Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133383a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3133383a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          GSkdrsYg8V8k5MUYcp5Zu/Xd+I9E8A/SWrVu+frEPcc=
Subject key identifier:   84:2D:D1:BD:7F:30:47:4A:FC:AD:C1:3B:67:A2:75:7F:32:95:23:5B
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       2BF9A1ED5F0720558708FD797290CE700075D8A8
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133383a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Mon 13 Jan 2025 12:54:59 +0000
ROA not before:           Mon 13 Jan 2025 12:49:59 +0000
ROA not after:            Mon 12 Jan 2026 12:54:59 +0000
asID:                     268568
IP address blocks:        2804:532c:138::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f9:a1:ed:5f:07:20:55:87:08:fd:79:72:90:ce:70:00:75:d8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:49:59 2025 GMT
            Not After : Jan 12 12:54:59 2026 GMT
        Subject: CN=3082010A0282010100D8686DF4362F1281F113AB4E055BA42F26625576F807817AB17E835B9369208763670653AD64AD0B16BE24CA7ED73091064E310A86635E42649ABFF1AF0FD089F33D5C11281F848074AE55A7747D2D208F057B2F7EB5D10AF7C9A7076E8213A696751957DA0CAB2533350939B0173B668D398BB74C6734F4C9E9344CBE3F37E886E9118F103726A33EB811F29B757C53499286E47F036147F6692EFC5574161951F3FEEB0911BAD632B7BE6003E8530A7B88AB25325C9A21B966756ACD3725EB81ECAAD26914EC336450C96A4B9DC443B490549242C7F32104FDAF4140A3364786587E565033B15C79B4FF520A5615560B47594C9BC74A32E0DB7C7A325366A70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:68:6d:f4:36:2f:12:81:f1:13:ab:4e:05:5b:
                    a4:2f:26:62:55:76:f8:07:81:7a:b1:7e:83:5b:93:
                    69:20:87:63:67:06:53:ad:64:ad:0b:16:be:24:ca:
                    7e:d7:30:91:06:4e:31:0a:86:63:5e:42:64:9a:bf:
                    f1:af:0f:d0:89:f3:3d:5c:11:28:1f:84:80:74:ae:
                    55:a7:74:7d:2d:20:8f:05:7b:2f:7e:b5:d1:0a:f7:
                    c9:a7:07:6e:82:13:a6:96:75:19:57:da:0c:ab:25:
                    33:35:09:39:b0:17:3b:66:8d:39:8b:b7:4c:67:34:
                    f4:c9:e9:34:4c:be:3f:37:e8:86:e9:11:8f:10:37:
                    26:a3:3e:b8:11:f2:9b:75:7c:53:49:92:86:e4:7f:
                    03:61:47:f6:69:2e:fc:55:74:16:19:51:f3:fe:eb:
                    09:11:ba:d6:32:b7:be:60:03:e8:53:0a:7b:88:ab:
                    25:32:5c:9a:21:b9:66:75:6a:cd:37:25:eb:81:ec:
                    aa:d2:69:14:ec:33:64:50:c9:6a:4b:9d:c4:43:b4:
                    90:54:92:42:c7:f3:21:04:fd:af:41:40:a3:36:47:
                    86:58:7e:56:50:33:b1:5c:79:b4:ff:52:0a:56:15:
                    56:0b:47:59:4c:9b:c7:4a:32:e0:db:7c:7a:32:53:
                    66:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2D:D1:BD:7F:30:47:4A:FC:AD:C1:3B:67:A2:75:7F:32:95:23:5B
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133383a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:138::/45

    Signature Algorithm: sha256WithRSAEncryption
         7a:56:88:06:54:a8:e9:29:cf:27:dd:73:21:20:84:c5:6f:a3:
         18:39:9b:bb:33:e1:7d:a4:91:2b:f6:ee:6e:02:d5:52:fb:ff:
         db:90:46:bf:2c:c9:2a:a5:c0:55:03:21:09:d0:78:11:5b:92:
         c1:b4:cb:fa:9b:a5:4c:9e:64:9c:e4:71:7c:69:ce:7a:03:eb:
         25:d4:c3:bc:44:78:14:e2:a9:1c:42:3f:8f:60:ea:77:c5:72:
         8d:85:95:ac:72:52:a5:0d:44:9e:71:6b:87:84:d8:c6:e0:ab:
         c2:96:87:b2:4f:f4:31:14:7c:1b:8d:ff:a6:dd:fd:26:19:c5:
         aa:33:09:c8:af:71:8c:b3:11:ef:15:4f:c7:0f:90:04:6e:f3:
         d2:2d:30:51:c0:83:d2:c2:92:12:dc:83:e4:fd:f1:95:15:43:
         94:8f:94:c1:f4:5f:56:07:4c:ed:06:a8:f9:4f:66:84:03:dd:
         9c:c8:36:9d:ec:7c:20:b5:74:42:2c:48:05:04:e5:3e:82:09:
         c8:d4:60:0d:7d:bb:cc:a4:6e:de:87:51:f6:59:6d:f2:e8:62:
         bf:ba:2d:ca:31:b4:f2:06:89:65:8d:24:92:2c:67:f0:18:a9:
         f6:6d:2b:ec:d3:51:51:d1:b0:d7:39:a6:74:f5:5c:75:ba:c4:
         08:8b:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:57:08 2025 by rpki-client