Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/323830343a356362343a3a2f33322d3438203d3e20323638393235.roa
File:                     323830343a356362343a3a2f33322d3438203d3e20323638393235.roa (raw, json)
Hash identifier:          idBMTObHIUQXTWkbqJVFghsJUEL6M9oRWC2kEo3gZ8g=
Subject key identifier:   BC:66:8B:B4:BA:42:5C:E7:F8:71:06:54:24:E8:FB:A6:4E:87:E1:22
Certificate issuer:       /CN=39B45C4B950BA846649D6FB0A3CB544BA12A9D95
Certificate serial:       36517DCDB41DEEAE9F02922F6F961EA2A39A18B9
Authority key identifier: 39:B4:5C:4B:95:0B:A8:46:64:9D:6F:B0:A3:CB:54:4B:A1:2A:9D:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/323830343a356362343a3a2f33322d3438203d3e20323638393235.roa
Signing time:             Thu 13 Mar 2025 18:28:17 +0000
ROA not before:           Thu 13 Mar 2025 18:23:17 +0000
ROA not after:            Thu 12 Mar 2026 18:28:17 +0000
asID:                     268925
IP address blocks:        2804:5cb4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:51:7d:cd:b4:1d:ee:ae:9f:02:92:2f:6f:96:1e:a2:a3:9a:18:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39B45C4B950BA846649D6FB0A3CB544BA12A9D95
        Validity
            Not Before: Mar 13 18:23:17 2025 GMT
            Not After : Mar 12 18:28:17 2026 GMT
        Subject: CN=BC668BB4BA425CE7F871065424E8FBA64E87E122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:d9:41:74:0c:84:bf:ea:ba:b3:ed:6b:8e:
                    00:a6:88:c0:84:eb:8d:2a:a1:2e:85:d4:7f:27:e3:
                    7f:f0:2d:70:03:f3:da:7a:b3:18:20:12:20:b0:a8:
                    b2:c5:c6:bc:af:1d:90:c1:65:35:79:1f:ea:4a:d8:
                    14:96:c6:bc:5f:a2:70:c2:ed:8e:ec:a6:17:13:49:
                    76:21:76:6f:a6:1a:1a:7d:c0:bb:98:a1:d8:a3:fa:
                    b8:dd:1d:ae:cd:7b:31:d5:d8:32:15:3d:da:2d:db:
                    43:12:7e:8d:6b:6e:b4:8d:63:32:d3:af:a1:e0:6d:
                    e7:ec:86:0c:2a:b9:7b:c7:8e:a7:89:fa:f9:d7:53:
                    4d:f7:2a:db:2c:72:0e:05:d3:fc:04:dd:ab:26:29:
                    29:bb:c4:a9:7c:47:5f:c2:74:e1:c8:67:7c:87:03:
                    d1:f6:ef:c0:18:19:95:ee:4d:50:90:3e:58:2d:6a:
                    fe:1a:0e:39:b6:ab:1d:fe:ac:9e:43:37:0c:47:5b:
                    17:c5:ed:f8:28:e9:a8:c5:30:f4:62:d3:61:01:d2:
                    fd:20:c5:32:df:b0:ac:ff:d8:4c:5b:83:6c:f9:31:
                    84:63:bb:da:30:8e:c4:4b:1e:a5:a9:9e:b2:2a:97:
                    ae:32:b2:a5:8d:91:49:24:5f:d9:72:31:8a:9b:1d:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:66:8B:B4:BA:42:5C:E7:F8:71:06:54:24:E8:FB:A6:4E:87:E1:22
            X509v3 Authority Key Identifier:
                keyid:39:B4:5C:4B:95:0B:A8:46:64:9D:6F:B0:A3:CB:54:4B:A1:2A:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/323830343a356362343a3a2f33322d3438203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:ba:c9:32:a0:c0:70:4e:83:fd:99:1f:c9:31:c2:25:48:01:
         43:e1:54:1c:27:15:d3:b6:79:41:09:95:5d:b2:e4:35:62:e5:
         77:b5:66:53:8f:6d:ec:ea:c9:29:db:bc:91:ad:e5:81:38:d3:
         08:30:ca:d5:fa:a2:0f:44:27:3e:2c:71:de:df:16:20:af:5b:
         01:1e:43:2c:ab:41:db:6b:4c:7f:1d:05:02:c4:bf:14:b6:a8:
         c5:3a:33:96:b9:2f:02:ae:4e:f1:70:63:7e:68:19:2d:fc:f5:
         d8:ae:9c:38:6d:c1:6c:70:92:65:29:1f:c9:e0:8d:6f:d3:d3:
         11:20:86:8d:65:b5:1f:e7:5c:32:54:16:16:4b:e1:f5:de:b5:
         5a:94:a9:e5:a1:b0:76:25:ba:b3:77:c0:57:21:7f:1a:ec:ba:
         a9:b7:2e:76:ca:ee:b0:a1:63:31:05:1d:47:21:a7:c8:90:1e:
         e2:20:b1:1a:4c:1d:a3:48:e9:7d:52:a1:07:c7:60:11:61:a1:
         43:b9:a2:89:b7:d5:97:7c:6b:78:56:7a:d9:03:68:84:e6:4b:
         99:ef:aa:50:a3:e3:66:6b:ea:06:8c:ef:74:3c:bd:29:01:8b:
         17:a8:a4:1f:32:84:f3:8a:96:44:a6:19:62:31:01:20:bc:73:
         67:26:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----