Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/323830343a353666383a3a2f33332d3333203d3e20323638303335.roa
File:                     323830343a353666383a3a2f33332d3333203d3e20323638303335.roa (raw, json)
Hash identifier:          lDWNbX7eHH3FkMgjQ4MvkRfpj+jLLqC211oMNVRTY3g=
Subject key identifier:   BC:5B:D5:51:BB:22:7F:26:41:A0:7E:B7:A9:B3:48:50:87:65:9F:67
Certificate issuer:       /CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Certificate serial:       24CD86D534E96A2600D7AD737A9786EC6D93EA31
Authority key identifier: 50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/323830343a353666383a3a2f33332d3333203d3e20323638303335.roa
Signing time:             Thu 06 Mar 2025 09:45:10 +0000
ROA not before:           Thu 06 Mar 2025 09:40:10 +0000
ROA not after:            Thu 05 Mar 2026 09:45:10 +0000
asID:                     268035
IP address blocks:        2804:56f8::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cd:86:d5:34:e9:6a:26:00:d7:ad:73:7a:97:86:ec:6d:93:ea:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50489A084AA380458A19AC12E8D87EDE0CC41542
        Validity
            Not Before: Mar  6 09:40:10 2025 GMT
            Not After : Mar  5 09:45:10 2026 GMT
        Subject: CN=BC5BD551BB227F2641A07EB7A9B3485087659F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:57:94:17:51:da:ef:1d:c6:6c:a9:9b:fe:ae:
                    76:7b:9e:ab:b3:5f:46:5e:fb:d2:ac:98:d1:c4:e4:
                    8e:18:73:ee:a6:1d:26:8f:f7:b9:9d:b7:6a:b4:86:
                    8f:26:03:16:b1:c6:a7:50:6a:68:5a:a9:93:58:ee:
                    00:37:f0:8f:9b:69:fc:c5:63:71:7f:ed:66:15:ab:
                    4f:d1:d6:d1:d4:ab:2b:bc:eb:74:a6:84:28:c9:04:
                    af:3d:8e:a4:b5:97:33:bd:cb:ce:4a:ae:33:a6:6c:
                    3a:90:99:be:65:ea:7b:98:ff:f0:b8:06:1d:57:72:
                    64:08:1e:4b:2b:50:dc:48:31:30:1b:e7:48:47:f4:
                    3e:aa:a3:fb:de:bf:31:8d:b5:e6:01:9f:73:aa:4b:
                    3e:1c:cd:c0:82:6b:63:2b:41:b9:c2:ed:eb:5e:fa:
                    f2:27:81:76:f1:34:26:b9:63:ac:7b:21:38:98:c2:
                    af:24:39:ed:8f:3b:5c:e3:5c:97:a1:aa:e9:13:00:
                    cf:e7:7f:0a:15:22:38:07:2e:bf:81:ae:7b:a6:bf:
                    97:e0:14:cc:89:75:b3:44:39:ed:df:09:da:c0:37:
                    15:6d:0e:70:2a:48:00:4c:af:8c:88:39:af:38:10:
                    70:7d:3f:d1:65:ad:21:7f:e8:5a:7c:30:7d:c2:9c:
                    00:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5B:D5:51:BB:22:7F:26:41:A0:7E:B7:A9:B3:48:50:87:65:9F:67
            X509v3 Authority Key Identifier:
                keyid:50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/323830343a353666383a3a2f33332d3333203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f8::/33

    Signature Algorithm: sha256WithRSAEncryption
         a5:5a:57:08:f5:9f:75:5b:03:57:2e:a4:d7:ba:d9:85:8f:95:
         a2:5a:c5:79:32:a1:59:1e:05:35:8d:8a:fa:7f:75:47:c5:51:
         36:87:45:94:59:ce:50:ed:fd:c7:bc:d5:82:7c:8c:d7:32:68:
         23:4b:42:f0:c6:8b:54:42:57:96:7f:7d:da:bd:d9:4a:5c:78:
         e3:22:4a:0d:f6:12:2c:35:c0:53:65:cb:a7:08:ed:9f:0b:d8:
         c2:1c:27:be:f9:6b:12:44:c3:b8:20:63:95:1b:32:d0:07:fb:
         6d:2b:1b:cd:b2:3b:9e:71:d9:d5:7a:0d:4e:05:65:72:2f:46:
         3a:fe:9e:9d:c9:b0:8d:ca:c1:8e:35:2b:1a:60:4a:22:a0:02:
         83:43:8c:73:00:ae:69:d8:95:a3:c2:54:ce:1e:b1:28:5a:1f:
         9b:69:88:10:a9:98:da:cb:20:87:88:20:cc:b7:c9:82:06:af:
         c1:b7:58:a4:47:ee:65:37:7d:dc:a9:74:50:19:36:32:4e:6e:
         2c:85:22:24:f4:66:3f:06:b3:a4:58:28:9f:05:1c:45:0d:3c:
         89:3b:ad:2c:3a:e1:10:4f:2a:00:d2:e5:7d:e7:5a:f9:0e:31:
         53:a8:0c:12:8e:c7:a4:f6:19:ac:10:bc:9e:5b:62:e5:0a:cf:
         c9:c0:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:10:52 2025 by rpki-client