Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/323830343a346535303a3a2f33322d3332203d3e20323638323533.roa
File:                     323830343a346535303a3a2f33322d3332203d3e20323638323533.roa (raw, json)
Hash identifier:          JH3yOBTWsvBUCvOGw2UPxIjkMerpc54+TEGtc8tMcKU=
Subject key identifier:   C0:3C:A4:33:A5:8B:D8:29:F0:0B:D7:6E:31:3E:A6:E0:5E:9F:BF:A3
Certificate issuer:       /CN=5554B6ED4969AC940F590D2A6010C4406D254087
Certificate serial:       053FB5E046419B11A02BF763DDD12671BE1E7E3F
Authority key identifier: 55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/323830343a346535303a3a2f33322d3332203d3e20323638323533.roa
Signing time:             Thu 09 Jan 2025 17:47:10 +0000
ROA not before:           Thu 09 Jan 2025 17:42:10 +0000
ROA not after:            Thu 08 Jan 2026 17:47:10 +0000
asID:                     268253
IP address blocks:        2804:4e50::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3f:b5:e0:46:41:9b:11:a0:2b:f7:63:dd:d1:26:71:be:1e:7e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5554B6ED4969AC940F590D2A6010C4406D254087
        Validity
            Not Before: Jan  9 17:42:10 2025 GMT
            Not After : Jan  8 17:47:10 2026 GMT
        Subject: CN=C03CA433A58BD829F00BD76E313EA6E05E9FBFA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:f3:c3:f2:7c:12:a4:20:2b:42:b5:ee:86:
                    87:89:04:39:e7:5b:61:8a:71:86:2f:7f:c0:73:bb:
                    be:a3:16:34:fa:5b:ef:85:d3:f7:3b:90:ea:59:31:
                    50:4d:11:31:b8:38:c5:60:df:b6:a9:0a:29:0a:91:
                    a4:a8:8b:a5:06:b2:f0:69:6b:c9:7f:50:81:2b:05:
                    d1:2b:89:54:7e:0b:41:68:d1:d5:68:b1:3c:e0:f1:
                    5d:c6:37:c2:0c:30:af:81:79:5c:1e:1d:06:8a:85:
                    65:9b:88:cb:83:14:d1:0a:85:41:8b:63:61:b3:b9:
                    82:f1:96:4c:7c:29:b3:5f:8b:d4:e6:d7:38:d2:86:
                    a1:32:8d:74:b6:ba:e3:9a:68:cd:3a:7e:42:70:e7:
                    2d:e0:e5:67:98:3f:cc:56:73:08:68:26:f5:9e:3e:
                    46:5a:52:3b:d7:36:6f:45:fa:a5:79:cb:82:a8:04:
                    7f:51:75:5e:e8:43:25:1f:46:97:e1:b6:f4:20:0f:
                    5c:4c:6f:e8:ca:4c:5b:29:d3:25:7f:0a:70:48:ac:
                    d6:8b:6f:b1:32:44:19:01:ab:21:4b:7c:59:50:bb:
                    e2:57:1f:37:9c:2f:71:ae:0d:89:bc:96:8a:e3:f3:
                    ae:f9:c8:ea:95:63:1c:fe:79:f6:7e:1f:fc:49:d5:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:A4:33:A5:8B:D8:29:F0:0B:D7:6E:31:3E:A6:E0:5E:9F:BF:A3
            X509v3 Authority Key Identifier:
                keyid:55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/5554B6ED4969AC940F590D2A6010C4406D254087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/323830343a346535303a3a2f33322d3332203d3e20323638323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         ee:51:11:1b:ba:ce:bb:11:1d:d7:b9:dc:d7:d6:27:66:6b:19:
         a4:a4:ba:98:78:53:9c:d1:c1:b2:3f:02:09:77:3f:97:d9:ea:
         72:58:ad:13:db:75:86:37:1a:62:69:dc:1f:14:0c:40:75:23:
         c7:e0:3c:80:55:ec:5c:fa:2e:af:3c:58:32:64:56:61:7e:5e:
         9a:57:ce:15:41:16:18:da:8d:6d:b7:3f:34:c6:9c:2d:ef:53:
         cb:81:77:4e:5f:70:49:f3:af:81:42:a1:eb:b1:5a:2d:69:c8:
         2a:c6:84:ee:88:5c:7a:e3:df:0e:72:3b:43:29:a3:f1:0e:81:
         e8:2b:5b:15:35:eb:6c:65:e0:16:88:ab:4d:8c:96:6f:c4:84:
         05:81:c8:c9:1a:44:bb:11:c4:ac:c8:99:0b:01:08:a4:29:1a:
         92:8a:ff:32:50:bf:65:4b:ab:8e:1b:e8:d5:08:cb:89:93:88:
         95:80:99:33:e1:c7:0d:6c:f2:b7:14:45:39:7f:35:0c:25:d1:
         fb:b1:54:a4:33:a2:b9:17:08:0c:ae:c7:5f:89:84:8f:44:03:
         fe:8e:49:55:5a:43:9d:cf:c5:4f:51:9c:b2:66:b2:d2:6e:9e:
         53:7b:3a:eb:7d:da:57:9f:73:cf:ba:32:54:3f:eb:57:f4:73:
         74:21:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:10 2025 by rpki-client