Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a383030303a3a2f33332d3333203d3e20323638313434.roa
File:                     323830343a353862303a383030303a3a2f33332d3333203d3e20323638313434.roa (raw, json)
Hash identifier:          iRcZpuwdzFbld3OOdxme/rd4DEg3ci0puWMvrNE//rA=
Subject key identifier:   26:74:87:96:22:26:2F:DA:B3:09:67:A3:7F:90:F6:FD:99:B3:21:92
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       3E24DBD337759F280D82605E7FF13105D003D61B
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a383030303a3a2f33332d3333203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 12:55:38 +0000
ROA not before:           Mon 13 Jan 2025 12:50:38 +0000
ROA not after:            Mon 12 Jan 2026 12:55:38 +0000
asID:                     268144
IP address blocks:        2804:58b0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:24:db:d3:37:75:9f:28:0d:82:60:5e:7f:f1:31:05:d0:03:d6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:50:38 2025 GMT
            Not After : Jan 12 12:55:38 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:2f:24:0c:35:9f:ef:99:d3:76:d3:2f:cd:
                    aa:cc:0c:e9:ad:96:0f:7c:20:6a:8a:f3:eb:21:17:
                    4d:a4:20:55:f1:a2:e5:ef:98:4b:51:b2:ae:75:4b:
                    4e:b2:18:0f:b1:f9:de:0d:4a:d1:20:16:7d:f6:78:
                    10:91:ea:21:9b:4c:51:81:67:46:be:ee:fd:d8:d6:
                    2c:e0:8e:d6:53:0d:2b:50:56:e6:6d:67:f5:fd:f7:
                    ed:c4:e4:8c:9d:1b:9b:f8:86:39:d6:bd:ef:bb:b8:
                    68:1c:55:37:48:7c:9e:9a:26:b9:98:4c:a6:bc:f7:
                    a6:d5:7f:35:a1:76:7b:4c:c5:e7:28:8a:6a:95:f4:
                    1f:c2:f8:33:4e:01:bf:7f:bb:6e:80:67:84:c3:5a:
                    1e:37:97:18:f8:6d:40:23:f4:b6:e1:72:71:1c:43:
                    f2:6a:8f:3e:f2:f6:83:51:a6:b2:2a:86:ee:84:17:
                    e1:3d:df:f3:f0:48:89:0b:f6:ca:96:53:f2:fd:de:
                    14:8f:16:30:28:01:d3:88:ca:01:13:a2:b7:8a:b7:
                    c7:a9:8f:90:37:26:34:32:e2:96:31:37:e8:d8:d7:
                    5d:86:98:c0:9a:72:2c:3b:ad:0f:17:bb:ce:7f:c9:
                    1c:5f:ae:a1:81:ae:86:14:1a:65:d5:5a:81:eb:b7:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:74:87:96:22:26:2F:DA:B3:09:67:A3:7F:90:F6:FD:99:B3:21:92
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a383030303a3a2f33332d3333203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1e:b9:44:11:29:3f:25:f8:0d:3b:dc:6e:e4:26:f1:0a:6c:f2:
         d5:61:ff:bb:54:51:68:ce:eb:60:b9:70:d9:67:b0:44:8c:0a:
         15:7e:41:bc:19:b2:28:3e:0e:69:99:04:b0:51:94:10:5f:38:
         73:c9:27:79:c7:06:57:ff:b4:ea:9b:e6:dd:df:7f:97:7e:22:
         24:01:68:d0:bc:46:0c:35:82:ac:29:ea:34:fd:4c:f4:d7:86:
         fa:da:ba:d6:45:2d:61:65:16:e1:24:32:f5:97:5a:b5:4e:21:
         c8:29:1f:84:79:b4:40:6d:99:a1:d6:c1:0f:4f:21:f6:98:7a:
         ef:ee:23:1b:da:da:3b:1a:da:6e:cb:79:d9:3f:dc:70:f5:41:
         20:8f:50:a5:90:f8:ba:23:19:a9:fd:fe:c6:4e:19:5d:79:3a:
         e5:c2:58:ec:e1:9e:e7:bb:24:13:40:23:50:09:7e:87:3a:5f:
         36:46:9a:63:61:e0:23:64:4f:ae:15:64:98:62:9b:70:2c:7d:
         e5:ef:16:64:68:d1:34:cd:17:52:03:64:e4:a8:dd:e8:bc:ad:
         4c:3f:d2:7e:e6:7e:14:fd:14:f0:61:27:df:a2:fc:5c:ff:ee:
         90:49:32:91:50:01:52:6e:66:c1:38:f9:04:46:20:c3:12:76:
         33:8c:11:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:19:34 2025 by rpki-client