Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030343a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a633030343a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          er6WLKa9yqEBv4BgQcPmsU1wxXhgTp836M4b2fwsz40=
Subject key identifier:   BB:60:B3:AC:C8:ED:5C:7D:3E:47:0E:71:6A:5A:73:40:60:CC:C0:AA
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       44AE6652706D2CB0C929585C76E9C1A92B9E3672
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030343a3a2f34382d313238203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 22:00:31 +0000
ROA not before:           Mon 27 Jan 2025 21:55:31 +0000
ROA not after:            Mon 26 Jan 2026 22:00:31 +0000
asID:                     52580
IP address blocks:        2804:cf8:c004::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ae:66:52:70:6d:2c:b0:c9:29:58:5c:76:e9:c1:a9:2b:9e:36:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:55:31 2025 GMT
            Not After : Jan 26 22:00:31 2026 GMT
        Subject: CN=BB60B3ACC8ED5C7D3E470E716A5A734060CCC0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:ab:4d:69:45:c6:83:12:67:32:ed:71:85:
                    2a:67:41:ba:23:e3:05:a5:40:dd:22:04:49:63:45:
                    c6:3f:ac:b8:49:ea:a5:ad:ed:de:62:3a:5b:ce:fd:
                    f8:31:ef:9f:73:0f:e8:84:60:e5:82:f1:b6:92:13:
                    a5:2b:9f:93:cd:7e:f0:12:00:f5:b7:c9:ee:98:a3:
                    2f:e6:48:17:ad:68:52:42:f8:b2:1e:63:a1:a2:6c:
                    42:af:7f:fd:2d:9c:a0:b2:65:b4:31:a7:ee:59:f1:
                    fc:3a:66:c2:90:97:db:27:7c:34:74:c2:8a:bd:5b:
                    d6:43:0b:14:b8:4a:85:1e:18:92:80:12:ae:24:85:
                    78:16:0e:ed:40:7f:c3:51:23:76:fc:ae:9f:da:9b:
                    4f:f7:6e:e9:0a:28:8c:3d:8e:67:72:9b:d5:ca:f0:
                    92:4a:f0:ae:0e:63:07:16:9d:0d:11:77:76:57:a7:
                    51:49:b9:c0:e7:b0:09:be:f2:00:de:26:7e:a8:f1:
                    40:bd:5f:db:43:38:46:ef:3a:46:22:31:fc:2e:57:
                    74:6f:6b:22:99:18:1f:53:35:fd:ab:eb:a3:1c:ad:
                    0b:3c:ad:03:ae:25:75:d2:c2:4a:9c:d6:c1:05:01:
                    aa:cd:04:d5:5c:db:52:5f:f6:7a:5b:b1:bd:4e:bc:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:60:B3:AC:C8:ED:5C:7D:3E:47:0E:71:6A:5A:73:40:60:CC:C0:AA
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030343a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c004::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:2a:bb:87:c5:6f:78:8d:49:c5:7c:a8:2b:74:a0:68:84:6c:
         ae:ea:04:4f:c2:06:c2:03:14:2d:3e:3a:92:c0:a4:c8:b2:2a:
         99:f9:5b:73:03:4e:e2:8b:29:09:8a:ca:fd:0a:4b:59:1f:28:
         07:b5:23:f0:fa:7f:44:16:dd:7a:dd:a8:8c:e9:78:27:da:02:
         18:c9:80:67:8c:5e:d4:cc:90:ae:84:4c:67:1b:d9:67:d1:47:
         2e:11:b8:3b:00:f2:4d:b0:e2:69:8b:13:91:1d:6c:3a:f9:1f:
         d8:0e:23:77:ae:af:90:73:91:4a:66:57:7d:df:6b:d2:fb:a2:
         66:88:9b:2a:2c:a5:4d:0e:2a:61:dd:fa:f1:e9:5d:e0:ec:c0:
         89:0b:a0:ec:ab:db:f8:11:d2:03:1f:63:05:8e:f8:f7:19:74:
         8d:93:32:05:66:c6:b2:d8:ff:91:23:bc:b1:f5:95:f7:61:cd:
         fb:95:75:82:7d:0f:01:5a:47:69:15:10:3c:81:4e:18:94:53:
         b5:3a:30:65:2c:cf:1d:aa:f2:62:f9:73:8e:72:bd:c9:e9:5b:
         86:77:ce:42:72:41:d9:b4:27:cc:a2:92:84:55:4e:a0:5b:a9:
         ca:b9:8a:11:fa:90:d6:3d:d9:f2:13:f2:50:40:a2:f0:20:42:
         95:6b:61:aa
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIURK5mUnBtLLDJKVhcdunBqSueNnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJEQTUwNkY2NEE4RDE1MzQ0MjQ4QTA3OTgzNjc0QzdE
QUYwRTg0ODAeFw0yNTAxMjcyMTU1MzFaFw0yNjAxMjYyMjAwMzFaMDMxMTAvBgNV
BAMTKEJCNjBCM0FDQzhFRDVDN0QzRTQ3MEU3MTZBNUE3MzQwNjBDQ0MwQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwatNaUXGgxJnMu1xhSpnQboj
4wWlQN0iBEljRcY/rLhJ6qWt7d5iOlvO/fgx759zD+iEYOWC8baSE6Urn5PNfvAS
APW3ye6Yoy/mSBetaFJC+LIeY6GibEKvf/0tnKCyZbQxp+5Z8fw6ZsKQl9snfDR0
woq9W9ZDCxS4SoUeGJKAEq4khXgWDu1Af8NRI3b8rp/am0/3bukKKIw9jmdym9XK
8JJK8K4OYwcWnQ0Rd3ZXp1FJucDnsAm+8gDeJn6o8UC9X9tDOEbvOkYiMfwuV3Rv
ayKZGB9TNf2r66McrQs8rQOuJXXSwkqc1sEFAarNBNVc21Jf9npbsb1OvK+vAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUu2CzrMjtXH0+Rw5xalpzQGDMwKowHwYDVR0j
BBgwFoAUW9pQb2So0VNEJIoHmDZ0x9rw6EgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC81QkRBNTA2RjY0QThEMTUzNDQyNDhBMDc5ODM2NzRDN0RBRjBFODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCREE1MDZGNjRBOEQxNTM0
NDI0OEEwNzk4MzY3NEM3REFGMEU4NDguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzIzODMwMzQzYTYzNjYzODNhNjMzMDMwMzQzYTNhMmYzNDM4MmQzMTMyMzgyMDNk
M2UyMDM1MzIzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBAz4wAQwDQYJKoZIhvcNAQELBQAD
ggEBAGAqu4fFb3iNScV8qCt0oGiEbK7qBE/CBsIDFC0+OpLApMiyKpn5W3MDTuKL
KQmKyv0KS1kfKAe1I/D6f0QW3XrdqIzpeCfaAhjJgGeMXtTMkK6ETGcb2WfRRy4R
uDsA8k2w4mmLE5EdbDr5H9gOI3eur5BzkUpmV33fa9L7omaImyospU0OKmHd+vHp
XeDswIkLoOyr2/gR0gMfYwWO+PcZdI2TMgVmxrLY/5EjvLH1lfdhzfuVdYJ9DwFa
R2kVEDyBThiUU7U6MGUszx2q8mL5c45yvcnpW4Z3zkJyQdm0J8yikoRVTqBbqcq5
ihH6kNY92fIT8lBAovAgQpVrYao=
-----END CERTIFICATE-----
Generated at Sun May 4 13:12:55 2025 by rpki-client