Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/323830343a353531303a3a2f33322d3438203d3e20323638363837.roa
File:                     323830343a353531303a3a2f33322d3438203d3e20323638363837.roa (raw, json)
Hash identifier:          4yxOO+mXuqpqtbsDEfgAfi/jW6HGEIWJ4efmy2SI5Hs=
Subject key identifier:   C4:05:D6:89:34:C1:60:21:2B:E7:B3:3E:6A:CA:1F:A2:5A:A8:87:73
Certificate issuer:       /CN=5E1114F349B885222E5B551B7066E55CEE43A516
Certificate serial:       79193B2BF5D67A221A42D06BC6F026A0F8D053C5
Authority key identifier: 5E:11:14:F3:49:B8:85:22:2E:5B:55:1B:70:66:E5:5C:EE:43:A5:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E1114F349B885222E5B551B7066E55CEE43A516.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/323830343a353531303a3a2f33322d3438203d3e20323638363837.roa
Signing time:             Thu 06 Mar 2025 21:55:49 +0000
ROA not before:           Thu 06 Mar 2025 21:50:49 +0000
ROA not after:            Thu 05 Mar 2026 21:55:49 +0000
asID:                     268687
IP address blocks:        2804:5510::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:19:3b:2b:f5:d6:7a:22:1a:42:d0:6b:c6:f0:26:a0:f8:d0:53:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E1114F349B885222E5B551B7066E55CEE43A516
        Validity
            Not Before: Mar  6 21:50:49 2025 GMT
            Not After : Mar  5 21:55:49 2026 GMT
        Subject: CN=C405D68934C160212BE7B33E6ACA1FA25AA88773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:5f:5b:5b:c5:01:2e:a3:a4:b5:b4:70:ca:
                    3e:f4:ce:c8:df:ef:f4:be:cd:cf:9f:95:0f:b7:46:
                    f1:6e:e2:f7:20:71:49:19:a9:8c:c7:13:09:c8:34:
                    31:06:69:22:dc:3c:82:39:c8:d6:44:c0:34:a2:78:
                    17:72:a3:a7:76:96:b6:ba:31:7f:e2:4b:18:14:32:
                    0a:00:6b:e0:4e:7f:b8:31:2f:a6:65:52:17:e7:00:
                    b1:b0:e1:67:ac:a5:0f:52:f8:bd:85:79:59:e9:c1:
                    54:c9:32:aa:a8:b3:ba:ab:1b:15:9e:24:ff:81:10:
                    dd:d0:35:67:3c:e1:dd:9e:db:5b:d3:ef:e5:1a:c9:
                    9a:13:3e:48:de:67:73:cd:33:9e:01:7d:27:82:4b:
                    66:47:23:8a:71:ff:d4:da:12:b1:9b:76:c3:34:64:
                    f5:cd:fa:68:80:de:6e:88:5f:6b:bd:66:0b:85:92:
                    66:4a:70:e7:d0:c3:0f:1b:e8:56:5e:d3:8c:e2:a1:
                    3a:9b:e1:d0:89:4b:4c:f8:1f:52:e3:89:04:2a:3b:
                    e0:fa:66:e0:f6:ab:69:c7:d4:4b:6f:6e:ff:88:d9:
                    c7:84:61:31:b4:06:fc:35:1d:ac:f3:3d:3d:7c:dd:
                    9b:23:9a:94:7d:3a:23:ad:1d:29:f7:ab:73:f4:e3:
                    47:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:05:D6:89:34:C1:60:21:2B:E7:B3:3E:6A:CA:1F:A2:5A:A8:87:73
            X509v3 Authority Key Identifier:
                keyid:5E:11:14:F3:49:B8:85:22:2E:5B:55:1B:70:66:E5:5C:EE:43:A5:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/5E1114F349B885222E5B551B7066E55CEE43A516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E1114F349B885222E5B551B7066E55CEE43A516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/323830343a353531303a3a2f33322d3438203d3e20323638363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5510::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:95:ac:bc:43:8e:49:e3:dc:ea:9c:43:ed:29:ab:17:87:e0:
         d5:f6:7d:f0:ff:62:d9:3b:8a:1f:a9:25:08:cf:0f:30:d4:da:
         45:ad:aa:03:20:7e:04:f1:22:3b:94:ce:cb:58:48:30:f7:2e:
         71:5f:43:96:03:2c:7d:df:03:a0:30:e0:93:0f:f7:95:0f:82:
         99:41:b7:a6:7e:18:e9:2e:c0:45:37:f7:76:2c:ec:be:1e:09:
         85:3a:72:35:7f:39:ef:e4:a7:d5:9f:06:c1:08:c2:59:58:d5:
         54:90:07:aa:86:4f:53:f2:3b:69:f1:53:8e:25:36:cd:af:fd:
         68:cc:60:8c:73:82:d9:a6:27:0e:fd:bf:50:8c:37:6b:6d:b3:
         4a:66:27:c0:2f:7d:38:cf:26:c0:2d:05:7a:ed:ab:f9:fc:06:
         00:30:af:f4:29:17:0a:02:50:7e:39:4d:cb:2d:f7:d7:74:f5:
         64:d7:66:2c:d8:9b:a9:1b:86:a5:8c:f6:2b:b7:a8:b0:2b:af:
         8f:bd:51:8b:9f:a4:16:be:84:1e:7d:3d:49:3e:6f:84:3d:ad:
         d0:96:83:02:76:a1:11:d7:87:bd:6e:d2:a4:d3:e4:b1:47:11:
         c0:9a:d1:37:a3:e8:fb:03:d3:bd:59:29:1b:4c:6d:9f:ae:00:
         e0:92:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:00:25 2025 by rpki-client