Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a646330313a3a2f34382d3438203d3e203631363039.roa
File:                     323830343a383762633a646330313a3a2f34382d3438203d3e203631363039.roa (raw, json)
Hash identifier:          0tqYy9T0GRx/OM7z+hcefmxypHRnKFmgvA9zDFBI0mE=
Subject key identifier:   9F:AA:A0:2C:C0:EF:5B:59:6A:AF:BC:D3:CF:60:B4:FF:4D:8B:77:72
Certificate issuer:       /CN=FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626
Certificate serial:       665013201B3D5B223F6AF16B409FB74CD0D8538A
Authority key identifier: FC:B7:01:6E:B8:D9:F4:B1:CF:78:80:63:AA:A5:F7:04:BD:3C:96:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a646330313a3a2f34382d3438203d3e203631363039.roa
Signing time:             Tue 27 May 2025 20:46:35 +0000
ROA not before:           Tue 27 May 2025 20:41:35 +0000
ROA not after:            Tue 26 May 2026 20:46:35 +0000
asID:                     61609
IP address blocks:        2804:87bc:dc01::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:50:13:20:1b:3d:5b:22:3f:6a:f1:6b:40:9f:b7:4c:d0:d8:53:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626
        Validity
            Not Before: May 27 20:41:35 2025 GMT
            Not After : May 26 20:46:35 2026 GMT
        Subject: CN=9FAAA02CC0EF5B596AAFBCD3CF60B4FF4D8B7772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:fb:30:8a:75:61:37:a1:c4:48:8c:ba:00:
                    bc:a3:eb:dd:a4:2f:6a:ec:72:9d:68:43:18:fd:ae:
                    35:0e:3c:b1:3b:68:45:22:ad:81:2b:d6:60:89:dd:
                    20:87:2a:8b:a1:dc:24:d2:0b:e5:65:b8:f0:87:64:
                    fa:0e:26:24:18:4e:b2:8e:5f:f4:eb:2f:77:8e:0d:
                    12:db:b0:92:ce:e5:ed:fe:dc:2b:62:b7:f7:1a:f0:
                    96:f8:91:3f:35:fa:58:ef:db:1d:ca:0a:95:9d:36:
                    f3:82:8c:dc:da:76:fa:c3:e0:83:ba:5a:27:8e:aa:
                    18:50:cf:8d:77:82:fc:1b:2c:ef:50:3c:f4:b9:92:
                    75:8b:6d:ad:38:98:cd:ce:0c:ca:fc:ba:83:3f:95:
                    26:2c:7d:1b:8f:bf:53:20:e7:c0:d7:8c:12:ae:76:
                    bf:d3:cd:18:92:e9:77:f8:bb:ad:d6:ec:0b:ee:a2:
                    dc:9e:54:73:a3:ba:e7:1b:e9:f3:67:e4:23:4a:fd:
                    1f:4c:60:ab:6c:20:29:32:ba:30:e6:ce:00:f2:d0:
                    b8:1e:11:68:87:b8:a9:e8:45:4e:31:a1:dd:06:17:
                    25:b1:e9:b7:db:aa:a7:ab:07:e3:5b:a0:6e:6e:25:
                    c2:a8:24:b9:e9:44:59:2e:53:f7:04:f8:93:c1:91:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AA:A0:2C:C0:EF:5B:59:6A:AF:BC:D3:CF:60:B4:FF:4D:8B:77:72
            X509v3 Authority Key Identifier:
                keyid:FC:B7:01:6E:B8:D9:F4:B1:CF:78:80:63:AA:A5:F7:04:BD:3C:96:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a646330313a3a2f34382d3438203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc:dc01::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:c3:4a:08:e6:cf:00:b9:35:19:cf:cf:09:72:10:83:25:c9:
         18:59:e2:b5:b4:c7:e1:dd:d3:72:44:b5:f0:2c:fb:d6:ed:05:
         e7:5d:f1:23:c9:ff:d5:3c:a3:4b:01:1a:77:c8:7d:65:3d:db:
         06:8f:39:6b:39:68:75:c1:1b:ff:e9:e3:be:ff:0a:56:7c:c5:
         1a:bb:f0:e6:4d:f5:ab:2c:e2:85:59:75:eb:7d:b0:04:43:39:
         2d:32:4e:78:ce:0f:56:d0:4c:19:f7:02:f8:64:8f:49:cf:23:
         ec:0e:ed:72:11:2d:55:47:55:20:14:93:ed:b3:a4:0f:d7:27:
         ff:ed:94:8a:8c:47:33:98:c2:88:24:4f:dc:77:db:1f:11:f0:
         b7:1c:77:88:20:d1:b8:e2:70:10:18:15:06:fd:12:37:2b:8f:
         6b:96:8e:7e:6a:a6:49:77:15:a4:c7:16:b7:f2:66:3b:94:59:
         ed:d0:51:03:59:3e:e4:53:b3:9b:4f:e7:40:2b:14:73:86:94:
         6b:08:51:f8:53:d4:46:29:21:d0:c8:e1:bb:0e:ff:24:e3:7a:
         bf:1c:38:7f:d4:5c:2a:ef:ae:bd:c7:e5:bc:1d:be:ad:b6:f6:
         5e:fc:8c:41:e3:81:9d:dc:ab:f1:2b:f1:46:0a:96:0f:50:2e:
         dd:7a:90:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:08:49 2025 by rpki-client