Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133343a3a2f34362d3436203d3e20323638353638.roa
File:                     323830343a353332633a3133343a3a2f34362d3436203d3e20323638353638.roa (raw, json)
Hash identifier:          JtvOpPmakjEoAY6F3FQ4pWobMXdeRsDEJTgyltwScFg=
Subject key identifier:   E6:2A:32:0C:70:C4:75:F8:EB:37:B1:C1:4E:06:5F:7D:A1:57:1C:76
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       0EC7FA596BA3B6894AD4F3CD2025D1037A4F5F14
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133343a3a2f34362d3436203d3e20323638353638.roa
Signing time:             Mon 13 Jan 2025 12:55:02 +0000
ROA not before:           Mon 13 Jan 2025 12:50:02 +0000
ROA not after:            Mon 12 Jan 2026 12:55:02 +0000
asID:                     268568
IP address blocks:        2804:532c:134::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c7:fa:59:6b:a3:b6:89:4a:d4:f3:cd:20:25:d1:03:7a:4f:5f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:50:02 2025 GMT
            Not After : Jan 12 12:55:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:da:52:c8:17:0a:89:e4:c3:a3:ca:21:34:
                    07:e2:07:c1:46:6e:9c:9c:06:3b:e1:36:ed:01:5a:
                    67:ea:23:31:74:6e:84:00:e7:ab:b9:05:be:59:ae:
                    7f:b3:01:5b:23:36:fc:41:ce:93:72:46:49:e5:72:
                    56:b4:b1:1b:68:15:b3:6a:44:26:f5:ac:4e:54:a0:
                    90:7c:03:d0:78:82:24:70:47:21:37:80:5c:64:5f:
                    f2:4c:af:53:bf:33:3d:44:66:96:93:4d:05:2c:fd:
                    fc:fa:c8:c3:44:f1:9a:cd:2b:d0:d5:13:12:3e:50:
                    a4:42:0a:81:55:49:f8:27:2f:ce:02:55:83:02:f6:
                    eb:7b:0c:b1:78:56:e8:68:57:b7:89:28:9a:c5:27:
                    ad:a6:82:6d:e7:3a:6c:72:5b:a3:92:46:ce:70:44:
                    ac:18:06:b4:e7:8d:63:cb:1c:a2:5a:70:0e:94:64:
                    c7:ed:b0:23:69:58:2d:4b:02:de:41:79:61:8a:0e:
                    0e:27:06:c7:62:55:1a:bf:8b:8b:9a:7e:8e:32:9d:
                    bf:b4:4f:e3:9c:99:37:78:d3:36:56:61:e0:fc:bc:
                    31:16:4d:06:4d:bf:39:45:4c:1b:f8:4e:93:d7:16:
                    a2:e5:14:37:bf:76:ad:bd:15:21:79:46:c8:d1:6c:
                    84:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2A:32:0C:70:C4:75:F8:EB:37:B1:C1:4E:06:5F:7D:A1:57:1C:76
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133343a3a2f34362d3436203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:134::/46

    Signature Algorithm: sha256WithRSAEncryption
         a9:57:96:50:4c:b0:aa:7e:23:21:b4:0d:27:60:3f:0b:93:44:
         79:e6:4b:05:54:a4:f1:5e:9d:62:f0:1d:50:14:a7:60:6d:78:
         fb:20:b3:50:dc:a2:8b:bb:f5:e4:a2:d6:e1:92:55:3c:db:52:
         17:1f:88:cd:d1:1b:1f:01:69:66:79:c3:33:5b:0f:18:93:07:
         8b:37:b8:bb:b9:57:e7:29:43:ac:4b:e3:49:23:ab:d8:e0:a1:
         40:27:6e:ce:61:11:7f:f6:3e:99:7f:cf:f7:2a:93:75:da:15:
         40:c0:65:03:93:c1:b0:69:cc:39:14:c5:f8:a5:bd:d6:8f:99:
         4a:f0:48:7e:14:cc:c8:f9:39:4d:1e:8c:34:0b:d5:65:7c:73:
         c1:9f:81:69:b4:bc:e9:9d:e7:ad:ee:59:59:c6:d7:5e:52:38:
         fa:2b:50:46:cd:5e:d5:9a:9f:e0:24:18:a1:e9:97:6c:ba:43:
         92:d4:8c:02:e1:6f:a8:44:2e:05:d4:7e:16:0e:68:3d:a3:50:
         4a:56:9e:97:7c:db:f9:e7:a3:63:4a:cc:39:57:75:29:75:8d:
         a6:5d:8c:36:9b:f9:e4:6e:88:46:42:2f:c7:95:a8:4b:f9:3e:
         a0:a2:8f:96:2f:30:e8:0d:a4:76:0d:d2:3c:a2:f7:e9:57:39:
         59:b8:7b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:21:41 2025 by rpki-client