Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/323830343a313035383a3a2f33322d3438203d3e20323632393838.roa
File:                     323830343a313035383a3a2f33322d3438203d3e20323632393838.roa (raw, json)
Hash identifier:          RSo2oIl0293idsQ+jL3HVAEjiAQDsbdC4GCzfueocJI=
Subject key identifier:   39:8D:F4:5A:ED:93:6D:A1:4A:B3:84:01:65:87:9E:35:49:AF:13:6C
Certificate issuer:       /CN=487B20F12620C5E9D730F5695742A51F620AE3FB
Certificate serial:       465B875D337CEB89F7537D3DD41B16EDB6018771
Authority key identifier: 48:7B:20:F1:26:20:C5:E9:D7:30:F5:69:57:42:A5:1F:62:0A:E3:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/487B20F12620C5E9D730F5695742A51F620AE3FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/323830343a313035383a3a2f33322d3438203d3e20323632393838.roa
Signing time:             Wed 01 Nov 2023 14:43:01 +0000
ROA not before:           Wed 01 Nov 2023 14:38:01 +0000
ROA not after:            Wed 30 Oct 2024 14:43:01 +0000
asID:                     262988
IP address blocks:        2804:1058::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5b:87:5d:33:7c:eb:89:f7:53:7d:3d:d4:1b:16:ed:b6:01:87:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487B20F12620C5E9D730F5695742A51F620AE3FB
        Validity
            Not Before: Nov  1 14:38:01 2023 GMT
            Not After : Oct 30 14:43:01 2024 GMT
        Subject: CN=398DF45AED936DA14AB3840165879E3549AF136C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ea:c9:e8:03:92:95:a3:53:c6:eb:5e:7b:4f:
                    15:68:f3:9d:16:42:c7:6f:b5:85:71:e6:91:7f:c8:
                    6e:ed:de:fb:94:ef:73:cc:c0:76:58:84:73:d1:bc:
                    af:cf:68:26:19:b8:80:99:f8:eb:97:c0:e2:67:29:
                    88:21:b8:4d:e5:2c:68:b4:15:43:71:8c:0d:cc:92:
                    82:6b:87:ca:e7:ec:e7:25:df:12:c7:25:ff:44:22:
                    fa:6e:8d:12:7a:d0:cb:91:b4:88:84:92:ff:8a:b2:
                    44:1b:13:81:b5:ef:4a:d1:eb:ff:b4:4d:ad:ca:59:
                    17:11:a9:91:b8:b9:a0:18:27:eb:cb:d2:86:20:63:
                    4b:5c:bd:e4:d7:68:0b:d5:3c:12:b7:47:96:06:a9:
                    cc:3b:65:9b:3b:d0:4b:f7:5f:41:05:b9:a7:f5:3e:
                    fd:1c:8d:8f:e4:df:dd:3f:d4:c3:70:ef:e6:8b:d4:
                    01:2c:cb:01:e2:c3:01:dd:d6:db:a6:90:69:6d:f1:
                    de:01:55:88:90:8f:fd:fd:79:4c:22:06:d9:85:cd:
                    c6:ce:31:5b:7c:b6:82:aa:db:59:93:39:98:66:2e:
                    02:36:07:dc:fa:ad:79:99:1c:08:45:5e:93:8c:99:
                    41:7b:e4:91:25:1a:f1:fd:ff:93:6c:b5:79:2e:79:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:F4:5A:ED:93:6D:A1:4A:B3:84:01:65:87:9E:35:49:AF:13:6C
            X509v3 Authority Key Identifier:
                keyid:48:7B:20:F1:26:20:C5:E9:D7:30:F5:69:57:42:A5:1F:62:0A:E3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/487B20F12620C5E9D730F5695742A51F620AE3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/487B20F12620C5E9D730F5695742A51F620AE3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/323830343a313035383a3a2f33322d3438203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1058::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:29:54:34:2f:ec:a2:b4:1b:02:8b:d0:b8:4c:d7:11:86:90:
         14:ed:ba:30:cb:05:d9:8e:15:20:61:2f:90:cd:42:04:33:10:
         2b:38:55:5b:cc:34:7e:f8:4a:c8:5f:ed:ab:e7:6d:7b:44:45:
         ec:a2:38:f1:22:f5:b2:06:69:3f:24:69:dd:8e:e5:f7:c7:a3:
         ea:f7:39:23:27:76:28:f6:26:80:29:56:0d:cb:0b:65:ab:72:
         e7:29:95:19:e0:1f:1d:a8:3c:4f:a0:36:c6:d1:d1:13:86:51:
         1d:1a:95:ab:04:32:39:9a:68:b2:cf:c0:7c:6e:05:c6:4e:79:
         86:88:f0:87:87:2f:0b:04:24:78:28:09:55:9c:5e:8e:6b:52:
         35:ca:dc:48:62:39:26:b0:fb:72:ad:24:98:94:75:41:9d:3b:
         7a:bd:bf:25:d4:83:de:91:7d:2a:a2:eb:95:5a:09:4a:7e:93:
         ef:aa:58:db:79:c6:7a:8f:61:63:5c:01:b3:f9:15:8f:f4:ea:
         18:10:d8:ec:89:f0:49:32:5d:40:51:75:0b:71:6a:c9:45:a0:
         85:15:5e:20:c0:1a:c6:77:bc:dc:9b:ea:21:e7:11:31:bd:4a:
         28:a9:98:eb:1d:1d:bf:98:df:0d:47:68:30:dd:3a:29:19:e2:
         9d:c0:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:38:03 2025 by rpki-client