Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          7dNJI/uELwA9oWQavlBHvTAZ5ZUYxhgLqB3m1glla1M=
Subject key identifier:   A0:46:88:FE:60:99:8F:D1:A2:B0:B2:14:57:89:76:D3:FB:6A:D0:BB
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       17CA49AD601E0F39EA320F39E334010E2C3BC5D2
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Mon 13 Jan 2025 12:54:57 +0000
ROA not before:           Mon 13 Jan 2025 12:49:57 +0000
ROA not after:            Mon 12 Jan 2026 12:54:57 +0000
asID:                     268568
IP address blocks:        2804:532c:120::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ca:49:ad:60:1e:0f:39:ea:32:0f:39:e3:34:01:0e:2c:3b:c5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:49:57 2025 GMT
            Not After : Jan 12 12:54:57 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3b:2a:05:28:31:d3:2b:df:96:3c:43:c1:cf:
                    03:89:9f:8d:47:14:0f:75:23:5f:21:86:ae:4a:ed:
                    8e:a8:15:bd:bc:97:78:a8:59:83:72:b5:15:6e:f9:
                    09:e6:a1:09:d0:09:bf:33:17:5b:eb:1b:89:52:04:
                    de:db:aa:fe:7e:3a:ef:aa:f0:41:ea:0e:2a:30:47:
                    54:3b:c3:a3:4b:06:e1:5a:82:09:22:d3:0f:29:8d:
                    3d:f9:c7:69:71:ec:17:5d:78:ef:42:ed:da:34:f6:
                    2b:90:4a:b1:73:36:cb:ec:a0:15:39:e5:ca:59:c8:
                    d9:be:e6:de:54:7d:53:6d:21:5c:5d:df:5c:55:9a:
                    5c:26:f0:12:91:5c:80:99:27:ee:47:e6:9d:d5:a0:
                    ab:c0:e8:e8:09:a2:c1:d3:26:83:3f:e3:c3:f7:37:
                    4f:13:c0:8c:fa:bd:59:40:6c:cd:79:7a:be:20:57:
                    48:7b:5c:5e:b0:81:b0:fc:c2:6d:bb:8f:f3:ef:49:
                    54:50:ac:22:ce:a3:4a:0a:71:32:e8:87:ac:d5:00:
                    ec:53:95:0b:b4:ac:dd:17:6f:ee:0c:1b:f3:1d:45:
                    03:aa:71:9e:1a:54:a8:42:10:1d:73:f9:5f:4b:77:
                    9d:40:5e:7f:74:e1:9d:7b:cd:31:a1:ca:59:c1:8b:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:46:88:FE:60:99:8F:D1:A2:B0:B2:14:57:89:76:D3:FB:6A:D0:BB
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:120::/45

    Signature Algorithm: sha256WithRSAEncryption
         88:5d:7d:5a:af:b7:2e:f2:d0:aa:e2:55:51:a0:c5:56:9b:89:
         55:91:53:fc:a3:28:ab:d2:6d:d7:c2:a9:33:db:14:a8:95:8b:
         16:84:76:ea:c7:65:e6:d5:68:ee:96:0a:dd:d9:75:97:70:a0:
         b7:a5:43:8f:a6:5f:fc:23:4e:78:1a:58:1b:c4:1f:73:ef:eb:
         ea:43:a0:08:03:d3:41:ba:e2:13:4a:c9:19:8d:78:90:9e:58:
         50:88:e2:f4:be:44:1f:37:8a:d7:7c:73:fc:a4:5e:0e:56:48:
         3d:e1:bb:e1:d4:27:df:f4:cb:cb:40:83:bd:05:85:bb:73:7f:
         e0:34:1e:ef:89:28:af:0f:b4:6b:57:01:8e:96:44:65:65:f6:
         8c:35:4a:20:75:7c:ae:d2:19:fe:30:65:e9:1d:d0:67:b0:74:
         64:60:b4:e0:0e:ae:9a:96:dc:76:53:8e:07:f6:1c:2b:c6:2d:
         57:1b:6d:f7:bb:05:04:57:09:5a:59:1a:5c:12:64:a6:e0:42:
         ac:5d:f0:2b:77:d7:de:4b:0b:8c:60:36:38:67:fb:47:8d:1e:
         31:5b:75:a0:8f:66:25:e3:39:75:28:78:67:e8:f0:ab:d6:68:
         21:02:49:72:a6:43:40:4f:33:40:17:1f:3d:d2:c0:2e:6f:56:
         89:cd:ba:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----