Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/323830343a373866633a343030303a3a2f33342d3334203d3e20323731323738.roa
File:                     323830343a373866633a343030303a3a2f33342d3334203d3e20323731323738.roa (raw, json)
Hash identifier:          dngOiJGKw7bWbvVLyHcyw2aFsOdR95n9nUmJTGu5MaU=
Subject key identifier:   7D:C6:BC:E6:E2:E2:98:64:22:EC:81:C3:7B:28:58:1D:AC:D8:2A:5E
Certificate issuer:       /CN=EB1213403012BFA425D97330C003CB4FE5F5418D
Certificate serial:       0AC299C88F842AF8F56C9EB7CBCEAF2D002D3312
Authority key identifier: EB:12:13:40:30:12:BF:A4:25:D9:73:30:C0:03:CB:4F:E5:F5:41:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB1213403012BFA425D97330C003CB4FE5F5418D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/323830343a373866633a343030303a3a2f33342d3334203d3e20323731323738.roa
Signing time:             Mon 29 Jul 2024 15:16:23 +0000
ROA not before:           Mon 29 Jul 2024 15:11:23 +0000
ROA not after:            Mon 28 Jul 2025 15:16:23 +0000
asID:                     271278
IP address blocks:        2804:78fc:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c2:99:c8:8f:84:2a:f8:f5:6c:9e:b7:cb:ce:af:2d:00:2d:33:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB1213403012BFA425D97330C003CB4FE5F5418D
        Validity
            Not Before: Jul 29 15:11:23 2024 GMT
            Not After : Jul 28 15:16:23 2025 GMT
        Subject: CN=7DC6BCE6E2E2986422EC81C37B28581DACD82A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:cc:a4:53:eb:44:f2:de:f5:1f:ad:57:de:
                    5f:64:d7:23:4e:e8:e4:71:63:97:1f:1f:4a:d6:e8:
                    34:97:5d:03:42:2a:5a:2f:8e:45:e4:bd:de:1e:58:
                    1b:92:eb:93:8e:96:ce:54:da:12:58:62:43:cf:9c:
                    79:bb:79:16:21:1e:f4:1e:c9:12:ea:4c:64:60:f4:
                    09:18:29:96:4a:39:68:39:2a:1f:da:04:57:b3:95:
                    dd:cb:b1:31:aa:df:0f:5f:74:26:b8:dc:c7:3b:5f:
                    13:f5:b4:01:42:73:a8:69:28:45:9b:f9:6e:29:f9:
                    72:d3:4e:3a:34:e1:5b:a7:66:21:c9:a6:20:58:73:
                    fa:9c:63:c0:a3:a2:50:21:f3:c6:3e:e1:29:2c:18:
                    52:e6:37:1d:c2:41:f1:70:b2:bd:05:ef:8b:b3:84:
                    39:2a:f8:af:0f:c4:73:6c:d9:33:f1:94:5f:87:2f:
                    95:ab:39:c7:21:3e:a5:57:31:4c:22:78:dd:f9:11:
                    30:eb:83:e1:91:b7:69:ef:3e:25:21:5c:77:d4:8e:
                    9c:64:7f:b7:52:07:9a:ab:f7:21:8a:20:3e:0c:3f:
                    ee:f0:c5:00:a8:fa:42:83:f6:71:08:a3:c0:0f:9f:
                    d5:bd:52:46:12:41:51:95:09:26:f3:b7:ea:42:cb:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C6:BC:E6:E2:E2:98:64:22:EC:81:C3:7B:28:58:1D:AC:D8:2A:5E
            X509v3 Authority Key Identifier:
                keyid:EB:12:13:40:30:12:BF:A4:25:D9:73:30:C0:03:CB:4F:E5:F5:41:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/EB1213403012BFA425D97330C003CB4FE5F5418D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB1213403012BFA425D97330C003CB4FE5F5418D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/323830343a373866633a343030303a3a2f33342d3334203d3e20323731323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78fc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:87:50:ff:2e:0d:7b:ef:a4:8d:67:ce:58:ad:67:f9:ee:41:
         c0:a1:c1:f9:e7:f2:a8:a8:60:9f:c9:c1:8a:50:6c:61:68:a2:
         04:6d:bf:72:cd:b8:18:ce:6c:91:08:91:65:30:5a:f5:f0:35:
         2f:75:b9:63:e9:7b:8b:26:2d:93:b8:81:e3:c4:1a:d5:0a:8f:
         95:56:75:b9:82:07:c8:e1:43:80:fa:70:38:00:35:c5:30:02:
         47:81:0a:f9:ac:b1:f7:43:8d:9f:f1:4b:08:97:56:c6:b6:ff:
         63:df:74:fc:1d:1a:77:ea:c4:71:a1:47:d1:19:a5:4f:23:40:
         c6:2f:8c:eb:93:6a:25:03:0c:7f:d1:1d:84:a4:ae:61:4c:c6:
         df:ae:94:3f:52:a6:e6:74:91:69:e7:e2:1e:99:8d:c0:30:0b:
         f9:d6:06:c0:f4:13:9b:a5:ee:a4:07:fe:8e:b2:2b:e5:a7:9a:
         b1:9d:e1:23:56:c9:97:17:ed:06:07:c5:9e:df:b1:f9:d6:68:
         a0:83:a2:0e:ff:5a:ce:68:c1:60:2a:67:32:0f:b2:b5:fb:14:
         98:11:af:27:35:b4:f9:b6:3e:3f:16:01:5e:6a:cd:44:8c:28:
         74:8b:c1:c9:1d:fb:3a:02:3a:c7:95:5b:08:f4:43:85:19:2c:
         98:b2:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:33 2025 by rpki-client