Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132303a3a2f34352d3435203d3e20323638313434.roa
File:                     323830343a353862303a3132303a3a2f34352d3435203d3e20323638313434.roa (raw, json)
Hash identifier:          0BDJQPiPjhxJYv214zuLOOmXaNqLziyt8wOjF6cmrYQ=
Subject key identifier:   F7:3C:2E:30:29:FC:CC:FD:B2:8C:73:2C:9B:21:1F:32:EE:9A:F2:6C
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       512256744DF0684A98682F7BA52051451406DFE5
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132303a3a2f34352d3435203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 12:54:58 +0000
ROA not before:           Mon 13 Jan 2025 12:49:58 +0000
ROA not after:            Mon 12 Jan 2026 12:54:58 +0000
asID:                     268144
IP address blocks:        2804:58b0:120::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:22:56:74:4d:f0:68:4a:98:68:2f:7b:a5:20:51:45:14:06:df:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:49:58 2025 GMT
            Not After : Jan 12 12:54:58 2026 GMT
        Subject: CN=3082010A0282010100CFA6F536E527AF389CEC648EF71CD0675A15330D4A5129EEBF40B1CB2820501FB9261568371C33AD6951BBCED808AEC2FC64A99B2B2B9A149FD5EB32E3FB033B39FD66ED2D803099A037DACCB97FD5B0424A1A4500F8262A847755B51B5919FF5D81D1484BF7E89040D8ED522D5F5DC2CA477AE4674447E3B78A181F1DA2589A0ADAE7C84FF528592C8E27F1E8CDEE18D51DA3DD9A0859695B7EBF019E7CD3C4445E237159D4AEA8E2AF3C5F65A7C7A334D0D9619506CB6A6BFBE310FCC33F6E04B3C5442CCF40390DF2EB30C11A9A3B20B31304B1A225B2AC47E7A55456EFA0AC8FDFDDCB1BD4EAA5D2EABC918C7A52008F7883111BC0E5288932D889472CCB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:f5:36:e5:27:af:38:9c:ec:64:8e:f7:1c:
                    d0:67:5a:15:33:0d:4a:51:29:ee:bf:40:b1:cb:28:
                    20:50:1f:b9:26:15:68:37:1c:33:ad:69:51:bb:ce:
                    d8:08:ae:c2:fc:64:a9:9b:2b:2b:9a:14:9f:d5:eb:
                    32:e3:fb:03:3b:39:fd:66:ed:2d:80:30:99:a0:37:
                    da:cc:b9:7f:d5:b0:42:4a:1a:45:00:f8:26:2a:84:
                    77:55:b5:1b:59:19:ff:5d:81:d1:48:4b:f7:e8:90:
                    40:d8:ed:52:2d:5f:5d:c2:ca:47:7a:e4:67:44:47:
                    e3:b7:8a:18:1f:1d:a2:58:9a:0a:da:e7:c8:4f:f5:
                    28:59:2c:8e:27:f1:e8:cd:ee:18:d5:1d:a3:dd:9a:
                    08:59:69:5b:7e:bf:01:9e:7c:d3:c4:44:5e:23:71:
                    59:d4:ae:a8:e2:af:3c:5f:65:a7:c7:a3:34:d0:d9:
                    61:95:06:cb:6a:6b:fb:e3:10:fc:c3:3f:6e:04:b3:
                    c5:44:2c:cf:40:39:0d:f2:eb:30:c1:1a:9a:3b:20:
                    b3:13:04:b1:a2:25:b2:ac:47:e7:a5:54:56:ef:a0:
                    ac:8f:df:dd:cb:1b:d4:ea:a5:d2:ea:bc:91:8c:7a:
                    52:00:8f:78:83:11:1b:c0:e5:28:89:32:d8:89:47:
                    2c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3C:2E:30:29:FC:CC:FD:B2:8C:73:2C:9B:21:1F:32:EE:9A:F2:6C
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132303a3a2f34352d3435203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:120::/45

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:0c:43:dc:c5:a2:ce:18:14:44:ac:2d:d2:ac:a8:6c:77:
         a4:2b:18:35:d1:12:67:55:69:3b:ac:8e:95:2c:ec:fa:8d:35:
         69:52:3b:03:ac:53:ff:92:8f:48:43:f3:04:cf:91:9d:75:c5:
         bb:c0:d9:8c:a1:47:97:af:fb:2f:a6:cb:ca:91:28:73:1e:70:
         89:07:4e:45:8e:49:b3:32:f7:e6:98:9e:5f:54:77:f7:7d:b8:
         87:26:7f:2b:67:9c:ad:97:f3:01:31:08:56:21:06:2f:2f:6f:
         87:c0:f2:15:4e:a0:be:39:9b:cd:12:5c:77:60:ce:25:2a:cf:
         71:bc:ae:6e:e4:7c:b3:2a:60:d7:0b:29:3f:a2:36:51:61:24:
         45:83:6a:05:2e:0f:0d:ea:ab:66:73:d3:60:ce:95:f5:c1:c2:
         31:71:56:06:db:a7:10:ce:94:b2:84:39:6b:51:1c:e3:49:0a:
         f5:2e:bb:a6:cb:67:af:11:cb:c6:03:d3:81:eb:a2:39:e9:56:
         0f:ff:7f:6f:5b:65:3b:5a:06:08:58:3a:82:02:82:4f:ac:af:
         b6:e5:fa:ea:75:3e:cb:cb:1c:92:60:af:3c:c8:8b:c6:32:fb:
         37:c4:e5:02:ec:11:20:c2:9b:ac:4d:19:a0:f6:f7:e9:59:51:
         4a:ba:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:49:31 2025 by rpki-client