Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a323a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a323a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          hd2jZFwaOguIHr1oRHLw5PgoJ1MW2i77/w+pGaQKrTg=
Subject key identifier:   71:52:E0:3D:E0:5F:67:79:63:C2:AD:93:68:9A:E9:FD:B7:29:0B:F2
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       66114B2529A7D3400EBF52EBD34B630E9A1ED47F
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a323a3a2f34382d313238203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 21:57:13 +0000
ROA not before:           Mon 27 Jan 2025 21:52:13 +0000
ROA not after:            Mon 26 Jan 2026 21:57:13 +0000
asID:                     52580
IP address blocks:        2804:cf8:2::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:11:4b:25:29:a7:d3:40:0e:bf:52:eb:d3:4b:63:0e:9a:1e:d4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:52:13 2025 GMT
            Not After : Jan 26 21:57:13 2026 GMT
        Subject: CN=7152E03DE05F677963C2AD93689AE9FDB7290BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:f1:ab:fa:82:1c:d0:27:64:26:70:c6:f3:
                    ec:70:29:fa:81:70:36:8d:da:cc:35:3e:b4:47:f1:
                    7e:77:75:9e:38:3c:18:f4:6b:aa:60:3d:fb:83:02:
                    7d:a9:ba:fc:4a:dc:f8:2f:d4:8c:cc:64:28:ce:f7:
                    0f:b7:e1:e5:a5:cf:29:2f:1f:e4:d5:11:8c:ed:b4:
                    2e:7c:25:52:d7:6c:25:1b:59:43:70:97:5c:e6:9c:
                    96:0e:2a:47:7f:f9:64:a4:d1:66:8c:2e:15:57:fe:
                    8e:91:97:b3:d0:6b:77:cf:b0:b8:c8:40:7a:c5:3f:
                    f5:20:29:90:d4:ea:bd:48:fd:f4:55:04:24:6e:6a:
                    45:18:d7:6e:16:f2:97:e9:94:a6:f2:9b:bb:fe:73:
                    40:de:92:91:a1:3c:14:14:40:97:9a:b7:ae:7d:30:
                    19:f1:8b:3b:3a:af:83:eb:4e:46:c3:35:f2:ee:4a:
                    4f:27:0c:bc:e6:d8:40:e7:10:74:11:8d:54:ef:19:
                    39:2e:21:b9:1d:bf:b8:da:c5:b9:37:6c:a2:d0:39:
                    23:9a:98:78:0c:5b:80:8d:40:22:e1:1f:cd:25:2a:
                    b7:21:7d:a7:67:01:16:80:23:cb:f0:09:52:93:5d:
                    7b:2c:55:58:e1:88:6f:d8:13:e4:08:08:c9:a7:81:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:52:E0:3D:E0:5F:67:79:63:C2:AD:93:68:9A:E9:FD:B7:29:0B:F2
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a323a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:04:61:63:1e:d4:3b:67:97:c3:5c:75:8b:20:f8:88:47:
         fc:8e:ba:1e:a5:c9:3b:00:30:16:7a:6d:d9:c8:85:86:57:19:
         18:6f:73:03:b7:d5:20:3e:8f:64:4d:44:d5:19:4a:1a:8a:68:
         eb:19:2d:2b:ca:4f:64:e3:e3:96:5d:a1:86:4b:c9:2d:4b:50:
         bb:a6:f8:93:2e:2c:69:3d:72:b6:f4:97:9f:a4:67:ae:1d:08:
         09:df:bc:a0:b6:2b:64:6f:8d:65:51:ed:54:c9:cb:fd:e5:b7:
         59:66:b0:a4:be:a8:56:a9:a1:6d:40:df:47:6b:c2:8a:01:87:
         c4:8d:95:3c:35:da:01:30:3a:98:9b:79:3f:cc:90:87:40:2b:
         5b:ab:b8:86:29:1b:59:d9:ea:22:8d:e4:e8:3f:ba:9a:c5:a5:
         34:aa:0d:b9:bf:ae:0f:b2:2d:21:5c:1a:97:d3:a6:09:fe:fc:
         ac:54:aa:16:69:04:1e:72:3e:44:0f:be:8b:89:3f:1b:28:6a:
         d0:19:a6:06:fa:49:8b:82:ee:b8:94:04:40:2d:08:50:7b:3b:
         c6:c1:68:48:c8:8d:cb:89:d2:f1:20:c3:5f:c3:44:fd:27:ad:
         8b:49:a8:3e:97:ab:f9:0e:14:35:ec:6f:aa:93:6a:7c:3e:7d:
         75:ee:01:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:04:29 2025 by rpki-client