Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a653030343a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a653030343a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          ajopOqbDqVoVwiSf2QMf2R397DrmM+QgmlBgLACehrk=
Subject key identifier:   30:0A:F6:B1:56:7D:5F:A1:6E:34:35:E8:83:9E:32:84:FC:76:68:88
Certificate issuer:       /CN=5BDA506F64A8D15344248A07983674C7DAF0E848
Certificate serial:       116CE7E76982A21705BF6D5AFF454CCAF89E5D70
Authority key identifier: 5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a653030343a3a2f34382d313238203d3e203532353830.roa
Signing time:             Mon 27 Jan 2025 22:01:33 +0000
ROA not before:           Mon 27 Jan 2025 21:56:33 +0000
ROA not after:            Mon 26 Jan 2026 22:01:33 +0000
asID:                     52580
IP address blocks:        2804:cf8:e004::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6c:e7:e7:69:82:a2:17:05:bf:6d:5a:ff:45:4c:ca:f8:9e:5d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDA506F64A8D15344248A07983674C7DAF0E848
        Validity
            Not Before: Jan 27 21:56:33 2025 GMT
            Not After : Jan 26 22:01:33 2026 GMT
        Subject: CN=300AF6B1567D5FA16E3435E8839E3284FC766888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:3e:ad:1a:a2:44:b6:b3:2e:76:0f:c5:ba:
                    19:de:0f:ce:ca:8f:3a:05:d3:bc:88:e4:13:12:78:
                    49:1f:63:f3:b3:d2:a7:a8:9f:e1:cf:40:75:a1:5b:
                    ab:e6:fc:c9:8e:b9:f4:df:c1:ad:cc:d9:30:dc:3e:
                    9b:0f:03:07:e4:78:bb:a7:a8:ea:16:f7:b3:b2:b1:
                    1f:df:c0:64:26:e3:5b:9f:e3:54:2a:76:36:fe:dd:
                    b5:d0:bb:64:4b:45:06:f7:b7:07:44:79:34:3c:50:
                    46:c0:74:4b:9d:f4:b7:7b:27:27:06:ec:81:14:bf:
                    dc:bc:9e:2e:79:af:a5:72:b9:77:0d:ad:fc:cb:9a:
                    70:ec:f5:da:6e:a7:de:33:c1:0f:2f:20:2a:92:c2:
                    8a:5f:0a:93:9a:31:c8:d9:a1:b4:2f:2e:5e:17:03:
                    40:ee:85:60:94:9b:9d:af:74:33:d8:40:ba:2f:2b:
                    89:43:78:9b:dd:56:5f:35:50:e7:8d:9e:e4:34:03:
                    45:44:67:8e:9c:94:a7:41:ee:65:c5:ec:30:f4:42:
                    08:af:0c:98:88:84:09:cb:cd:8d:27:59:5b:a6:cd:
                    e5:58:97:41:88:1f:a2:38:fd:f1:07:aa:3c:ea:36:
                    d7:22:93:ff:fa:24:51:13:16:cb:0d:92:97:91:de:
                    39:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0A:F6:B1:56:7D:5F:A1:6E:34:35:E8:83:9E:32:84:FC:76:68:88
            X509v3 Authority Key Identifier:
                keyid:5B:DA:50:6F:64:A8:D1:53:44:24:8A:07:98:36:74:C7:DA:F0:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/5BDA506F64A8D15344248A07983674C7DAF0E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BDA506F64A8D15344248A07983674C7DAF0E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a653030343a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:e004::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:71:dd:37:3a:a1:36:ff:4a:01:df:71:d9:07:b4:9b:79:5d:
         5c:a4:b4:f6:9b:e5:df:c2:8d:8e:3d:27:d8:11:d0:28:dc:1c:
         df:8f:7d:e2:6c:9a:bd:04:b0:8c:69:ea:30:c3:b6:a5:5e:c7:
         1e:4e:d6:1b:14:b6:24:44:76:fa:46:c4:4f:d3:79:1e:61:41:
         cf:86:3c:3d:e3:57:4a:47:15:11:8e:2b:94:e2:08:19:90:1e:
         47:5f:b7:0b:b8:02:f0:d4:c9:6e:3e:2a:56:83:c6:4b:6f:83:
         b2:83:90:d9:91:4e:3e:5f:fd:ff:2c:2d:3d:cb:e0:51:15:2b:
         34:71:f9:24:e4:c3:ad:80:41:76:c7:2d:6f:1a:f7:ad:ce:52:
         80:aa:46:26:04:81:f3:75:77:88:08:fd:46:af:a0:11:64:c5:
         a4:cd:54:a6:1d:34:1a:7a:3f:0b:c6:28:ac:19:6e:3a:1e:8b:
         48:7d:e3:40:ac:87:fc:88:d9:cb:af:63:77:1c:38:a6:d5:07:
         0a:f6:24:99:df:c1:de:90:44:9f:bd:5c:1a:38:72:9d:10:71:
         cc:40:28:79:bf:0f:e3:98:62:ca:99:03:bd:fd:fd:4a:43:1c:
         8e:12:c7:02:92:e0:f0:68:25:57:72:a6:07:a2:4d:ae:4b:c3:
         d4:51:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:23:08 2025 by rpki-client