Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030383a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a633030383a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          Xi+ssYzLZ03i1J0q+rZJS35tEP9jWO6hIkAId3njZVI=
Subject key identifier:   7E:7C:1E:09:49:48:8C:C2:D1:10:98:6C:FC:B5:1E:EB:08:88:63:30
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       03F0AB3E30C27A9E2197979FC779F037E0DCD70B
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030383a3a2f34382d313238203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 22:01:21 +0000
ROA not before:           Mon 27 Jan 2025 21:56:21 +0000
ROA not after:            Mon 26 Jan 2026 22:01:21 +0000
asID:                     52580
IP address blocks:        2804:cf8:c008::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f0:ab:3e:30:c2:7a:9e:21:97:97:9f:c7:79:f0:37:e0:dc:d7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:56:21 2025 GMT
            Not After : Jan 26 22:01:21 2026 GMT
        Subject: CN=7E7C1E0949488CC2D110986CFCB51EEB08886330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:5c:f2:c0:47:61:60:52:b6:13:f8:c3:9a:
                    1c:4a:7b:39:c1:f2:0a:fc:09:5a:48:b3:d5:5d:62:
                    58:4a:1e:68:1d:1f:c2:ed:5a:db:f2:5e:c6:ff:95:
                    9c:41:08:a6:b2:55:61:dd:97:06:fe:09:0d:52:1d:
                    13:81:6f:e5:4e:ed:59:65:6b:fa:92:20:e9:74:4a:
                    c6:58:1c:ce:0f:20:2a:de:94:90:61:95:41:f3:0b:
                    48:00:e8:d8:f6:58:ee:b9:4e:42:b0:7f:cb:ba:96:
                    c3:03:4f:57:c3:dd:1b:e1:e8:10:95:d7:83:79:82:
                    ad:c9:a8:8f:27:dc:a6:5e:22:3e:6a:81:ba:7b:d4:
                    33:3d:70:64:15:b3:c8:26:6d:25:35:5b:58:82:e5:
                    2e:c0:36:d4:91:ef:19:b5:6a:7e:55:e5:46:b6:72:
                    ad:be:fa:f3:9d:b4:1b:6c:18:f7:bc:09:ea:c7:da:
                    40:14:4b:64:45:2b:54:b2:4a:d6:61:13:66:3f:a3:
                    5d:f6:7a:0c:5e:37:9a:05:d9:55:15:da:ef:53:29:
                    6e:36:a0:75:fe:12:51:6e:f5:c3:d5:62:6e:e0:61:
                    23:ed:ed:14:f6:e7:0d:00:0d:6a:98:50:8c:57:ca:
                    27:cd:08:ee:53:4d:43:87:1c:06:48:9d:84:ce:e3:
                    91:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7C:1E:09:49:48:8C:C2:D1:10:98:6C:FC:B5:1E:EB:08:88:63:30
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030383a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c008::/48

    Signature Algorithm: sha256WithRSAEncryption
         cd:ec:2b:f8:f5:12:e1:4b:4b:dc:d0:27:fc:86:e4:b1:5b:de:
         25:90:20:98:69:4e:46:7b:3e:ca:a7:f5:dc:24:b5:47:bb:2e:
         6e:7e:ee:25:7d:03:8c:89:4b:c9:07:4d:0f:2c:bd:a4:35:b5:
         4e:e7:f4:50:37:ce:56:bb:ff:f6:3d:5f:c0:73:4e:2e:99:68:
         dc:a0:25:e8:1a:e7:16:9d:d6:34:be:58:ea:08:48:9e:7c:5c:
         d3:3e:a6:d7:0c:12:71:39:ef:3a:97:dc:68:9b:68:c1:cd:e2:
         fa:92:af:40:9b:89:87:98:f3:72:70:86:21:ad:16:a2:dd:e9:
         c6:9c:ef:fd:59:e5:c0:19:b7:3d:05:d5:35:86:7d:93:dd:2b:
         04:50:a8:e4:42:cd:61:8f:03:94:81:d6:ac:02:ff:83:3a:49:
         dc:72:23:42:e7:35:1f:2f:62:d0:25:62:3b:00:1c:b8:98:de:
         b1:68:1e:8c:5c:55:fa:b4:14:1b:b1:b4:96:42:93:f6:4a:aa:
         4b:73:3f:19:e8:1a:33:df:a1:71:a6:15:91:9f:64:1d:56:7a:
         7c:4d:c8:35:4d:dd:7e:69:5a:86:d6:fb:d1:e4:da:20:74:0a:
         53:f4:39:19:62:95:60:39:37:b7:db:33:d9:e2:0a:f5:f1:f8:
         d9:8f:80:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:16:19 2025 by rpki-client