Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/323830343a373235633a3a2f33322d313238203d3e20323632353036.roa
File:                     323830343a373235633a3a2f33322d313238203d3e20323632353036.roa (raw, json)
Hash identifier:          DxpqrHeHTS5oYOfPy5TSY37lPlsXFR/7xTA1lwITK78=
Subject key identifier:   A9:71:37:8C:8B:5B:EC:7F:A5:42:FD:FC:79:79:39:A0:EF:CD:67:82
Certificate issuer:       /CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
Certificate serial:       058A75A30C2D992928C0AA83BAE3AE0E1871480A
Authority key identifier: EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/323830343a373235633a3a2f33322d313238203d3e20323632353036.roa
Signing time:             Thu 13 Mar 2025 14:12:17 +0000
ROA not before:           Thu 13 Mar 2025 14:07:17 +0000
ROA not after:            Thu 12 Mar 2026 14:12:17 +0000
asID:                     262506
IP address blocks:        2804:725c::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8a:75:a3:0c:2d:99:29:28:c0:aa:83:ba:e3:ae:0e:18:71:48:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
        Validity
            Not Before: Mar 13 14:07:17 2025 GMT
            Not After : Mar 12 14:12:17 2026 GMT
        Subject: CN=A971378C8B5BEC7FA542FDFC797939A0EFCD6782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:e9:18:b1:6c:2c:96:51:5d:26:b9:b6:96:
                    ef:36:e7:06:21:bb:ed:21:0f:5f:4d:86:02:a3:fc:
                    ec:d4:22:b5:4f:d5:00:72:5b:27:77:c3:30:78:19:
                    4a:c6:f7:4c:d5:bc:5f:3a:c2:a6:12:f7:02:9d:c2:
                    f7:65:9f:1a:96:74:3a:87:f1:54:5e:72:b6:fd:f9:
                    f6:bf:13:a4:af:77:dd:9a:6c:33:4b:30:40:9a:4a:
                    2a:0a:16:6b:0a:a6:95:09:1d:69:a9:82:03:dd:8f:
                    1a:18:ff:ed:05:02:8a:ba:e6:4b:40:14:87:90:79:
                    07:02:c2:7d:b3:0d:77:0a:a4:e0:04:ef:87:09:72:
                    ff:ea:28:09:a1:f5:9a:74:f7:1f:39:c6:4a:eb:18:
                    65:57:11:6b:8c:53:b8:3f:c2:e8:c3:ff:74:ed:e3:
                    a4:4f:27:9d:34:41:7a:6c:99:12:64:0b:40:4a:f6:
                    8a:7f:61:ed:80:e9:98:a6:a4:f9:c9:ff:79:da:43:
                    10:aa:67:2d:80:2d:0b:b5:dd:4b:a9:b4:64:38:18:
                    30:28:8b:0f:15:c4:64:a7:43:22:2d:71:3b:5b:31:
                    fa:17:56:3a:c3:40:7b:e2:62:db:3a:03:b6:7a:bb:
                    f1:6f:4f:c4:ff:b8:e2:b4:d7:d1:5c:5e:ec:aa:0e:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:71:37:8C:8B:5B:EC:7F:A5:42:FD:FC:79:79:39:A0:EF:CD:67:82
            X509v3 Authority Key Identifier:
                keyid:EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/323830343a373235633a3a2f33322d313238203d3e20323632353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:725c::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:ec:6c:76:8c:a1:c2:bc:c3:a4:e3:97:78:be:d2:09:72:99:
         9e:d1:44:fd:26:c4:e0:28:94:63:f0:d9:75:26:49:c7:74:d7:
         d3:4e:36:a6:dc:57:ac:22:53:0d:ed:d0:0a:e5:10:c5:55:bf:
         ef:c7:10:8b:14:3a:80:f7:92:b5:b7:a4:5b:6a:30:e2:02:06:
         e5:4a:66:de:ea:97:9a:1b:16:b1:66:59:f2:8a:25:4a:99:6a:
         4b:a6:2b:74:c1:12:a1:dc:f3:5e:3a:ea:1b:84:50:4b:c5:c0:
         79:62:35:de:07:26:a9:68:4e:cf:4d:e0:00:37:49:50:61:32:
         d8:17:20:db:03:02:c1:1e:70:5f:e8:33:f9:a7:93:62:7e:0c:
         92:ad:df:df:7e:d9:1b:35:6e:c5:cb:86:55:19:d7:48:6f:37:
         2d:c1:92:30:d2:21:e4:73:d7:1f:aa:fd:7c:ee:c6:91:c9:3d:
         7a:64:6a:ea:8a:98:80:cb:a1:84:15:b3:d8:43:ea:21:a5:e6:
         5f:cf:0d:9a:1b:ce:00:b8:e5:21:1e:c7:bb:75:e1:a1:e9:18:
         09:78:48:88:50:4c:d2:f3:66:27:65:27:45:48:73:3c:cf:70:
         a0:be:a9:db:0c:25:f5:d6:28:5e:82:9b:7f:8f:26:1d:43:f2:
         48:42:66:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:53 2025 by rpki-client