Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a653030343a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a653030343a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          JB9G+tphRp9vVhvrIWo0VCmSPv+aOxR19T/PcuYzpVI=
Subject key identifier:   26:2A:3A:ED:01:18:C0:45:86:01:32:12:F2:48:5F:5A:DF:67:37:48
Certificate issuer:       /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial:       4B58BA5B8AF1B96346A7C8D0D30BEA0DAE057A5B
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a653030343a3a2f34382d313238203d3e203532353830.roa
Signing time:             Fri 14 Feb 2025 19:26:04 +0000
ROA not before:           Fri 14 Feb 2025 19:21:04 +0000
ROA not after:            Fri 13 Feb 2026 19:26:04 +0000
asID:                     52580
IP address blocks:        2804:cf8:e004::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:58:ba:5b:8a:f1:b9:63:46:a7:c8:d0:d3:0b:ea:0d:ae:05:7a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
        Validity
            Not Before: Feb 14 19:21:04 2025 GMT
            Not After : Feb 13 19:26:04 2026 GMT
        Subject: CN=262A3AED0118C04586013212F2485F5ADF673748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:be:f0:c9:85:a6:b3:6f:a5:74:30:aa:89:
                    3a:8c:2b:68:b3:d6:60:ec:5c:93:62:01:ea:04:69:
                    48:f2:81:b4:41:20:83:77:02:0f:f5:aa:17:21:11:
                    9e:6c:20:96:6b:c3:bd:ed:b1:7a:65:1c:ce:35:1e:
                    0a:00:e1:89:db:87:6a:3e:d9:80:ab:1e:3b:74:aa:
                    b1:c5:ff:7c:8f:0f:5e:b8:fd:cd:85:c1:2d:62:34:
                    73:6d:12:62:c7:7f:43:45:13:2f:2c:17:36:67:51:
                    db:db:45:bd:2d:f5:0a:31:7f:91:66:98:09:54:71:
                    f1:a2:4a:bf:fc:73:74:e3:54:db:c8:10:9e:64:0d:
                    b4:48:9c:00:67:1c:ec:f8:e5:9a:73:51:f0:ae:55:
                    a3:0e:89:ee:ab:a4:21:e9:ec:cb:ec:f8:08:54:4c:
                    49:bb:c6:e2:dc:07:cc:bb:de:c5:85:7b:c5:67:69:
                    39:6d:5f:79:c7:ce:42:73:4e:f1:d4:ae:c3:68:0d:
                    3c:3d:3a:0e:a3:cb:0c:1c:a8:24:a7:b6:32:44:af:
                    18:55:6a:0f:c7:4d:df:e0:6d:27:55:ca:ea:2f:2e:
                    64:a2:8f:7c:33:e6:6e:78:17:27:ad:8a:c8:cf:e0:
                    a5:81:79:ff:31:6b:eb:6b:15:35:a5:5c:8c:8b:60:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2A:3A:ED:01:18:C0:45:86:01:32:12:F2:48:5F:5A:DF:67:37:48
            X509v3 Authority Key Identifier:
                keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a653030343a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:e004::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:3f:02:17:b0:17:c2:20:f3:6d:de:8a:d8:a8:b3:97:2e:53:
         f2:d6:cc:b8:21:15:9d:2b:d8:f2:47:26:f1:e2:26:7f:db:8e:
         f0:f5:c4:1c:16:21:a1:e3:ce:dd:11:c0:32:78:0b:fc:f1:e7:
         b3:58:8b:41:ce:fe:ed:b4:aa:59:bb:70:77:61:b9:32:23:3f:
         53:c5:c3:f3:f4:ca:11:36:8b:5a:0a:8c:8e:24:ef:68:ca:c6:
         c6:1e:f0:08:57:1e:01:ff:ba:3d:b6:b8:88:7a:1b:18:14:82:
         80:e8:02:a1:76:04:47:62:d5:72:c0:ec:42:0b:a6:33:9c:77:
         46:59:d7:5d:83:71:b7:e4:82:8c:da:3e:7e:91:88:ec:29:f2:
         42:85:dc:de:d4:81:86:4c:34:e8:32:b1:9c:22:95:3d:82:3c:
         9c:35:b4:77:25:c8:31:63:71:d0:2f:33:cd:32:62:55:bf:56:
         b8:c1:07:1c:4c:d4:a8:f1:cc:fe:45:bf:0b:f6:e3:78:26:f6:
         ae:2c:55:04:91:e7:46:3d:85:f5:c4:32:c6:ea:8c:ea:c3:6b:
         12:73:9c:ea:49:0a:66:f3:48:b0:7f:2b:42:12:40:c8:63:b6:
         c0:eb:a1:ae:63:84:80:97:6d:bf:08:a9:06:0f:e4:c9:0e:21:
         d5:1f:a7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----