Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31343a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31343a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          CBics3MkZZRaFOa8CkAyLCjtry/7w9xAalES0wo3wFU=
Subject key identifier:   11:A9:8F:A9:06:17:67:E9:3B:0D:48:68:61:55:CD:21:A4:19:A8:88
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       7F96FB1C90B6EB26CAC92810D8078036E1D2D796
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31343a3a2f34382d313238203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 21:59:14 +0000
ROA not before:           Mon 27 Jan 2025 21:54:14 +0000
ROA not after:            Mon 26 Jan 2026 21:59:14 +0000
asID:                     52580
IP address blocks:        2804:cf8:14::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:96:fb:1c:90:b6:eb:26:ca:c9:28:10:d8:07:80:36:e1:d2:d7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:54:14 2025 GMT
            Not After : Jan 26 21:59:14 2026 GMT
        Subject: CN=11A98FA9061767E93B0D48686155CD21A419A888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:27:33:ba:c3:ec:cd:5a:1c:6b:1f:a8:e2:
                    76:89:23:bd:2b:bb:92:ba:05:88:a0:dc:21:40:5f:
                    d4:f4:ba:7f:d3:57:30:05:96:1f:1f:8f:1c:0c:71:
                    69:d1:6c:f8:29:4e:56:30:09:88:47:0b:be:55:f7:
                    b1:f1:12:2e:fe:16:9d:19:62:0b:2c:73:b2:54:49:
                    e2:5e:23:59:e2:b2:a3:5c:90:85:78:4d:c8:0e:d1:
                    2d:8c:92:d8:ee:13:98:1f:5c:cd:52:f5:8d:45:ca:
                    d7:6e:a5:c2:93:59:f6:b0:54:25:a1:51:53:96:72:
                    70:82:6c:ca:1b:82:04:dd:27:65:13:79:f9:70:7a:
                    14:4d:57:c1:b4:0b:c2:dd:19:ed:58:a2:cf:51:8f:
                    be:8d:59:84:a0:66:e0:99:cc:30:ff:bd:89:21:f2:
                    f3:43:81:17:49:e6:b4:01:ba:b4:e0:4f:2e:0e:aa:
                    dd:78:72:06:24:d8:c3:a6:2f:83:36:6e:a1:e2:aa:
                    3b:10:69:67:43:ba:15:f9:8c:f2:74:9c:d4:e4:c3:
                    69:80:a7:1b:00:04:97:a3:77:42:ef:83:21:2a:07:
                    d1:35:d4:34:9f:29:be:54:29:f4:2c:09:b7:94:e4:
                    84:32:75:9c:22:6f:64:2d:49:de:7c:c6:c2:48:19:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A9:8F:A9:06:17:67:E9:3B:0D:48:68:61:55:CD:21:A4:19:A8:88
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31343a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:a5:ad:da:8f:e1:7a:9e:b7:e0:40:6a:8c:39:c8:ee:f5:9d:
         d1:97:cc:0e:3b:d1:10:31:6f:6c:71:bf:68:e4:e2:1d:0e:b0:
         4a:95:34:0c:d0:49:3a:d3:d0:2a:9b:a0:2a:00:90:fe:da:a8:
         87:1a:78:5a:3b:91:72:3a:ed:de:83:94:9a:47:12:c9:25:96:
         72:22:ef:1e:aa:fd:a4:a9:28:77:07:0f:ee:d9:41:61:23:3b:
         5b:60:fc:19:74:ae:59:14:a0:3b:ed:3a:72:53:4d:ec:09:43:
         76:fd:c0:e7:03:59:1e:fd:74:82:bb:f7:8f:35:f1:1b:4b:f1:
         1b:c4:eb:52:25:70:38:6c:ba:e1:14:66:95:a5:4c:11:5b:59:
         63:85:88:80:cb:26:fb:db:7d:79:18:f5:f5:31:99:e0:4a:68:
         d1:d3:63:66:d1:44:01:a2:f8:1c:1c:37:8d:47:74:97:10:c1:
         bb:52:2e:c4:c0:7e:26:8d:92:ce:f3:43:b0:1c:55:eb:68:e5:
         8a:88:2a:77:04:11:1b:1f:ac:11:b9:f9:fe:7d:78:bb:f4:1b:
         da:c6:25:c3:63:f8:21:72:91:25:b7:82:14:c8:58:c6:0d:15:
         05:11:52:a2:ab:68:86:dd:d1:6b:31:e2:41:ad:bd:64:3a:5b:
         49:35:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:50:38 2025 by rpki-client