Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/323830343a336264633a3a2f33322d3332203d3e20323636313736.roa
File:                     323830343a336264633a3a2f33322d3332203d3e20323636313736.roa (raw, json)
Hash identifier:          8rpnqxeC3++T4VjJFQTes6DPr9ajm+aUInqDRYfgXG0=
Subject key identifier:   EC:B1:2F:AD:5C:75:D5:79:40:8C:DF:6C:1C:9C:C6:AC:1D:2C:3E:80
Certificate issuer:       /CN=EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4
Certificate serial:       48604D789584FBEE4FB3229D25428DBD9817181F
Authority key identifier: EB:CA:DF:4D:05:92:A8:CD:01:31:D2:F6:8C:FD:77:41:56:6B:7F:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/323830343a336264633a3a2f33322d3332203d3e20323636313736.roa
Signing time:             Fri 07 Mar 2025 01:33:57 +0000
ROA not before:           Fri 07 Mar 2025 01:28:57 +0000
ROA not after:            Fri 06 Mar 2026 01:33:57 +0000
asID:                     266176
IP address blocks:        2804:3bdc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:60:4d:78:95:84:fb:ee:4f:b3:22:9d:25:42:8d:bd:98:17:18:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4
        Validity
            Not Before: Mar  7 01:28:57 2025 GMT
            Not After : Mar  6 01:33:57 2026 GMT
        Subject: CN=ECB12FAD5C75D579408CDF6C1C9CC6AC1D2C3E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:3a:de:85:5e:c8:5e:0b:3d:77:a5:a8:05:
                    a9:14:63:c0:3f:61:a9:78:2c:dd:14:e1:9c:ce:76:
                    55:b6:5f:23:8d:80:c6:4a:31:d2:91:ff:cf:d6:1c:
                    af:0c:0e:85:da:4a:f5:e7:e6:f5:dd:f0:d5:d3:a9:
                    49:1f:92:f7:29:53:69:92:f2:44:4a:99:95:42:dd:
                    41:f3:07:f8:68:84:8e:e6:f9:cf:d9:23:f0:ee:51:
                    d5:d2:2a:ff:a4:df:ba:27:e9:ca:d9:74:58:48:51:
                    c9:20:ef:47:a0:11:ab:20:01:fc:06:7d:10:e7:b6:
                    e8:24:f6:49:bd:1e:33:92:ef:79:f8:2e:44:a2:0e:
                    8e:7d:f3:3a:46:9f:cb:31:38:23:32:2c:19:c9:c1:
                    73:e9:02:67:47:53:f2:50:25:b6:c4:65:3a:c3:2a:
                    59:e8:df:2c:5f:b7:69:04:cd:28:d6:55:6f:10:c3:
                    4d:88:84:47:b8:5d:47:78:36:96:7f:be:75:6e:05:
                    08:c8:59:fa:f5:90:eb:32:d3:8c:57:7b:2b:da:7f:
                    50:80:dc:89:db:c9:15:ce:50:70:c0:c4:aa:60:4c:
                    26:38:4f:3c:ba:4e:9e:37:8a:e9:4d:3b:8e:d4:84:
                    87:d4:34:6e:f8:a7:9b:ab:4a:bf:be:73:10:47:02:
                    9b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B1:2F:AD:5C:75:D5:79:40:8C:DF:6C:1C:9C:C6:AC:1D:2C:3E:80
            X509v3 Authority Key Identifier:
                keyid:EB:CA:DF:4D:05:92:A8:CD:01:31:D2:F6:8C:FD:77:41:56:6B:7F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/323830343a336264633a3a2f33322d3332203d3e20323636313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:ba:d9:5c:36:35:87:bd:14:df:6d:aa:80:cf:a9:13:b2:0e:
         58:77:bf:08:88:41:47:6a:70:49:b2:e2:5d:e7:e5:9e:24:62:
         90:32:20:96:ca:3c:ba:a8:63:8c:4f:82:34:82:6e:c8:ac:59:
         02:b9:81:77:78:64:36:91:c1:65:9f:d2:45:5d:51:52:e0:66:
         e6:09:43:13:60:2f:eb:2a:35:2b:70:d6:bf:bf:d2:1b:ae:ba:
         55:c4:d4:f1:b9:18:1d:72:7b:31:b0:d8:c2:c4:f1:3a:32:64:
         da:d7:d9:6d:dd:57:4d:86:aa:77:99:b6:bc:43:44:7f:64:e5:
         f2:8c:68:52:c8:c1:fb:ff:14:c2:2f:f4:3a:c6:ef:c9:cb:ef:
         00:ae:a9:51:17:f3:fa:b8:61:fc:b5:44:60:4f:cd:f8:6a:35:
         a9:88:d8:24:b6:21:c3:54:7d:92:54:4a:cb:02:9c:c8:ca:b4:
         14:72:a9:19:21:c9:88:95:37:1f:1a:12:61:71:e1:08:7e:e9:
         33:64:5e:03:f6:5a:82:84:cc:c0:79:13:e7:03:43:bc:5d:86:
         1a:9a:3f:39:d1:4d:a5:e4:4b:5d:92:6d:8c:75:76:2d:05:b1:
         63:9d:fc:35:22:58:ec:7d:ee:7c:67:f6:9c:49:50:9a:3e:3c:
         98:33:8c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:26:27 2025 by rpki-client