Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa
File:                     323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa (raw, json)
Hash identifier:          PEqddxWP0UwQjFUWTOEctj/kWBjXgV+ouzSyGaK99kI=
Subject key identifier:   C4:A6:27:24:9F:0E:3B:C3:E0:77:74:F1:16:E0:C1:92:0C:11:F4:E2
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       0595A92C51A17D18539139879F1E42392FD8D8B8
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa
Signing time:             Thu 06 Mar 2025 20:00:00 +0000
ROA not before:           Thu 06 Mar 2025 19:55:00 +0000
ROA not after:            Fri 06 Mar 2026 20:00:00 +0000
asID:                     270765
IP address blocks:        2804:7114:167::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:95:a9:2c:51:a1:7d:18:53:91:39:87:9f:1e:42:39:2f:d8:d8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Mar  6 19:55:00 2025 GMT
            Not After : Mar  6 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:3e:64:a6:02:35:fb:22:59:6b:eb:d4:38:
                    c8:74:9b:7d:36:a2:b4:d0:7b:b9:ec:7b:46:54:44:
                    49:14:cc:0c:4a:6e:bc:a9:b1:ae:fd:2b:4c:62:cb:
                    b5:67:65:ed:51:16:04:ab:3b:a8:dc:99:50:31:ad:
                    4d:7a:31:94:92:85:68:7e:a6:4f:9a:94:b6:f1:d2:
                    27:f3:99:82:4c:7a:fb:62:a6:38:84:b6:79:ed:40:
                    ad:1c:ac:e8:17:d1:43:94:b9:e7:37:66:46:c7:3d:
                    bc:4e:fc:36:94:9e:00:c3:40:10:4d:77:7a:5e:a4:
                    47:29:41:3e:cc:50:9b:aa:a1:30:e2:f3:c6:60:1a:
                    35:0f:cd:64:6f:c9:61:ab:40:e2:49:a0:08:e7:68:
                    74:81:68:02:8d:df:60:0a:96:4b:e5:50:7d:4c:7d:
                    02:99:a1:98:e5:b2:f5:ca:77:76:2b:13:2d:1b:23:
                    e6:15:ad:58:d1:ce:2f:32:bc:2f:a7:3b:05:bc:49:
                    c1:58:ba:00:f3:6f:2b:7a:5e:fd:a0:b5:9f:5e:a4:
                    c2:9c:c7:b9:3a:35:58:f8:e9:8e:ca:e2:f6:76:e1:
                    f3:6f:30:ec:cf:d0:cc:4f:28:4f:e6:40:5d:cb:0b:
                    c0:5c:e1:f3:66:f4:8b:ac:f7:f2:64:40:fd:f1:11:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A6:27:24:9F:0E:3B:C3:E0:77:74:F1:16:E0:C1:92:0C:11:F4:E2
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114:167::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:e6:83:e1:80:65:fd:7b:9d:d2:e6:d2:1a:e1:84:72:06:c9:
         78:c0:97:c6:d1:12:7e:57:bb:34:94:61:c8:ea:cc:d1:a8:89:
         47:66:9f:3b:22:14:62:7d:e6:ac:31:0e:62:80:6f:63:0b:a6:
         41:4b:e7:bd:94:96:ed:56:1d:56:bb:9a:99:96:03:33:04:21:
         92:b1:d3:2a:51:63:33:71:f9:c1:c4:51:38:8d:19:83:be:6d:
         ec:87:e4:cd:de:f2:d6:5c:13:47:2d:bf:c4:94:9f:59:31:16:
         01:30:65:a7:b4:8c:e1:3c:0f:34:fc:de:92:f2:19:58:66:75:
         d1:41:fe:9c:b8:2c:e5:a0:ab:06:dc:3d:8b:6f:ec:f4:15:6f:
         2e:0f:3f:ae:01:51:1a:d8:88:22:4c:02:79:c6:9c:04:82:78:
         0b:4a:d6:83:c2:e3:74:db:94:02:ae:bd:55:73:0e:97:12:52:
         e6:ba:a8:d8:67:d6:e2:60:98:5c:ad:db:01:26:f4:69:f3:49:
         d7:ad:09:bf:8f:70:76:9f:b1:e0:b7:f9:aa:5a:03:e3:7c:d6:
         42:39:e2:a2:b0:a7:c1:5d:38:51:83:c2:6a:f3:d0:c4:8e:35:
         f8:43:d8:1e:2b:57:e4:01:34:07:a7:ea:55:ff:4d:4a:4f:09:
         14:c6:ce:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----