:AD:1D:8A:8A:31:52:69:D7:B0:B9:03
            X509v3 Authority Key Identifier:
                keyid:15:FA:E1:DA:EE:43:77:F1:51:B6:F7:1C:A4:05:2F:04:84:86:13:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PBA4yrX8UxhiTYuQsDmzo1HVY8fXMw2re1CdYBNAsfa/0/15FAE1DAEE4377F151B6F71CA4052F0484861346.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15FAE1DAEE4377F151B6F71CA4052F0484861346.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PBA4yrX8UxhiTYuQsDmzo1HVY8fXMw2re1CdYBNAsfa/0/323830343a313636633a3a2f33322d313238203d3e20323632333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:166c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:2f:35:91:88:87:1c:fd:71:b8:4a:7d:1b:34:5b:92:11:9e:
         27:6c:9b:e1:2d:01:1a:88:ff:3d:dc:22:91:ed:a6:a0:13:7b:
         73:52:cf:d2:ca:dd:0c:3e:a0:3d:27:d4:47:9a:f9:f0:8d:44:
         3f:16:8b:d2:e0:a9:81:c5:2b:76:d7:a1:da:ff:bf:84:97:56:
         eb:bd:e8:10:b2:b9:b0:32:8b:93:d3:e7:12:60:97:da:bf:5e:
         4b:35:bc:ae:f0:f6:9e:1c:47:8e:e1:35:15:f6:8e:5f:61:44:
         49:33:9a:f8:c7:ff:a7:f0:be:c0:da:1a:01:9f:4b:ff:5e:fb:
         ef:e1:01:23:f5:7c:a2:52:dc:bc:9a:9d:a8:9c:af:be:a8:53:
         51:65:c6:15:53:ca:37:ec:cb:0d:15:27:66:4b:37:34:c3:d0:
         0b:a7:04:05:02:cf:11:c5:c4:88:f0:c9:a2:f0:e6:55:3f:a6:
         7f:df:63:9d:78:96:39:ef:27:c6:8e:f0:f8:ce:44:92:3b:db:
         1c:21:5f:10:1a:ed:5d:91:8b:43:8c:db:51:ac:f3:89:49:87:
         25:60:2e:26:73:19:ea:21:83:fa:d7:a8:22:5c:55:e6:0b:61:
         b2:dc:a0:7a:65:93:52:6e:5e:89:8a:99:24:8f:b1:c2:48:77:
         70:90:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----