Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/323830343a323362633a3930303a3a2f34302d313238203d3e20323634313830.roa
File:                     323830343a323362633a3930303a3a2f34302d313238203d3e20323634313830.roa (raw, json)
Hash identifier:          sY60+zzEfNiOqC6Wu869omV6BUMc8mW2OzRGxHWVRSE=
Subject key identifier:   6D:54:DB:6D:42:F9:18:06:F1:E1:61:9E:25:6A:60:76:A7:0A:3C:B3
Certificate issuer:       /CN=987C6F3143FC8DA789AA98C170AC2ABDB03F55C5
Certificate serial:       48B97DA3B7CB028DBB19677DA30E9FA039BFBBE6
Authority key identifier: 98:7C:6F:31:43:FC:8D:A7:89:AA:98:C1:70:AC:2A:BD:B0:3F:55:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/323830343a323362633a3930303a3a2f34302d313238203d3e20323634313830.roa
Signing time:             Wed 22 Jan 2025 19:03:25 +0000
ROA not before:           Wed 22 Jan 2025 18:58:25 +0000
ROA not after:            Wed 21 Jan 2026 19:03:25 +0000
asID:                     264180
IP address blocks:        2804:23bc:900::/40 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b9:7d:a3:b7:cb:02:8d:bb:19:67:7d:a3:0e:9f:a0:39:bf:bb:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987C6F3143FC8DA789AA98C170AC2ABDB03F55C5
        Validity
            Not Before: Jan 22 18:58:25 2025 GMT
            Not After : Jan 21 19:03:25 2026 GMT
        Subject: CN=6D54DB6D42F91806F1E1619E256A6076A70A3CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:ac:69:a5:82:de:ff:00:10:43:8b:91:8a:
                    87:cc:bb:cd:40:a4:78:ca:c1:56:d3:dd:d4:ae:67:
                    cf:24:fd:2e:e9:85:a1:0c:11:b9:8f:82:72:12:0a:
                    31:1a:01:14:39:d7:45:24:b9:6a:55:da:c5:81:5a:
                    92:80:e5:d2:6e:96:ed:f7:58:f9:9b:b9:33:67:50:
                    63:5e:ff:49:7e:90:e0:a3:77:8d:53:18:cb:0c:5f:
                    4d:8a:9a:7c:fb:2f:df:9c:0a:ca:bf:95:7e:44:27:
                    12:1c:af:58:c2:ac:a5:d4:8c:06:52:ae:5c:87:39:
                    50:18:d8:1d:61:3e:92:9a:48:bc:7a:06:53:49:76:
                    4a:7e:1c:58:91:9a:5e:83:49:30:dd:77:0f:8b:a7:
                    f2:f7:d5:a7:e6:01:d3:95:99:35:fd:c1:e5:29:8f:
                    6d:5c:7a:15:f6:e7:29:3d:31:9a:a5:79:ef:d2:6e:
                    1e:fe:46:de:95:94:b8:1e:3a:85:26:46:43:2f:09:
                    fd:9a:32:2b:0d:e0:9b:68:8c:70:7f:71:3e:a2:c8:
                    10:9e:6c:be:0c:6f:9b:05:6e:31:a0:1e:9c:01:9a:
                    1b:bc:13:6e:14:67:c1:48:84:fb:27:8b:7f:c6:c5:
                    6c:15:a2:b5:23:30:0b:08:23:7d:8a:71:bb:cc:05:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:54:DB:6D:42:F9:18:06:F1:E1:61:9E:25:6A:60:76:A7:0A:3C:B3
            X509v3 Authority Key Identifier:
                keyid:98:7C:6F:31:43:FC:8D:A7:89:AA:98:C1:70:AC:2A:BD:B0:3F:55:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/323830343a323362633a3930303a3a2f34302d313238203d3e20323634313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23bc:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:e5:22:6c:76:cb:f1:a9:ab:c1:72:0e:e6:62:a5:bf:50:d7:
         ee:87:29:35:83:b6:1d:b3:1e:03:31:c1:b3:69:b4:7a:dd:ab:
         c2:08:33:2b:ff:91:68:f7:56:b4:f6:df:2a:7a:4f:72:f4:4f:
         0c:fc:76:65:9a:04:8f:ca:29:67:4f:d5:3e:20:96:23:d6:cb:
         ce:4c:0f:9e:55:03:97:91:b7:84:a3:18:e8:b0:e0:8c:17:b8:
         3b:32:41:26:e6:44:fd:16:0b:d2:7c:bb:85:a7:f3:54:b1:a9:
         72:ac:43:fa:b5:69:33:70:6d:38:25:fc:8a:b5:71:73:f3:25:
         84:5e:c8:b2:24:77:2d:9c:5c:8b:88:57:90:27:60:5c:cc:6e:
         af:93:c7:fd:fb:d1:77:ac:93:3e:86:2d:93:db:08:6d:9a:c3:
         e3:a7:d5:53:84:9c:4a:93:44:ec:0f:d5:41:57:89:a3:0c:7d:
         11:3b:43:8b:76:d4:d1:10:f2:d3:fd:97:5c:33:5c:c0:05:6f:
         99:2d:d0:07:ec:e0:e7:7f:0f:20:69:5b:23:d0:9c:46:d4:f7:
         ec:5e:40:5f:81:f5:a0:b7:6d:5f:cf:d6:8b:7e:15:53:f8:9e:
         18:15:42:b7:77:b7:32:95:ae:0e:d5:f5:73:95:73:56:3b:3a:
         ca:03:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----