Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31363a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31363a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          46vTdeki0o3UMb8qd/j71X8Hwnn7bm0d3JZXCRPQ5Ns=
Subject key identifier:   CF:8E:2D:BA:33:77:17:3B:18:34:8C:14:D8:25:6A:DA:AE:17:B5:61
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       618C2A31F808ECA332F6D5E8EA1BBC63BFB94EC1
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31363a3a2f34382d313238203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 21:59:38 +0000
ROA not before:           Mon 27 Jan 2025 21:54:38 +0000
ROA not after:            Mon 26 Jan 2026 21:59:38 +0000
asID:                     52580
IP address blocks:        2804:cf8:16::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8c:2a:31:f8:08:ec:a3:32:f6:d5:e8:ea:1b:bc:63:bf:b9:4e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:54:38 2025 GMT
            Not After : Jan 26 21:59:38 2026 GMT
        Subject: CN=CF8E2DBA3377173B18348C14D8256ADAAE17B561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:86:dd:2e:2b:fb:d9:27:e4:ee:3f:cf:57:
                    1d:a8:d8:65:1d:7c:7c:60:7a:b1:9e:80:0a:d8:92:
                    a1:42:ec:c3:7c:28:8b:2c:aa:27:66:6d:be:7e:b7:
                    01:3e:65:67:23:05:f8:bb:f9:bd:08:79:27:b9:c5:
                    26:8f:b5:82:81:ca:55:87:be:a2:fa:bf:ae:fb:dd:
                    d4:58:a5:53:5c:d6:69:e5:61:07:92:dc:27:12:49:
                    f3:23:d5:d5:75:8b:58:43:00:04:1f:f7:71:09:9d:
                    68:aa:c8:b6:1c:c0:a2:fb:f4:01:f4:77:7b:67:ef:
                    b1:d6:28:6b:8a:22:5a:8a:b7:4d:d6:3e:41:f3:37:
                    83:4e:6e:87:2c:8b:40:bc:c9:76:86:8c:09:41:c9:
                    7a:e7:f2:28:39:d4:c5:58:f5:81:0e:99:e4:f2:33:
                    8e:ce:f4:16:d3:66:8c:22:8e:b6:4c:41:2a:62:06:
                    72:47:c4:ea:b5:a4:bd:bc:ee:55:e2:8a:2f:f0:16:
                    c0:2e:67:fd:47:24:de:2a:5f:eb:1c:18:70:79:8e:
                    64:17:a8:64:a0:ef:0c:ce:1e:32:f0:93:66:d1:63:
                    6f:f6:7c:d8:f0:19:cc:9a:61:69:e7:d8:cc:d3:93:
                    4e:bd:63:bb:6c:7b:93:1f:cc:6e:3f:71:2a:4a:2d:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8E:2D:BA:33:77:17:3B:18:34:8C:14:D8:25:6A:DA:AE:17:B5:61
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31363a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:9d:e5:97:c2:ab:3a:3f:73:05:71:aa:d1:56:9f:0e:00:40:
         16:17:f1:ef:5f:e5:96:dc:e7:7a:dd:df:46:24:a7:f3:36:d4:
         85:6a:c4:d4:3b:91:62:12:a1:81:9a:93:97:06:1a:63:bf:b5:
         70:a6:b2:5c:98:f9:aa:bb:28:f2:44:91:d4:de:02:46:bc:d1:
         58:98:3f:61:d0:f4:5a:8a:3e:2a:59:1a:7d:fb:12:78:05:5d:
         64:7c:39:46:28:44:45:20:d7:ec:69:9e:6d:6e:7d:7d:04:78:
         34:39:2c:96:15:55:a0:f9:cc:b8:c5:69:5d:ea:19:a6:d3:c3:
         10:af:30:61:fc:74:60:6c:62:9b:ff:10:1c:1d:9f:10:28:60:
         63:51:d3:b1:bb:cb:4f:b9:2e:17:1e:ce:5f:b2:2d:c0:e8:63:
         27:53:1a:81:9e:2c:66:83:95:4f:11:35:0e:61:23:b4:c1:7c:
         60:84:d4:93:45:d1:02:dd:1c:1d:c2:1e:93:6b:0b:e7:37:62:
         7a:f0:6e:fd:53:08:0a:24:99:74:af:a3:a7:47:04:21:52:f6:
         16:64:8a:42:b2:98:1c:50:b6:64:5c:3c:58:d6:40:82:66:25:
         a6:2c:de:09:d6:6d:25:9c:d8:5a:08:15:9e:48:00:b8:f2:7b:
         2f:40:00:05
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUYYwqMfgI7KMy9tXo6hu8Y7+5TsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJEQTUwNkY2NEE4RDE1MzQ0MjQ4QTA3OTgzNjc0QzdE
QUYwRTg0ODAeFw0yNTAxMjcyMTU0MzhaFw0yNjAxMjYyMTU5MzhaMDMxMTAvBgNV
BAMTKENGOEUyREJBMzM3NzE3M0IxODM0OEMxNEQ4MjU2QURBQUUxN0I1NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT74bdLiv72Sfk7j/PVx2o2GUd
fHxgerGegArYkqFC7MN8KIssqidmbb5+twE+ZWcjBfi7+b0IeSe5xSaPtYKBylWH
vqL6v6773dRYpVNc1mnlYQeS3CcSSfMj1dV1i1hDAAQf93EJnWiqyLYcwKL79AH0
d3tn77HWKGuKIlqKt03WPkHzN4NObocsi0C8yXaGjAlByXrn8ig51MVY9YEOmeTy
M47O9BbTZowijrZMQSpiBnJHxOq1pL287lXiii/wFsAuZ/1HJN4qX+scGHB5jmQX
qGSg7wzOHjLwk2bRY2/2fNjwGcyaYWnn2MzTk069Y7tse5MfzG4/cSpKLXgPAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUz44tujN3FzsYNIwU2CVq2q4XtWEwHwYDVR0j
BBgwFoAUW9pQb2So0VNEJIoHmDZ0x9rw6EgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC81QkRBNTA2RjY0QThEMTUzNDQyNDhBMDc5ODM2NzRDN0RBRjBFODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCREE1MDZGNjRBOEQxNTM0
NDI0OEEwNzk4MzY3NEM3REFGMEU4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzIzODMwMzQzYTYzNjYzODNhMzEzNjNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIw
MzUzMjM1MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEDPgAFjANBgkqhkiG9w0BAQsFAAOCAQEA
MZ3ll8KrOj9zBXGq0VafDgBAFhfx71/lltznet3fRiSn8zbUhWrE1DuRYhKhgZqT
lwYaY7+1cKayXJj5qrso8kSR1N4CRrzRWJg/YdD0Woo+KlkaffsSeAVdZHw5RihE
RSDX7GmebW59fQR4NDkslhVVoPnMuMVpXeoZptPDEK8wYfx0YGxim/8QHB2fEChg
Y1HTsbvLT7kuFx7OX7ItwOhjJ1MagZ4sZoOVTxE1DmEjtMF8YITUk0XRAt0cHcIe
k2sL5zdievBu/VMICiSZdK+jp0cEIVL2FmSKQrKYHFC2ZFw8WNZAgmYlpizeCdZt
JZzYWggVnkgAuPJ7L0AABQ==
-----END CERTIFICATE-----
Generated at Sun May 4 12:40:24 2025 by rpki-client