Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/323830343a356330383a3a2f33322d313238203d3e203532353438.roa
File:                     323830343a356330383a3a2f33322d313238203d3e203532353438.roa (raw, json)
Hash identifier:          nZaUNZfA7IvQhzUrnvIfFpF4HKQDhV7oPPW0BakvoLo=
Subject key identifier:   D6:C3:DB:BA:FF:1A:91:BF:54:90:0D:B2:A6:4D:F2:48:F2:0F:5F:1E
Certificate issuer:       /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial:       0678EBCA48E22A14064640A10D42366028F97394
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/323830343a356330383a3a2f33322d313238203d3e203532353438.roa
Signing time:             Tue 25 Jul 2023 21:15:36 +0000
ROA not before:           Tue 25 Jul 2023 21:10:36 +0000
ROA not after:            Tue 23 Jul 2024 21:15:36 +0000
asID:                     52548
IP address blocks:        2804:5c08::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:78:eb:ca:48:e2:2a:14:06:46:40:a1:0d:42:36:60:28:f9:73:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
        Validity
            Not Before: Jul 25 21:10:36 2023 GMT
            Not After : Jul 23 21:15:36 2024 GMT
        Subject: CN=D6C3DBBAFF1A91BF54900DB2A64DF248F20F5F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:2e:b5:78:48:94:4a:17:76:97:b1:ef:09:
                    2a:83:1b:7e:1d:8a:bc:b5:c4:c4:7f:84:1a:23:11:
                    08:f8:70:56:05:9b:3d:c9:30:51:05:0b:c1:cf:8d:
                    9f:74:5f:47:4e:56:b1:8b:ee:fd:6e:16:66:4a:7d:
                    3a:5c:b2:9b:45:61:f6:89:62:5a:5f:25:a3:6f:f1:
                    1a:68:d1:76:9d:c9:e5:15:cb:1b:6b:5c:b6:38:d0:
                    56:1b:2d:d1:0c:5b:b8:cd:ca:23:fd:2e:f7:6a:3c:
                    26:4d:06:47:18:d8:a3:f3:b9:e6:db:03:20:69:f7:
                    ac:5d:f4:f9:2a:0a:cb:09:78:41:15:55:50:7a:34:
                    c6:6a:5f:40:d4:08:68:34:c8:60:06:f7:65:c3:27:
                    ad:0c:e6:c6:e1:ef:2c:03:c3:48:9a:7a:79:37:4d:
                    ee:23:54:04:12:89:53:3a:ab:38:d7:98:25:b3:f5:
                    b7:9d:33:a2:d3:2d:0b:d9:01:7a:fe:2e:56:90:e0:
                    61:d5:7f:3e:da:b4:92:f3:2b:40:94:7f:9e:dd:06:
                    41:0b:a6:f0:09:5f:5e:bb:dd:c9:7b:c2:0d:e0:f1:
                    8a:9d:f2:f6:93:9c:2f:07:da:c6:a4:ed:a5:9b:0f:
                    7a:c9:3f:5e:a3:c6:99:6c:33:52:03:b5:41:6a:bf:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:DB:BA:FF:1A:91:BF:54:90:0D:B2:A6:4D:F2:48:F2:0F:5F:1E
            X509v3 Authority Key Identifier:
                keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/323830343a356330383a3a2f33322d313238203d3e203532353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c08::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:02:1f:2f:1a:21:01:7b:67:93:b2:e1:d4:e6:d7:83:14:03:
         2b:f8:0f:ba:b5:4c:dc:37:83:41:a7:3b:97:59:59:5c:4d:07:
         03:5e:07:c1:6d:4d:29:83:0e:da:e9:22:7a:bc:3d:ca:29:33:
         95:c9:c1:4d:c9:dc:65:bf:c7:1d:c5:f8:87:c7:e2:4a:5d:43:
         70:2a:66:c5:71:61:eb:2e:a4:5b:7a:e8:37:43:0f:1a:f3:84:
         d2:5c:05:dd:08:d4:ab:9c:fa:ce:e4:bb:17:8a:c0:ad:df:2a:
         e7:2a:8a:42:4c:a7:ac:7f:71:6e:bf:d8:4f:1d:4a:46:da:1b:
         97:94:5c:82:ca:dc:6c:f1:bd:ea:4f:c2:7a:86:cf:52:d3:b4:
         6a:41:a6:57:0b:f9:1b:d7:bb:69:c5:36:c0:a6:79:d6:5d:be:
         b4:32:1c:e7:b9:e6:59:a5:b0:47:23:a3:78:b7:5a:47:4d:42:
         e5:0a:1d:d9:57:ba:72:40:e7:53:e7:96:9c:ab:2b:e4:2a:60:
         41:ba:03:f1:7a:fd:ed:1a:53:aa:3d:0c:81:de:8d:60:d6:c0:
         76:ed:3d:d6:e3:fd:a9:86:f3:65:c8:c3:05:7b:0a:80:b9:22:
         15:f0:da:b8:8b:1c:be:4d:85:3b:0f:db:bd:bd:8a:f9:39:0c:
         8d:66:fc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:28:05 2025 by rpki-client