Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132343a3a2f34362d3436203d3e20323638313434.roa
File:                     323830343a353862303a3132343a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier:          eYosyTZqtwe7SUN3u+mnJILpltjoth7T02uu3y57Fm0=
Subject key identifier:   6F:8D:00:27:74:97:74:02:68:68:60:4B:79:B2:82:CC:A2:82:D6:E6
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       6019018E6101AE83B659EC43A7C2FB1669BBBBD3
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132343a3a2f34362d3436203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 19:06:09 +0000
ROA not before:           Mon 13 Jan 2025 19:01:09 +0000
ROA not after:            Mon 12 Jan 2026 19:06:09 +0000
asID:                     268144
IP address blocks:        2804:58b0:124::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:19:01:8e:61:01:ae:83:b6:59:ec:43:a7:c2:fb:16:69:bb:bb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 19:01:09 2025 GMT
            Not After : Jan 12 19:06:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1e:7c:59:ae:da:0c:3f:45:64:68:5e:4e:d3:
                    18:3f:24:2b:2d:6b:b3:f1:10:22:42:00:46:14:c9:
                    e8:ec:01:7a:4e:fd:17:f7:c5:97:cb:32:3d:fa:2b:
                    57:e3:27:f5:a8:31:5f:47:53:ab:38:19:35:93:d9:
                    ae:4d:b9:15:86:bf:10:20:66:6d:25:85:b7:49:fd:
                    b9:b2:04:34:b4:38:f3:58:04:5d:51:6f:54:70:f0:
                    6f:63:79:75:45:52:58:52:88:1b:a8:78:7b:2b:4b:
                    6e:55:79:fc:b0:6c:af:72:a1:25:6c:2e:2d:58:5c:
                    88:44:51:0e:cb:8f:93:27:ef:44:04:49:87:64:c0:
                    2b:49:c8:8d:8a:1b:a7:1c:fd:48:55:29:07:b0:cb:
                    bf:06:09:0f:4c:47:29:e6:77:91:f6:32:24:ce:69:
                    66:8a:af:f0:67:ee:e5:92:03:25:52:9a:c7:4f:a1:
                    d3:ba:33:df:69:d5:e6:5f:a9:df:0a:77:ea:35:17:
                    3d:fa:87:90:57:13:e2:76:40:10:59:6d:56:82:3b:
                    d4:d6:c9:9f:cf:7c:22:4c:83:4b:f0:d4:cb:cc:94:
                    b9:ef:10:e3:13:73:32:f2:2a:d7:e9:2e:98:79:9d:
                    ef:62:48:f6:fb:bc:87:ec:78:26:21:4f:5f:f9:8d:
                    65:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:00:27:74:97:74:02:68:68:60:4B:79:B2:82:CC:A2:82:D6:E6
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132343a3a2f34362d3436203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:124::/46

    Signature Algorithm: sha256WithRSAEncryption
         a4:2d:a4:9c:cb:7c:ff:9a:4d:04:3c:f3:f4:11:b6:27:ac:83:
         48:ef:b5:05:e9:f2:db:ac:2d:6a:38:1f:19:9e:5e:cf:74:e1:
         97:31:fc:09:88:8b:0c:27:4d:d5:70:df:32:9e:8b:f9:3b:32:
         cc:e8:91:ff:72:2c:b5:3c:08:66:4f:a2:8d:7d:4e:63:69:54:
         0f:e8:20:b0:26:4d:b2:24:b5:01:b6:88:5f:f4:a9:4e:d1:04:
         35:be:20:15:ee:3e:4c:c2:ed:61:2c:59:33:be:42:ca:2f:67:
         bb:bb:59:5f:b5:8b:fb:1f:ec:46:8e:46:6e:b9:88:10:75:81:
         48:62:84:d4:3e:11:13:57:1d:14:24:06:16:51:14:92:47:46:
         af:75:36:06:f7:94:0e:f5:48:17:bf:c8:14:3e:b3:01:ae:ae:
         bd:41:2e:f5:d4:52:94:10:49:0a:3b:7c:24:83:05:6d:33:41:
         b5:eb:da:4b:57:94:e0:ca:2b:da:a4:44:b8:fc:76:9f:3d:68:
         ee:95:ce:bd:41:15:8a:c2:f5:b9:10:12:72:e1:d2:ac:8f:98:
         83:3b:b7:45:98:95:88:91:87:1e:4a:11:09:af:ce:84:ad:e4:
         c0:b7:b8:a3:7e:91:9a:8a:56:a1:21:aa:de:15:b9:17:fd:5b:
         e5:a2:9d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:04:35 2025 by rpki-client