Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a3a2f33322d313238203d3e20323730343431.roa
File:                     323830343a366330383a3a2f33322d313238203d3e20323730343431.roa (raw, json)
Hash identifier:          5Xz8RfotNZ8g++52YupIhIfXXZ6ja+WXKfAOt8NNA7Q=
Subject key identifier:   03:E8:F6:FE:DC:0D:AE:C0:0E:68:15:CA:B7:F6:50:FF:61:58:0D:3B
Certificate issuer:       /CN=EBB3BD04418B3F2F2E5231228F470534FB64C4CE
Certificate serial:       2925D7D319768D5AED385A4D9BC5F7D58355A4D2
Authority key identifier: EB:B3:BD:04:41:8B:3F:2F:2E:52:31:22:8F:47:05:34:FB:64:C4:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB3BD04418B3F2F2E5231228F470534FB64C4CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a3a2f33322d313238203d3e20323730343431.roa
Signing time:             Mon 09 Dec 2024 17:24:44 +0000
ROA not before:           Mon 09 Dec 2024 17:19:44 +0000
ROA not after:            Mon 08 Dec 2025 17:24:44 +0000
asID:                     270441
IP address blocks:        2804:6c08::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:25:d7:d3:19:76:8d:5a:ed:38:5a:4d:9b:c5:f7:d5:83:55:a4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB3BD04418B3F2F2E5231228F470534FB64C4CE
        Validity
            Not Before: Dec  9 17:19:44 2024 GMT
            Not After : Dec  8 17:24:44 2025 GMT
        Subject: CN=03E8F6FEDC0DAEC00E6815CAB7F650FF61580D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d5:29:2f:61:ea:f9:11:26:96:1c:90:a6:9c:
                    74:f4:c8:1d:f6:50:f7:7d:bd:b8:99:18:22:c5:d7:
                    cc:f0:3d:95:83:56:ab:a5:31:36:39:d7:5f:41:de:
                    38:38:a8:59:04:8c:b6:16:d9:29:27:d3:32:6b:ad:
                    99:8a:3d:ac:71:ef:48:6f:5c:77:6b:ae:10:c1:65:
                    80:57:7f:05:e6:2e:c8:42:8b:61:2d:2c:63:69:72:
                    52:54:e8:83:5b:5a:e8:af:03:b5:6d:68:74:69:a4:
                    95:71:1c:87:f1:14:a0:b5:13:02:dc:da:a2:82:4f:
                    b7:05:fd:9f:2b:f1:f1:36:dc:77:cc:ef:b4:22:d0:
                    42:b6:54:00:ea:8f:f2:e9:24:15:eb:ee:03:58:90:
                    76:f9:9f:ab:b6:bc:63:59:84:bc:8c:f6:f1:cc:15:
                    39:b6:70:cc:99:99:83:69:37:22:c8:d8:53:ae:e7:
                    64:65:9d:7a:70:c4:b7:e2:c4:61:5f:77:e3:0f:0d:
                    d6:a5:a8:46:d3:63:95:7e:63:b4:59:01:12:b7:0f:
                    58:45:d1:fd:f3:d6:91:d7:f7:d8:93:45:5b:75:29:
                    1d:86:ed:6f:90:d8:ad:84:a6:af:64:ba:4f:75:58:
                    9c:09:1d:73:f8:73:c7:8d:70:eb:a1:10:7c:4a:c2:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E8:F6:FE:DC:0D:AE:C0:0E:68:15:CA:B7:F6:50:FF:61:58:0D:3B
            X509v3 Authority Key Identifier:
                keyid:EB:B3:BD:04:41:8B:3F:2F:2E:52:31:22:8F:47:05:34:FB:64:C4:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/EBB3BD04418B3F2F2E5231228F470534FB64C4CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB3BD04418B3F2F2E5231228F470534FB64C4CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cd745dSCjNkCXwJuiEX8rQwj7VXtYyN28wghJbB5JBxM/0/323830343a366330383a3a2f33322d313238203d3e20323730343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c08::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:ab:d2:52:d1:48:ac:ad:1c:51:88:f6:16:7b:81:0e:d5:ad:
         8a:fd:86:29:ff:a9:39:3a:2e:dc:56:c8:6f:cd:57:4f:5a:51:
         a2:86:41:38:52:fd:1c:aa:72:f4:83:93:05:15:5e:6f:2e:1e:
         b7:ae:2e:c0:31:d8:f9:d2:e2:df:5c:bf:51:e9:1b:f7:5e:29:
         70:9e:10:63:3e:e7:3d:c6:f3:ef:d0:f2:30:43:75:9f:f9:5d:
         fe:83:55:d8:20:06:b5:c7:04:5d:f9:1c:35:3d:6f:f9:ee:00:
         7c:32:06:24:d9:a4:e3:c2:3b:75:58:fb:84:72:30:03:0e:37:
         f3:f2:c2:99:98:df:55:b2:62:02:84:0d:d5:1c:0f:2f:6f:f9:
         90:6b:ed:09:65:86:1a:55:d9:8b:56:52:c2:48:f6:90:47:f8:
         09:8a:1c:25:d3:71:4c:a4:a3:76:d4:e8:5d:77:eb:32:e2:7e:
         ff:0e:bc:05:32:08:1d:23:10:0e:e6:3c:06:fb:d5:a7:a4:5e:
         e8:5b:90:fe:a9:e3:2e:01:23:80:3a:7d:ae:6e:40:ee:0a:16:
         fe:76:13:8f:55:0d:df:9c:4d:4f:b3:03:f7:6d:57:d2:8a:a2:
         82:ac:b4:93:2f:96:a9:0c:91:7d:52:eb:b6:3c:25:6d:67:87:
         89:cf:9e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:20:12 2025 by rpki-client