Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a643a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a643a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          iD65IjwasYSZHtLV7RW9CXIQVFB+wEvQtZmVvc64SVE=
Subject key identifier:   12:C3:F5:77:EA:59:93:C1:A9:45:C7:D0:8F:40:10:BB:6D:32:E0:5D
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       39BE876E7E0EBD8E8EAEABD9A4851EB908106278
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a643a3a2f34382d313238203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 21:58:11 +0000
ROA not before:           Mon 27 Jan 2025 21:53:11 +0000
ROA not after:            Mon 26 Jan 2026 21:58:11 +0000
asID:                     52580
IP address blocks:        2804:cf8:d::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:be:87:6e:7e:0e:bd:8e:8e:ae:ab:d9:a4:85:1e:b9:08:10:62:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:53:11 2025 GMT
            Not After : Jan 26 21:58:11 2026 GMT
        Subject: CN=12C3F577EA5993C1A945C7D08F4010BB6D32E05D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c7:15:9c:aa:c4:0e:c6:a5:33:72:a6:43:8b:
                    46:84:5f:78:7d:69:9c:42:a5:93:30:2d:22:ff:31:
                    cc:11:d6:1f:82:20:33:09:a9:3c:ca:5c:85:70:e7:
                    38:78:d0:de:ee:9c:80:dc:40:09:df:4d:96:13:70:
                    89:29:d8:ba:e1:a4:a4:22:b9:b9:82:ff:35:84:af:
                    92:64:86:fd:c2:80:b4:8f:f1:c4:6e:f7:00:69:e9:
                    71:28:e9:c5:78:ac:56:dc:87:3f:4b:c2:9c:06:16:
                    53:bf:60:14:fc:0a:95:89:80:c5:df:df:5a:a7:8b:
                    7c:02:4e:f0:1e:d4:9a:1e:d8:f5:ee:f5:7f:8e:1b:
                    17:1a:10:3f:fa:5c:e8:bb:fc:b4:8b:a9:68:28:9a:
                    85:8a:8d:9c:0b:d1:07:f1:50:5f:56:fd:eb:9f:29:
                    07:20:19:4e:61:b3:9d:74:a8:cb:98:c7:14:10:0b:
                    14:10:d7:89:1b:93:ee:4c:bb:e3:73:63:3e:7b:6c:
                    ea:91:99:b5:81:ad:47:c2:66:02:c3:e5:18:22:cc:
                    26:70:fc:e2:dd:8d:75:8a:88:c7:f5:a9:0a:ba:a5:
                    da:8b:10:43:16:f9:ad:cb:0e:d1:ee:47:5d:11:aa:
                    a7:73:84:0b:b2:6f:2b:4b:14:fd:0a:5c:a5:bd:ba:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C3:F5:77:EA:59:93:C1:A9:45:C7:D0:8F:40:10:BB:6D:32:E0:5D
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a643a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:e5:e5:e7:f1:43:45:6f:dc:cd:d4:84:05:2a:00:a1:12:dd:
         4b:56:39:26:16:76:85:50:3c:69:e3:5b:4b:6a:4b:60:af:20:
         1d:b7:d9:7b:33:6e:73:2b:94:69:aa:cd:d2:87:54:3d:77:2d:
         f5:b6:5e:03:d7:9d:d0:d5:bb:90:a4:b6:1a:d6:a4:42:ca:04:
         ca:c4:9e:e5:a0:85:d1:8e:0c:2d:ea:3c:53:11:d5:11:66:d3:
         fe:46:9d:2c:d1:9c:37:1a:98:77:03:50:54:a4:8a:ab:27:56:
         8a:89:c3:bc:d6:b2:db:68:44:af:7a:f7:53:9d:3f:db:32:a2:
         66:b5:fd:e9:f8:7e:fb:94:41:00:35:44:bd:86:f4:46:d4:48:
         1c:82:97:53:3a:f3:18:ce:c7:23:cb:8e:dd:69:a5:59:46:82:
         f8:3f:25:20:56:ac:07:c1:c6:e3:3d:7f:c5:a2:30:5d:8c:84:
         9e:a4:c7:f3:21:d7:a3:91:29:6f:70:ea:20:ad:b8:2f:64:e0:
         59:e7:f6:dd:99:cd:f6:8e:a4:e6:36:9b:f6:43:25:63:45:c2:
         b2:11:3e:bc:9d:4d:25:0c:c3:6a:80:e4:85:52:1f:95:a9:22:
         7e:55:78:02:7b:4f:c2:a4:0a:04:78:cb:99:9d:15:61:fe:74:
         c2:3d:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:43:50 2025 by rpki-client