Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a616238343a3a2f34362d3436203d3e20323635333030.roa
File:                     323830343a326462633a616238343a3a2f34362d3436203d3e20323635333030.roa (raw, json)
Hash identifier:          3gxqK/CiKsudw/gSN9Y1zZzBTP3gkDbwVsyh4+gPjlc=
Subject key identifier:   50:11:BE:50:1B:2C:4D:6A:F0:8D:C1:85:2B:1F:71:E1:A3:5D:FC:42
Certificate issuer:       /CN=5A7B8F6ACB4C2BFE189873A094E11EF7A1925CFD
Certificate serial:       500CF6A64765B9999C670FC66785F50DDD0EC983
Authority key identifier: 5A:7B:8F:6A:CB:4C:2B:FE:18:98:73:A0:94:E1:1E:F7:A1:92:5C:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A7B8F6ACB4C2BFE189873A094E11EF7A1925CFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a616238343a3a2f34362d3436203d3e20323635333030.roa
Signing time:             Mon 13 Feb 2023 16:09:32 +0000
ROA not before:           Mon 13 Feb 2023 16:04:32 +0000
ROA not after:            Mon 12 Feb 2024 16:09:32 +0000
asID:                     265300
IP address blocks:        2804:2dbc:ab84::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0c:f6:a6:47:65:b9:99:9c:67:0f:c6:67:85:f5:0d:dd:0e:c9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A7B8F6ACB4C2BFE189873A094E11EF7A1925CFD
        Validity
            Not Before: Feb 13 16:04:32 2023 GMT
            Not After : Feb 12 16:09:32 2024 GMT
        Subject: CN=5011BE501B2C4D6AF08DC1852B1F71E1A35DFC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:04:51:b2:83:c8:a3:97:b7:29:1a:00:45:
                    18:5f:9e:f3:7b:c5:47:bf:81:e6:2c:8b:0f:77:e6:
                    e2:58:a0:72:0e:b9:e2:39:99:11:2f:e0:a7:d3:a7:
                    2f:b1:55:92:b9:da:92:b4:c1:ed:6d:2a:00:08:3e:
                    66:5f:ff:1f:c5:72:24:0e:e7:2c:82:f5:28:f3:6c:
                    3f:db:72:45:39:9e:63:dc:02:36:d6:8f:c8:28:dc:
                    db:8c:1d:70:73:7d:69:61:f8:cc:4c:24:62:65:ff:
                    86:d9:9e:b1:41:9f:bd:ec:23:93:86:b8:08:b3:a5:
                    41:5e:94:e8:29:8f:ad:c9:b2:2d:29:47:9c:c0:b6:
                    93:5e:e3:30:81:83:5b:88:05:0b:a8:2c:48:ef:e0:
                    d1:c3:c5:80:e9:33:9a:ec:d2:d5:68:08:b0:04:6d:
                    1c:35:8e:3a:09:19:17:67:25:a4:67:1b:3b:fa:a4:
                    42:1c:6b:0b:7d:3d:c3:3f:4e:10:c0:15:5c:85:ed:
                    c2:76:fd:26:a8:1c:d5:7a:66:ce:60:4e:b4:47:a5:
                    e0:e0:a7:6b:e4:65:07:cb:8e:92:d1:2b:af:85:bf:
                    cc:1d:59:f0:4f:e5:d6:46:a4:12:b6:87:5d:dd:6a:
                    ca:3b:a6:5f:3c:54:2e:c6:58:04:6d:ad:c0:78:4e:
                    58:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:11:BE:50:1B:2C:4D:6A:F0:8D:C1:85:2B:1F:71:E1:A3:5D:FC:42
            X509v3 Authority Key Identifier:
                keyid:5A:7B:8F:6A:CB:4C:2B:FE:18:98:73:A0:94:E1:1E:F7:A1:92:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/5A7B8F6ACB4C2BFE189873A094E11EF7A1925CFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A7B8F6ACB4C2BFE189873A094E11EF7A1925CFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a616238343a3a2f34362d3436203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:ab84::/46

    Signature Algorithm: sha256WithRSAEncryption
         6d:72:80:ef:ec:3e:5e:0f:30:e1:a9:6c:8a:e7:8f:d7:f3:48:
         2f:c0:b5:62:bf:c8:24:eb:d3:98:67:0f:a3:8e:13:75:a2:b7:
         e0:6a:60:78:57:8c:fa:d8:ae:c8:fd:d0:fe:2f:26:65:83:aa:
         44:9b:56:15:6b:43:d2:54:4f:bb:7c:b6:6b:f8:34:5e:a9:fa:
         f6:95:7c:46:e0:c8:44:d3:47:0b:27:39:df:f3:26:8e:25:51:
         03:0d:e4:3d:9f:db:1f:c3:5d:77:12:2e:f9:a3:62:a8:a1:0b:
         2f:05:e5:dc:de:95:d0:be:67:31:18:83:6b:83:49:50:08:7c:
         0a:73:b0:df:ad:d4:3d:45:47:4e:b3:13:c2:e7:cd:49:23:65:
         0e:aa:b7:1e:27:a2:ba:ca:65:97:06:46:7c:f7:f6:85:24:33:
         35:65:54:0d:9f:6d:d9:e4:b6:a2:6e:58:13:8b:e4:6f:5b:63:
         94:3d:67:ff:65:bf:f3:61:86:d6:7c:08:3d:c5:26:55:80:be:
         ca:77:6b:4d:d2:ce:4a:87:cb:76:f9:0e:a6:a7:d7:72:99:82:
         9a:ec:04:f0:a3:f9:5f:4d:9d:e9:21:90:a0:8d:65:33:de:a6:
         f2:b9:44:47:a4:d1:b1:7d:f5:44:1f:e6:f2:e9:d5:d0:1e:3a:
         30:1d:80:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:56 2025 by rpki-client