Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/323830343a313035383a3a2f33332d3333203d3e20323632393838.roa
File:                     323830343a313035383a3a2f33332d3333203d3e20323632393838.roa (raw, json)
Hash identifier:          NmgivqNboJ0AOKHDMPqL/xTpQbLuYWzmqQTGW+BCs/4=
Subject key identifier:   67:FA:B9:A2:5A:D9:E2:16:34:5E:19:DA:15:4C:F3:72:B7:DE:31:0C
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       5257441A3F4A3B07448CB681CB11EB8B03B1EC9D
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/323830343a313035383a3a2f33332d3333203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 17:37:15 +0000
ROA not before:           Mon 15 Jul 2024 17:32:15 +0000
ROA not after:            Mon 14 Jul 2025 17:37:15 +0000
asID:                     262988
IP address blocks:        2804:1058::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:57:44:1a:3f:4a:3b:07:44:8c:b6:81:cb:11:eb:8b:03:b1:ec:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 17:32:15 2024 GMT
            Not After : Jul 14 17:37:15 2025 GMT
        Subject: CN=67FAB9A25AD9E216345E19DA154CF372B7DE310C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:2b:8b:9f:42:83:5d:4a:91:34:0f:a9:b4:
                    83:cf:42:9d:84:5b:ad:91:35:84:f5:08:26:d7:3a:
                    5d:c3:d9:b8:1d:3e:5a:62:7a:c8:06:e1:c0:63:63:
                    03:56:da:32:56:85:a0:5d:5a:37:8b:e6:36:37:db:
                    08:ca:0e:a7:1c:0e:fb:de:d5:1c:c7:94:a6:ff:89:
                    95:20:47:a0:55:23:0c:d4:11:22:7d:0a:11:c0:e3:
                    fd:00:c6:e0:20:30:c7:11:75:18:21:f7:dc:96:48:
                    3b:26:12:cb:80:46:5c:b5:83:f7:bf:e9:7d:fb:4b:
                    10:ab:df:87:48:a4:92:e8:57:c4:f7:7f:79:12:cc:
                    e0:fa:45:f5:48:48:80:d8:2b:9c:ca:ce:da:48:04:
                    aa:46:3e:89:df:f1:97:11:34:c1:88:67:d1:e3:ee:
                    de:55:86:cb:a3:f6:22:93:ed:99:0e:b5:9b:da:11:
                    e7:e7:6a:42:ab:2d:5e:69:fd:60:d7:17:2b:58:bc:
                    c6:b2:82:a5:5f:8a:c7:f0:3c:cc:bc:aa:7d:b5:43:
                    73:63:7b:47:28:51:15:ce:cb:52:a3:e1:74:6d:6a:
                    ce:8c:61:bd:f4:59:0f:a9:61:b6:e7:94:90:d2:ac:
                    c2:2f:9c:7d:52:84:ae:7c:6d:30:0f:d5:33:0b:a1:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FA:B9:A2:5A:D9:E2:16:34:5E:19:DA:15:4C:F3:72:B7:DE:31:0C
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/323830343a313035383a3a2f33332d3333203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1058::/33

    Signature Algorithm: sha256WithRSAEncryption
         1c:66:f6:ed:79:dc:18:78:73:50:e4:4a:74:8a:16:46:93:ea:
         6d:20:8c:2e:66:82:a7:e5:24:de:51:16:f0:4a:a7:7e:aa:d0:
         ef:53:a6:af:ca:77:ad:bb:6d:77:48:03:a8:82:ad:82:ee:44:
         4e:1a:31:7f:b0:5e:9f:b7:4f:87:ab:59:e4:6d:af:3b:fe:3e:
         82:3c:c2:23:28:f3:41:fb:0d:66:d1:f0:51:dc:ca:b3:f4:d0:
         f2:ec:8a:49:1a:0a:5f:87:a7:a7:fb:d5:88:45:e8:6d:58:73:
         29:22:f1:ad:fc:e6:92:4d:28:78:89:a3:87:e4:40:e0:cf:23:
         4d:a8:52:7f:70:ff:ed:56:14:00:d3:e3:77:f5:7d:02:f5:3c:
         fb:32:98:91:e1:dd:56:21:1f:07:6f:97:5c:5c:70:ca:a3:4a:
         80:ca:67:23:9c:0b:dd:c1:7a:41:6c:35:19:35:a5:7f:26:71:
         5d:7d:35:e6:ff:89:20:fa:fc:f6:74:57:8f:1e:c4:89:2b:ca:
         0f:aa:fe:e2:2d:d0:13:df:fd:f3:12:db:d5:7a:ce:8d:b8:04:
         ce:8c:1a:0c:6e:39:37:91:b0:61:04:cf:3c:9f:05:62:57:e5:
         7c:3a:dc:4d:db:66:3b:05:1b:d6:b0:cc:a7:42:3a:f2:61:86:
         29:2e:1f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:51 2025 by rpki-client