Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a313a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a313a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          FYflvBtRiv32cbJn3UqQ3YyxhyI4K3HIM6Ne6Bl/Z3E=
Subject key identifier:   95:AD:FA:DE:2D:80:5D:E1:52:F0:A1:C5:C5:F8:35:1D:A5:64:58:43
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       380B1FD71FE6487CEA8D34CD0BE4E92833F57FB9
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a313a3a2f34382d313238203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 21:56:59 +0000
ROA not before:           Mon 27 Jan 2025 21:51:59 +0000
ROA not after:            Mon 26 Jan 2026 21:56:59 +0000
asID:                     52580
IP address blocks:        2804:cf8:1::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0b:1f:d7:1f:e6:48:7c:ea:8d:34:cd:0b:e4:e9:28:33:f5:7f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:51:59 2025 GMT
            Not After : Jan 26 21:56:59 2026 GMT
        Subject: CN=95ADFADE2D805DE152F0A1C5C5F8351DA5645843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0c:b4:2e:b5:62:e8:e6:a8:91:bf:0c:cd:da:
                    71:63:5a:ae:93:ff:af:f5:50:eb:ef:e3:81:3f:ee:
                    b4:5f:c0:26:ac:66:4a:c4:04:b8:5f:9a:78:e5:7c:
                    0d:d1:b8:40:75:d5:bf:ad:e1:8c:a4:69:c7:9f:cd:
                    f6:aa:03:b5:2c:9e:2a:47:5f:2b:3d:59:3d:56:c4:
                    be:05:ce:20:c9:da:3a:83:b0:3b:36:d9:45:79:f4:
                    86:52:c7:13:3f:d7:69:e0:82:af:e1:64:50:08:69:
                    23:c2:12:7b:02:dc:47:49:d3:54:f7:29:89:b4:13:
                    2e:5d:24:a5:de:57:db:f1:2b:4d:06:79:02:d6:27:
                    42:e4:4f:63:0a:47:d7:f1:ce:d0:64:1e:c0:b1:af:
                    91:8b:df:3a:73:e5:38:08:28:a7:9e:f2:f0:ce:1f:
                    11:61:3b:30:01:bd:df:0b:54:2c:53:88:c4:6f:92:
                    8d:6e:e3:d1:92:b3:d5:22:0b:2e:2f:ea:18:02:49:
                    4b:b3:31:73:b8:dd:71:13:9b:12:ee:eb:19:f7:87:
                    99:50:27:27:52:ec:bb:ab:82:0b:d8:85:05:6b:aa:
                    f4:6a:c4:6b:41:67:c5:16:ce:99:a4:a5:6b:f1:d8:
                    5f:fe:3e:da:a0:e0:50:27:e9:06:5d:a4:f5:17:59:
                    e2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AD:FA:DE:2D:80:5D:E1:52:F0:A1:C5:C5:F8:35:1D:A5:64:58:43
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a313a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:94:69:46:90:81:80:5f:52:8d:9f:a3:99:23:fb:2b:96:a2:
         25:26:8a:47:8d:1e:d2:bf:30:a3:da:b3:51:be:0e:87:24:a6:
         ef:2d:15:29:26:6b:c0:31:d1:de:13:56:da:21:5e:ce:7e:07:
         7b:7a:76:04:b1:c6:61:ef:38:35:14:eb:0a:8c:3e:a1:d5:fd:
         0b:bc:ce:e7:46:64:1e:6d:b1:ca:a1:0e:8a:b4:b9:53:b8:bb:
         ad:dc:e5:aa:f6:60:67:c7:99:84:05:78:ee:f9:ba:18:35:02:
         d5:94:99:79:32:a3:fd:2b:1c:91:16:7a:77:fb:44:c8:b8:a4:
         48:88:f8:0c:f5:36:8d:d4:94:7f:26:77:6d:2b:22:06:52:b7:
         3d:bb:7c:d7:a3:4e:2c:98:e2:47:20:e0:57:88:da:12:d7:f4:
         30:cf:a7:34:ca:da:ab:96:80:4f:74:2d:53:da:ab:c5:67:ac:
         25:3b:b4:65:43:08:45:4f:01:de:2b:14:56:8b:9e:12:f4:25:
         e3:58:80:08:2a:70:68:2b:7e:02:f9:0a:90:2a:ea:39:4c:cd:
         04:8e:ba:da:23:31:59:46:94:01:42:a0:bc:98:93:00:bb:cd:
         b1:bc:41:f9:a4:10:19:43:11:3d:29:e9:60:ce:3a:6b:bd:de:
         81:60:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:47:19 2025 by rpki-client