Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33342d3334203d3e20323637393432.roa
File:                     323830343a353539303a3a2f33342d3334203d3e20323637393432.roa (raw, json)
Hash identifier:          3Fw8rhKab+AeU6hwcPfeMs+YJuhCpPGW9kbdboVQUbk=
Subject key identifier:   C0:C6:1E:26:E1:50:00:D2:44:DC:29:81:5C:86:B2:16:7B:1C:56:1B
Certificate issuer:       /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial:       14EEA609BB9FFB59D989FE255F7B6316144205B4
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33342d3334203d3e20323637393432.roa
Signing time:             Wed 26 Mar 2025 16:49:41 +0000
ROA not before:           Wed 26 Mar 2025 16:44:41 +0000
ROA not after:            Wed 25 Mar 2026 16:49:41 +0000
asID:                     267942
IP address blocks:        2804:5590::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ee:a6:09:bb:9f:fb:59:d9:89:fe:25:5f:7b:63:16:14:42:05:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
        Validity
            Not Before: Mar 26 16:44:41 2025 GMT
            Not After : Mar 25 16:49:41 2026 GMT
        Subject: CN=C0C61E26E15000D244DC29815C86B2167B1C561B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:47:56:92:d7:6a:76:0f:04:30:dd:68:91:
                    d7:f5:d4:37:cd:49:d1:c6:3f:aa:5b:00:8f:48:fd:
                    45:64:d8:6e:3c:ed:7a:3f:8d:b9:8b:89:e9:86:8d:
                    d5:3d:02:30:87:e4:c4:64:6e:40:24:ab:a8:ef:df:
                    e3:1e:69:13:aa:40:66:9a:2d:e1:bc:d9:2f:d6:c5:
                    0d:ae:34:f9:3f:df:b2:03:13:3d:fb:73:e5:df:c7:
                    20:b7:b0:14:ad:fb:46:46:fb:ee:7b:dd:a8:d6:ba:
                    61:7e:64:a8:16:81:dc:55:a4:23:f3:66:5e:21:54:
                    82:b7:5c:88:2f:99:21:22:f1:5d:c7:13:7a:1e:36:
                    a2:6b:76:ec:da:06:70:b3:dc:14:6e:f2:83:7c:be:
                    ca:45:29:8a:e1:90:b5:bb:96:87:cc:d1:92:79:8b:
                    f2:68:77:29:bd:a5:d3:b3:f8:99:a1:b4:3e:d1:69:
                    36:46:f0:ae:25:a7:ed:a7:74:b7:5b:95:44:a4:74:
                    84:e4:7b:64:a0:ec:89:a2:ca:2a:78:80:ed:5f:07:
                    51:2e:78:6e:89:7a:79:36:b2:20:0b:42:61:13:53:
                    66:cc:97:a1:0b:7c:4d:0b:54:1f:ea:32:6d:15:f6:
                    04:a2:c7:da:a7:f7:e6:dc:3c:f2:ff:99:f4:ae:b3:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C6:1E:26:E1:50:00:D2:44:DC:29:81:5C:86:B2:16:7B:1C:56:1B
            X509v3 Authority Key Identifier:
                keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a3a2f33342d3334203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5590::/34

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:33:69:a2:6a:ce:d7:39:73:99:e5:ba:e5:06:c0:c4:18:
         67:94:62:c9:6f:97:17:e6:e7:fe:a6:ce:7b:85:2a:3d:b3:60:
         b5:21:39:a8:88:62:f2:d2:7d:1f:4c:d8:a6:9a:83:c4:a7:6b:
         c2:36:bd:e6:2a:5d:68:ce:ef:f3:49:bc:46:e2:de:76:95:58:
         5a:ed:b4:41:0e:36:2f:41:94:57:17:be:e8:31:5e:44:94:92:
         c1:f0:3d:88:29:7b:e0:54:22:5c:af:94:1b:ad:4d:45:8e:16:
         b0:db:40:28:83:d8:f9:56:e1:b6:96:95:91:7d:79:75:24:ee:
         0e:7a:8e:95:1b:27:a6:c8:58:04:0d:cb:e2:6c:24:f5:fe:56:
         e6:cd:4e:fe:4f:2f:91:19:01:59:37:49:13:07:da:21:a9:1b:
         87:81:01:5a:b4:6d:a2:4d:e5:d4:bc:1c:5a:e7:10:5d:d6:78:
         3a:f4:46:fb:08:38:25:c5:a5:40:5d:3f:b7:64:97:93:f2:95:
         4f:7c:37:fa:1c:8f:a3:be:18:d6:82:c6:e5:f5:84:3c:b3:7e:
         ee:e7:c1:57:f9:9b:92:2b:af:ac:44:c9:ae:d0:c4:e2:42:de:
         62:17:ad:e5:13:87:11:8a:d9:52:30:1e:56:9b:31:db:b4:97:
         1f:36:1b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----