Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/323830343a6636633a3a2f33322d3438203d3e20323633303039.roa
File:                     323830343a6636633a3a2f33322d3438203d3e20323633303039.roa (raw, json)
Hash identifier:          HC7hDClMjGdPJZT2m0V2RfBOrT0aKMGPvBftegbhDDY=
Subject key identifier:   1D:CA:27:8B:DF:8F:6C:77:CD:6E:DF:98:C1:57:FB:EC:06:3B:12:E1
Certificate issuer:       /CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
Certificate serial:       6A9E16526A1AD5C6E5BCAF47F5497E08CF0D94F9
Authority key identifier: EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/323830343a6636633a3a2f33322d3438203d3e20323633303039.roa
Signing time:             Wed 21 Feb 2024 15:38:14 +0000
ROA not before:           Wed 21 Feb 2024 15:33:14 +0000
ROA not after:            Fri 21 Feb 2025 15:38:14 +0000
asID:                     263009
IP address blocks:        2804:f6c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9e:16:52:6a:1a:d5:c6:e5:bc:af:47:f5:49:7e:08:cf:0d:94:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
        Validity
            Not Before: Feb 21 15:33:14 2024 GMT
            Not After : Feb 21 15:38:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:a1:a6:59:0b:b3:a5:3e:0c:98:9f:4b:b3:
                    20:81:b7:11:c7:d4:df:85:ec:62:c9:c7:62:d4:df:
                    10:9e:14:e6:7a:3b:e3:de:79:f9:c6:33:4f:ba:42:
                    25:ce:32:95:b4:da:09:cc:77:f4:ac:22:67:7d:6a:
                    7c:d0:9b:f2:aa:23:e7:07:50:ce:2e:37:87:ac:d4:
                    17:a9:4a:d2:90:7c:5f:e3:45:b4:88:f2:6a:aa:98:
                    7d:20:90:8f:b0:e2:59:ab:0f:5e:38:b6:1b:32:70:
                    56:23:f8:a0:dd:d6:ae:1f:72:ea:ec:b0:ee:06:c9:
                    a9:d4:12:66:dd:d1:a9:22:2e:06:25:a1:9c:64:2d:
                    38:bb:cb:f8:9e:92:f5:33:a9:fb:76:92:14:4c:21:
                    d9:b7:8a:1e:58:e1:99:6f:6e:1f:83:86:25:6f:81:
                    13:c5:43:d1:cf:51:e5:bb:1a:d5:bc:ba:34:74:e0:
                    ca:d8:a8:61:a6:1b:c4:68:23:66:dc:fc:37:90:d1:
                    61:e7:c3:8b:fb:48:d4:ae:c8:01:76:3d:a5:fe:03:
                    5f:bb:12:7b:2f:89:4b:be:4a:54:de:e0:b1:7c:4d:
                    2c:c3:2b:06:23:c0:01:08:72:b1:83:8a:a5:d0:51:
                    04:c4:ef:68:c7:28:c1:e6:07:93:0b:bb:a5:87:3b:
                    e2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CA:27:8B:DF:8F:6C:77:CD:6E:DF:98:C1:57:FB:EC:06:3B:12:E1
            X509v3 Authority Key Identifier:
                keyid:EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/323830343a6636633a3a2f33322d3438203d3e20323633303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:84:c6:ab:14:d0:e5:58:c1:03:52:68:9b:ad:b3:3e:b4:d7:
         19:51:8b:8d:fa:95:b7:8d:b6:b8:3a:86:30:3c:ae:5d:f0:0a:
         15:0b:71:04:47:13:fa:ef:6d:29:54:fb:9b:ef:21:be:78:b4:
         4a:55:81:21:48:12:eb:74:ad:f2:e0:63:ae:68:de:0b:90:2d:
         3e:9f:82:b5:58:ef:65:1b:ca:09:8c:4d:7c:53:6f:1a:f6:ba:
         a6:26:d5:92:2d:18:e4:11:16:5e:4c:26:21:db:31:b8:aa:4f:
         b7:4f:b4:d7:4a:3c:1f:9b:42:38:84:4e:58:09:7b:ba:00:9f:
         c5:a7:44:42:94:66:f1:1e:a9:2e:e2:4e:a7:57:cc:9a:9c:8a:
         7b:2a:31:59:19:16:72:d8:1c:48:9a:12:4f:26:27:b9:4e:a1:
         e8:63:4f:2b:15:b9:0f:26:3a:46:02:75:cc:77:d9:22:5d:5d:
         45:35:f5:60:90:5a:c5:e7:e1:e5:36:9e:42:46:49:52:78:28:
         f1:e9:12:2a:d1:2e:6c:0e:ee:d7:2b:72:86:b6:fb:88:3e:be:
         35:4d:ae:7b:3e:8a:a9:a3:b9:a9:ec:74:ca:08:cc:d6:df:81:
         77:0c:45:16:8e:5c:bf:0b:1f:d4:d2:27:36:75:a5:a8:d2:88:
         65:34:e8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:56 2025 by rpki-client