Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/323830343a323231633a3a2f33322d3438203d3e20323634353932.roa
File:                     323830343a323231633a3a2f33322d3438203d3e20323634353932.roa (raw, json)
Hash identifier:          LHZTpxZgBRTNYSbetVGGy4tGU1JCzHjr7F83mMtZnPk=
Subject key identifier:   29:82:D1:1F:45:FA:D8:21:48:F8:D1:E6:22:91:16:9D:C1:0C:EE:23
Certificate issuer:       /CN=B558F6219859A6C785E4275ABE0738E504D862DF
Certificate serial:       5C20280513E0FB6F2F5D1474A1FE5657763F9B
Authority key identifier: B5:58:F6:21:98:59:A6:C7:85:E4:27:5A:BE:07:38:E5:04:D8:62:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B558F6219859A6C785E4275ABE0738E504D862DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/323830343a323231633a3a2f33322d3438203d3e20323634353932.roa
Signing time:             Thu 19 Dec 2024 18:13:33 +0000
ROA not before:           Thu 19 Dec 2024 18:08:33 +0000
ROA not after:            Thu 18 Dec 2025 18:13:33 +0000
asID:                     264592
IP address blocks:        2804:221c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:20:28:05:13:e0:fb:6f:2f:5d:14:74:a1:fe:56:57:76:3f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B558F6219859A6C785E4275ABE0738E504D862DF
        Validity
            Not Before: Dec 19 18:08:33 2024 GMT
            Not After : Dec 18 18:13:33 2025 GMT
        Subject: CN=2982D11F45FAD82148F8D1E62291169DC10CEE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:00:17:94:b4:a5:74:39:73:63:4b:4d:a4:
                    9b:3f:52:32:0f:51:00:a6:94:a9:d2:54:02:5c:89:
                    1a:df:bd:91:05:dd:13:f6:0c:5a:43:ea:35:af:df:
                    b5:e7:ca:88:0a:1d:0b:8f:2b:a7:93:7c:f4:3b:b5:
                    73:2f:3b:83:9e:df:bb:13:22:af:63:9c:99:86:ee:
                    49:2c:69:90:10:c4:63:46:47:c4:fd:fd:75:b7:6d:
                    75:87:3f:47:0f:a1:af:2a:bd:85:4d:1e:ad:25:fb:
                    ae:ef:85:fe:ab:2a:58:38:b1:d4:62:50:f2:94:6b:
                    18:a2:e8:fe:ec:a2:cf:de:53:9d:67:1e:c9:3f:2e:
                    1b:8f:73:25:eb:bb:f2:6e:70:4d:f0:d9:b6:dc:b4:
                    16:3c:6d:d9:45:1b:34:cc:c1:bd:9b:c8:69:70:d8:
                    c0:87:bd:1d:df:9a:16:af:af:93:e0:13:fb:9c:de:
                    a8:64:be:05:68:ce:a0:d7:cf:28:14:51:c4:8c:b1:
                    62:d6:6b:12:86:e3:72:6f:cb:01:3f:08:bb:cc:55:
                    71:c0:64:b6:9b:a4:88:e9:b0:3f:2f:e0:22:b0:28:
                    54:9e:0a:7e:a4:20:d6:d7:d0:e8:12:61:3d:0f:ec:
                    81:92:03:11:c6:d3:a0:44:89:83:de:7f:f7:ed:ae:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:82:D1:1F:45:FA:D8:21:48:F8:D1:E6:22:91:16:9D:C1:0C:EE:23
            X509v3 Authority Key Identifier:
                keyid:B5:58:F6:21:98:59:A6:C7:85:E4:27:5A:BE:07:38:E5:04:D8:62:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/B558F6219859A6C785E4275ABE0738E504D862DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B558F6219859A6C785E4275ABE0738E504D862DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/323830343a323231633a3a2f33322d3438203d3e20323634353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:221c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:53:68:39:10:a0:c3:35:ff:d6:2a:02:89:7d:de:e4:46:07:
         b6:fe:e6:06:ea:a0:50:51:b9:45:f3:1c:a7:01:bf:f9:6d:ef:
         be:c2:a2:b4:15:11:04:28:85:9a:11:77:21:69:bb:f4:e3:bb:
         9e:e7:66:88:e7:e9:3f:35:5c:3e:dd:c6:39:7d:33:ea:d7:36:
         b2:d6:c2:4e:e6:fc:cf:d4:83:57:d7:f1:ac:f4:a5:74:16:a5:
         fd:55:3f:4c:6f:ee:f9:6e:0e:41:da:f3:1b:3d:f5:22:11:b2:
         06:38:13:c0:49:39:ef:6f:d0:56:f4:88:9f:c4:fb:d8:e8:05:
         6e:a5:a3:37:c7:a7:ed:63:91:44:cf:19:a8:be:f3:6e:32:71:
         50:fc:6b:52:b8:c7:87:3d:4e:25:e3:ea:80:e7:6b:46:13:58:
         d3:8c:43:ff:38:9f:e4:1b:fb:7e:b5:cb:76:ac:65:80:97:9b:
         9f:02:a1:23:74:fe:3b:9b:97:c6:3f:1d:1e:1d:2b:9b:c1:09:
         99:81:be:8a:f1:1b:1c:11:b2:bc:19:d3:5a:19:61:19:d5:db:
         74:f2:93:45:67:8c:e3:a2:00:a6:ec:d3:36:69:71:fa:5b:f6:
         59:f5:4b:61:9c:66:a3:29:ed:8b:50:89:7a:17:ff:0f:67:49:
         0b:90:0b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:15 2025 by rpki-client