Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a633a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          LY+nSvUxkFHgWA/L8n8OIoZjjU3uF56F1wMureFBVmA=
Subject key identifier:   F0:DC:D3:C9:F9:84:2C:22:70:CF:A6:A9:BC:39:F2:11:6B:A2:47:8B
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       199663711F715228601D6F6AFBD12A6E1CC88B03
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:25:50 +0000
ROA not before:           Fri 14 Feb 2025 19:20:50 +0000
ROA not after:            Fri 13 Feb 2026 19:25:50 +0000
asID:                     52580
IP address blocks:        2804:cf8:c::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:96:63:71:1f:71:52:28:60:1d:6f:6a:fb:d1:2a:6e:1c:c8:8b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:20:50 2025 GMT
            Not After : Feb 13 19:25:50 2026 GMT
        Subject: CN=F0DCD3C9F9842C2270CFA6A9BC39F2116BA2478B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ea:cf:28:c5:ea:0a:81:e1:fc:3d:96:43:ef:
                    25:03:4d:8c:2d:26:2e:66:86:0a:b3:7a:e6:e0:63:
                    d0:b8:5c:24:f1:53:c3:08:47:a3:88:d3:e0:94:8a:
                    de:0c:5d:fb:25:66:61:28:41:b1:96:0f:c0:4a:dd:
                    4e:90:60:9b:cb:bb:37:26:49:c0:da:68:e9:b1:4d:
                    c7:40:47:e0:33:e1:df:63:7d:e1:64:0e:0c:21:2b:
                    f8:58:76:fe:db:9c:47:11:2a:95:62:79:70:1b:8d:
                    0a:d5:c4:bf:99:84:36:88:cf:21:ac:9e:40:38:d0:
                    ca:db:ec:eb:c0:96:27:75:39:b1:fa:78:39:77:df:
                    44:c5:90:d3:a2:00:7e:4a:59:87:96:ec:41:0e:0f:
                    c6:76:02:39:ab:1d:9c:43:46:64:0d:37:92:9f:c3:
                    ed:8b:85:82:fa:1a:b2:65:10:2d:d6:0e:32:75:01:
                    05:fb:6b:b8:60:90:44:8e:a0:80:60:9f:a4:60:b5:
                    83:dc:2f:1a:c4:5b:5e:0b:7c:c8:88:1f:7e:92:ca:
                    a3:3b:20:c5:95:c3:fd:c0:6d:39:a5:f4:67:44:01:
                    dd:5d:92:0c:b2:d6:99:c5:43:18:bf:22:d0:e7:bb:
                    3a:e8:d7:d3:f5:54:7a:f3:9c:60:ad:fb:48:e5:47:
                    34:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:D3:C9:F9:84:2C:22:70:CF:A6:A9:BC:39:F2:11:6B:A2:47:8B
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:f5:ca:ad:1a:a2:4a:7b:fa:8e:fe:00:44:0d:2b:8d:e1:0e:
         56:35:7e:e5:b1:da:3d:1a:1f:49:c5:8f:08:42:a6:fa:65:fb:
         a6:ab:5c:ad:2f:fe:72:a2:55:73:54:d1:92:48:a1:0e:43:d0:
         f7:0e:d3:d7:7b:de:14:80:0f:a9:0d:17:bb:04:2e:d7:7d:00:
         b0:6c:1e:9f:cd:a2:96:42:65:df:3c:d7:0c:36:c4:91:c8:d1:
         3a:1d:c4:50:25:b3:c6:9a:8e:51:1b:f1:9c:40:2c:4f:26:35:
         13:e2:12:a2:87:d0:55:86:00:ca:6b:3a:9c:dc:80:c1:ca:82:
         f8:9f:81:50:f8:bf:65:8d:8e:9c:6c:3a:1e:bc:a6:ef:c7:05:
         bd:1d:54:79:c3:6e:bb:b0:39:49:1a:04:45:84:72:56:e0:f5:
         fb:55:b9:57:45:26:a8:6a:14:e0:af:6f:16:20:73:28:3e:22:
         37:2c:21:da:80:a3:26:af:c8:48:27:dc:62:aa:1f:5d:e6:bc:
         b5:fc:c6:17:9d:b0:db:ad:0e:41:7b:fd:46:81:ac:06:6f:ee:
         bd:1b:a7:47:cb:9c:1f:59:70:15:b1:8f:fa:b1:e9:f6:2f:6e:
         13:71:98:3b:bf:60:a5:f9:27:df:1f:73:f4:4a:4f:fa:9e:49:
         10:c7:95:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----