Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a333a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a333a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          DeOvKgKuzUokwfdZm9v1lpAEc00VR3GxR20g+ieGgbo=
Subject key identifier:   46:5F:1C:05:72:7D:61:11:BA:5B:B4:0B:DC:05:04:2C:AB:DB:9D:F1
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       450809168D522DBBC57C9432A4971C62DB6F1266
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a333a3a2f34382d313238203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 21:57:29 +0000
ROA not before:           Mon 27 Jan 2025 21:52:29 +0000
ROA not after:            Mon 26 Jan 2026 21:57:29 +0000
asID:                     52580
IP address blocks:        2804:cf8:3::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:08:09:16:8d:52:2d:bb:c5:7c:94:32:a4:97:1c:62:db:6f:12:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:52:29 2025 GMT
            Not After : Jan 26 21:57:29 2026 GMT
        Subject: CN=465F1C05727D6111BA5BB40BDC05042CABDB9DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:72:f0:f2:32:06:e1:48:11:cc:83:36:6f:
                    9e:e5:38:48:1a:16:3b:a8:91:2b:62:27:9e:58:56:
                    e8:21:f3:0c:1d:a4:24:ff:f9:e3:b0:7a:1a:59:59:
                    02:60:3d:ec:6e:a1:79:25:41:6c:6f:5f:5d:e4:e9:
                    38:75:d3:61:00:ac:d3:60:14:2b:d0:32:96:73:0b:
                    7d:80:80:14:c8:b5:a4:64:6a:b7:47:a0:72:51:df:
                    e0:6c:79:8c:bb:65:f9:c3:1f:66:7d:dd:71:b4:0c:
                    8a:d6:d7:34:4e:92:74:52:ef:23:ef:75:80:25:27:
                    39:f4:5c:6b:95:ca:42:93:f4:e5:98:47:c4:b4:26:
                    bc:53:c2:e6:f4:f4:d8:38:59:9d:53:29:eb:78:49:
                    7e:b7:6d:30:ba:19:17:0d:9a:08:f4:46:ae:37:07:
                    28:12:52:1b:48:cf:6e:0e:dd:da:16:e6:29:8f:1f:
                    54:59:ff:ed:59:f9:88:2b:7d:e4:d4:31:c1:e9:3d:
                    0f:bb:51:7e:f1:f0:4f:c6:63:8e:48:88:93:f1:ab:
                    46:57:53:48:32:f8:c8:cb:9f:8d:b7:ca:09:91:c6:
                    f7:2b:dc:1c:22:c3:8f:97:2d:11:a2:a4:fe:38:df:
                    5b:ae:8b:ce:d1:37:da:41:fa:4f:b0:f4:fb:ff:37:
                    a6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5F:1C:05:72:7D:61:11:BA:5B:B4:0B:DC:05:04:2C:AB:DB:9D:F1
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a333a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:9b:da:36:da:88:4c:91:d4:ca:46:f7:29:ac:73:e5:b8:f9:
         42:ee:dc:85:b5:69:41:7c:a4:be:a8:55:8c:59:60:d7:ac:af:
         68:ba:43:66:ba:ff:11:56:07:eb:ff:79:b6:43:6b:3a:48:dd:
         58:34:6a:e5:16:dd:25:ea:c2:44:50:3a:12:8b:79:bc:b7:91:
         1a:e0:ee:0b:e0:6f:c7:ff:15:19:54:bd:95:d9:7a:2f:42:cc:
         83:c7:3c:e2:a7:a6:ae:62:f3:a9:76:88:35:3d:01:b9:05:0c:
         cf:6f:3c:4d:b3:32:fe:5b:6d:57:b4:24:7e:d1:37:cd:67:66:
         15:df:a4:ec:36:e9:71:fc:e5:f6:c5:82:2c:aa:01:09:e6:40:
         6b:31:79:14:21:a2:52:f1:fc:36:ef:7e:49:90:dc:b8:6b:30:
         15:b5:0e:c0:e1:64:54:de:da:cd:48:9b:6f:92:4f:41:94:f0:
         30:be:15:28:01:28:ff:55:9d:5b:0f:aa:6f:cd:36:18:cf:6c:
         31:7f:c1:ee:c7:08:81:16:d0:67:c1:6f:43:80:be:0c:1b:40:
         f0:14:28:17:9b:aa:24:63:15:74:a0:17:b8:85:8f:31:7b:c6:
         44:94:ef:44:92:f2:88:6c:d6:c8:02:92:f4:41:f4:e5:b7:0b:
         ac:69:90:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:56:16 2025 by rpki-client