Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/323830343a336661633a3a2f33322d313238203d3e20323635393036.roa
File:                     323830343a336661633a3a2f33322d313238203d3e20323635393036.roa (raw, json)
Hash identifier:          T57jRedcZKxglq8wkFYOX0QRJ23moksrGP85R+/IDlA=
Subject key identifier:   36:4F:91:01:1C:60:D0:EE:1F:80:11:94:32:D0:70:18:C6:A8:09:66
Certificate issuer:       /CN=EB5BCABD07EDB610C423873FB91711A872DE657E
Certificate serial:       7F8F8DC1364D1936B0D1AF564DBB1B8469F89622
Authority key identifier: EB:5B:CA:BD:07:ED:B6:10:C4:23:87:3F:B9:17:11:A8:72:DE:65:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB5BCABD07EDB610C423873FB91711A872DE657E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/323830343a336661633a3a2f33322d313238203d3e20323635393036.roa
Signing time:             Mon 17 Feb 2025 12:02:29 +0000
ROA not before:           Mon 17 Feb 2025 11:57:29 +0000
ROA not after:            Mon 16 Feb 2026 12:02:29 +0000
asID:                     265906
IP address blocks:        2804:3fac::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8f:8d:c1:36:4d:19:36:b0:d1:af:56:4d:bb:1b:84:69:f8:96:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB5BCABD07EDB610C423873FB91711A872DE657E
        Validity
            Not Before: Feb 17 11:57:29 2025 GMT
            Not After : Feb 16 12:02:29 2026 GMT
        Subject: CN=364F91011C60D0EE1F80119432D07018C6A80966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:da:89:43:95:8e:2c:2d:f1:21:60:5e:55:
                    b9:29:2c:e8:a0:4d:c2:46:6d:f3:05:a1:98:62:e5:
                    94:29:b7:90:dc:83:f2:ed:91:d3:00:9f:09:6a:69:
                    e5:0e:3e:3b:2d:67:93:8e:52:a3:67:e6:a1:d0:9b:
                    16:b7:c5:7e:91:38:3e:37:9f:71:c7:11:a9:40:32:
                    fc:af:2f:25:00:85:50:bf:0b:e8:8c:1b:e9:c6:ba:
                    8d:5c:e3:a0:9d:2c:b3:c0:68:86:87:a6:68:65:53:
                    9c:32:e0:01:fc:5b:08:87:9c:97:56:78:3d:42:a7:
                    86:52:66:fb:a2:4d:d9:52:42:52:63:16:6b:71:27:
                    d1:30:49:80:a7:08:82:f0:2a:00:38:36:78:a4:1a:
                    65:08:0d:21:eb:a3:e3:89:ef:ab:fb:85:5d:6b:ec:
                    66:77:ec:d3:90:e2:bb:88:79:ea:b2:18:77:1e:2b:
                    55:f3:9f:d8:15:17:ee:5c:9d:4e:52:bb:a8:a7:c9:
                    41:30:71:e5:49:c6:9c:e1:64:f4:99:db:e3:93:b2:
                    d3:5a:f4:da:1d:bf:8d:52:f1:87:35:6d:47:d4:fc:
                    ee:f6:fe:5d:fc:63:83:7c:20:01:4d:67:f3:06:84:
                    88:69:c3:54:55:f8:c6:35:66:7d:36:8d:9d:cb:31:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4F:91:01:1C:60:D0:EE:1F:80:11:94:32:D0:70:18:C6:A8:09:66
            X509v3 Authority Key Identifier:
                keyid:EB:5B:CA:BD:07:ED:B6:10:C4:23:87:3F:B9:17:11:A8:72:DE:65:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/EB5BCABD07EDB610C423873FB91711A872DE657E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB5BCABD07EDB610C423873FB91711A872DE657E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/323830343a336661633a3a2f33322d313238203d3e20323635393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fac::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:ff:ba:e5:40:03:c8:26:a6:bd:91:77:61:6b:54:de:1a:
         4f:64:0c:9c:3f:b5:4d:11:7b:59:b6:6a:14:78:ff:16:ef:10:
         e4:49:25:11:db:95:cb:fd:38:e6:08:3e:92:c4:02:4f:28:06:
         29:e9:6c:e9:2c:b3:54:44:19:89:bf:e8:06:a1:91:b0:31:ab:
         36:7a:b8:1b:1e:94:eb:c3:f8:04:6d:32:d3:e3:24:a0:76:41:
         03:66:1e:d2:21:7d:59:92:53:ea:bc:12:5c:e3:ac:a8:42:94:
         33:74:c9:d8:e0:db:9e:8f:fc:a1:de:6f:ee:a5:b2:90:10:ae:
         0f:f8:8d:76:b2:66:dc:0d:05:5f:e7:c9:6b:12:cb:cb:46:92:
         f0:64:90:f3:16:7e:c8:e3:c9:cf:26:14:90:52:7a:bb:de:ee:
         8d:a0:13:a2:8f:76:51:19:27:94:c7:c7:e9:c1:f8:62:81:4d:
         7f:d8:80:9a:23:05:01:d3:79:fa:bd:ef:8d:ba:ff:97:22:45:
         98:67:86:92:32:b9:67:94:9d:fa:a4:67:cc:5d:42:e1:f9:dc:
         c0:52:2f:96:68:29:da:4b:f8:04:b7:02:79:bc:54:e1:9f:20:
         96:00:7f:de:e8:78:0c:e0:ad:8b:14:33:0e:5f:4d:10:7f:02:
         dc:e2:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:12:20 2025 by rpki-client