Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31333a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31333a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          x3Rc3dfRakf2Lp3neyDejYw9PKE7yXghbrHPhdfIy5o=
Subject key identifier:   94:3E:54:15:EA:B3:A3:85:48:9B:8B:69:A4:62:6A:7F:F6:E5:E6:F9
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       77086F9381AE9DEEAD32593D0AE71C0F03327AD8
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31333a3a2f34382d313238203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 21:59:05 +0000
ROA not before:           Mon 27 Jan 2025 21:54:05 +0000
ROA not after:            Mon 26 Jan 2026 21:59:05 +0000
asID:                     52580
IP address blocks:        2804:cf8:13::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:08:6f:93:81:ae:9d:ee:ad:32:59:3d:0a:e7:1c:0f:03:32:7a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:54:05 2025 GMT
            Not After : Jan 26 21:59:05 2026 GMT
        Subject: CN=943E5415EAB3A385489B8B69A4626A7FF6E5E6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:ad:3f:2b:54:62:11:65:8d:74:1b:f7:9b:
                    08:ce:1b:40:b8:2f:26:83:8a:a0:a6:ab:c1:0a:5a:
                    a2:5c:49:6b:45:91:e7:0a:29:4c:9d:f2:d4:eb:0c:
                    2b:d3:4c:3b:78:94:86:77:24:d5:96:ec:35:bf:88:
                    9b:4a:6f:83:e8:ba:ef:03:9e:db:41:18:2b:b2:83:
                    d5:71:04:1f:18:eb:85:d0:01:f1:7d:91:60:76:c9:
                    5f:20:42:de:a6:1b:32:eb:02:f9:63:d1:d4:6a:3e:
                    53:ca:01:87:08:cb:67:64:e2:41:3b:cc:be:df:6e:
                    81:f6:36:6f:df:f1:0f:c0:27:bf:d0:1a:c9:0a:c7:
                    06:6f:3e:d7:db:f3:36:5c:7b:fa:1c:ca:a2:22:3d:
                    94:b2:61:9b:a5:54:19:7d:5d:9d:71:83:8e:13:ac:
                    d0:65:81:2e:67:d9:15:cb:e6:3b:66:2d:68:00:dc:
                    ef:f4:fe:bd:13:f8:e3:07:9d:42:c3:80:dd:eb:5c:
                    26:f6:00:2f:f4:de:f9:2d:65:7b:a0:db:91:d2:ec:
                    f1:59:4c:3a:cd:5c:1d:a6:47:d4:3c:15:66:06:b8:
                    3d:c5:bb:72:ce:8e:ff:8f:c5:2a:57:41:5a:4f:a6:
                    f0:27:e2:17:a3:ca:a8:69:15:6e:22:b8:0c:33:54:
                    3d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3E:54:15:EA:B3:A3:85:48:9B:8B:69:A4:62:6A:7F:F6:E5:E6:F9
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31333a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:16:2b:55:97:7f:1f:05:f0:3e:68:02:ff:cf:7b:2e:73:e4:
         2a:21:e5:be:ae:bb:51:43:f9:bc:64:6f:bc:25:46:54:26:aa:
         50:13:99:1b:c3:fb:38:3c:ba:d6:fd:80:8d:ca:58:15:02:35:
         f7:bf:c6:91:e9:4f:15:39:88:e4:eb:d5:71:4e:e8:7f:1a:a5:
         ab:a6:be:c2:a5:44:4f:08:7d:4c:44:5b:c1:56:1b:30:4f:cf:
         2a:56:bc:25:ea:b3:1d:c6:b1:60:1e:b0:70:16:1d:9a:31:ff:
         9a:e9:1b:97:b9:83:5b:d6:e7:bd:85:51:2d:68:ee:e2:71:e9:
         7a:89:85:19:de:0f:38:30:2a:cf:d2:d8:0a:8b:7b:26:3f:4d:
         bd:ab:29:14:96:79:b2:e2:87:d1:6e:af:03:91:b7:33:fa:b5:
         92:db:10:33:f6:ed:6f:64:ef:7f:0a:27:1c:30:fd:8a:65:0b:
         3e:e0:cf:f9:e0:3f:89:7f:e4:bb:b5:a7:a0:f2:2c:35:70:22:
         69:45:7b:e3:e6:50:99:50:76:cf:b5:fb:26:fb:fa:ed:c8:0c:
         a7:a8:be:86:b7:8e:05:18:18:82:c4:db:63:74:92:f8:a5:cd:
         26:95:9b:30:f9:a5:77:12:3b:25:1b:cf:6a:76:35:f8:07:21:
         c0:e7:e8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:47:19 2025 by rpki-client