Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030323a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a633030323a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          lCuG26e4gcMyNsjQL8yfTqyumQzcOB1/+dfEqybMy8g=
Subject key identifier:   B7:5A:2F:C1:D9:0B:92:EA:B7:4C:C6:CD:75:25:EE:C3:3E:DC:63:F9
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       384E29A07E147BCC0C8836C291C472C0BAB41287
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030323a3a2f34382d313238203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 22:00:22 +0000
ROA not before:           Mon 27 Jan 2025 21:55:22 +0000
ROA not after:            Mon 26 Jan 2026 22:00:22 +0000
asID:                     52580
IP address blocks:        2804:cf8:c002::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4e:29:a0:7e:14:7b:cc:0c:88:36:c2:91:c4:72:c0:ba:b4:12:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:55:22 2025 GMT
            Not After : Jan 26 22:00:22 2026 GMT
        Subject: CN=B75A2FC1D90B92EAB74CC6CD7525EEC33EDC63F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:8b:24:33:c7:36:06:a7:7e:d9:4e:40:a3:
                    68:7a:c2:e7:63:b0:67:cb:46:8f:24:0a:1c:22:df:
                    e9:5f:2d:72:e0:44:60:5b:c5:68:17:2c:2f:75:a2:
                    ce:1c:62:d8:a6:9d:63:4c:63:fc:55:f9:0a:b3:d1:
                    1f:c8:58:9f:41:0e:42:d4:7e:53:46:aa:a4:6e:ad:
                    57:85:5a:d5:e3:45:ed:63:dc:a4:48:6d:76:70:2f:
                    d8:eb:1e:a0:b2:a2:a2:bb:10:94:a9:6b:88:0f:b8:
                    2e:df:7d:81:b2:b8:66:ee:86:b5:9b:aa:56:a9:c2:
                    48:b1:f7:39:de:f3:81:04:80:10:48:85:9a:dd:92:
                    ec:a8:a0:15:90:2a:da:f7:cf:4b:35:b7:7f:f4:04:
                    b9:be:fa:31:c2:d9:99:6e:d5:aa:ad:dc:06:28:eb:
                    92:e2:94:0f:0f:82:e9:88:40:8a:fb:92:03:ab:27:
                    31:37:c9:b3:ee:ea:66:79:e4:92:d3:ed:46:31:8b:
                    3f:39:9d:dc:b8:ea:e9:fc:e5:23:41:88:d6:7c:ea:
                    63:c4:0e:7a:9f:e9:28:42:2f:c4:8f:c0:66:73:e4:
                    06:d4:6b:e9:51:38:5c:0d:b6:60:f2:62:78:1e:9d:
                    23:3c:32:0f:6f:34:d6:ac:2d:8e:c2:36:91:08:a6:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5A:2F:C1:D9:0B:92:EA:B7:4C:C6:CD:75:25:EE:C3:3E:DC:63:F9
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030323a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c002::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:14:fb:dd:b5:81:ab:49:8c:ae:e0:9f:9a:a9:09:e2:62:46:
         d0:13:04:8d:72:14:85:2e:51:fa:df:b9:fa:8e:01:f6:77:18:
         d8:27:13:8c:4a:d5:f2:54:51:17:9f:08:73:49:f4:d8:0a:23:
         99:f9:55:c2:e4:ae:3b:15:f2:10:8f:e0:21:58:2e:3e:7c:f8:
         9f:a3:ec:bf:dd:e4:43:b9:79:b8:90:ac:0e:77:81:1f:2c:74:
         c5:d0:e0:c7:68:4e:78:c9:f6:8c:ad:eb:84:71:97:57:eb:50:
         49:3c:43:44:8f:ef:2a:8d:9c:9e:34:a5:44:8d:c8:d4:b7:1d:
         c7:63:43:0d:be:36:0d:c0:50:50:ba:3b:f1:37:b9:f7:52:1e:
         06:6e:bb:73:2a:3e:2b:ab:6e:bb:3e:1e:9e:0c:5c:6f:80:e7:
         3b:17:9a:df:b8:af:ac:65:e9:97:28:28:ce:57:b4:05:62:fa:
         89:a5:3b:4e:95:00:de:81:e9:49:57:b1:a1:c3:c5:8f:45:20:
         54:26:fe:2c:e5:f4:ce:90:e5:02:42:d8:78:04:cd:35:62:82:
         d6:e8:bb:d4:67:c7:4e:38:94:10:8a:11:9c:e4:63:e8:94:43:
         2c:1e:f1:d9:18:1c:bf:95:c1:53:92:5c:1e:62:f7:4f:6c:22:
         bf:b4:c4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:02:47 2025 by rpki-client