Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/323830343a323566633a3a2f33322d3332203d3e20323634333136.roa
File:                     323830343a323566633a3a2f33322d3332203d3e20323634333136.roa (raw, json)
Hash identifier:          /a1W8aTktqxj23cP3u4d1SH/57KjUnBZDiDdwEhv2Io=
Subject key identifier:   79:91:46:8D:3A:59:2B:5F:C3:E5:3E:1E:2A:26:91:29:A1:C7:A4:80
Certificate issuer:       /CN=8E2D0A435995B551D35CAD14D4DFAA748CE93C61
Certificate serial:       4E04ADE94C543088BC6418D843AD1DFDF08FB51D
Authority key identifier: 8E:2D:0A:43:59:95:B5:51:D3:5C:AD:14:D4:DF:AA:74:8C:E9:3C:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/323830343a323566633a3a2f33322d3332203d3e20323634333136.roa
Signing time:             Mon 16 Dec 2024 20:51:14 +0000
ROA not before:           Mon 16 Dec 2024 20:46:14 +0000
ROA not after:            Mon 15 Dec 2025 20:51:14 +0000
asID:                     264316
IP address blocks:        2804:25fc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:04:ad:e9:4c:54:30:88:bc:64:18:d8:43:ad:1d:fd:f0:8f:b5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E2D0A435995B551D35CAD14D4DFAA748CE93C61
        Validity
            Not Before: Dec 16 20:46:14 2024 GMT
            Not After : Dec 15 20:51:14 2025 GMT
        Subject: CN=7991468D3A592B5FC3E53E1E2A269129A1C7A480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:8c:98:0c:1b:27:ba:0e:c5:9c:7c:97:0e:
                    c9:14:68:8b:af:c1:6c:e4:63:c4:f9:db:02:f5:a5:
                    86:1d:87:0b:38:c0:76:ea:1d:61:18:3d:18:b7:5e:
                    de:87:47:b7:f2:20:4e:c6:46:5b:35:12:e0:2d:14:
                    95:88:f3:88:44:8e:22:dd:f5:df:2e:37:5c:85:b1:
                    1f:86:0f:f5:10:d3:7c:b0:f9:5a:98:fa:98:47:d9:
                    b4:9a:e5:83:e9:a8:d1:44:92:e2:a3:24:f2:61:6a:
                    df:25:3f:69:bc:9d:22:d8:f8:24:f9:01:d6:9b:01:
                    db:3f:ce:ab:42:3c:91:da:68:ec:a7:99:1f:db:ef:
                    73:ee:57:0b:34:2b:18:0b:fd:1e:7e:05:02:20:77:
                    06:b9:b3:53:f4:95:04:77:d3:dd:3e:2d:77:c9:10:
                    e1:09:01:90:b6:f0:e5:b2:6d:18:79:15:11:24:38:
                    c2:ec:66:6a:9c:4c:9b:45:87:51:bd:3f:af:bb:60:
                    8d:14:3e:73:f5:fa:32:90:22:7e:e1:b4:1b:7f:d1:
                    da:10:28:93:e7:6f:a8:b4:5e:9f:1b:f4:97:aa:75:
                    7b:84:db:27:41:33:19:f3:55:0e:94:66:fc:5e:5b:
                    2f:d7:31:a4:4c:87:03:fb:95:bd:be:5c:80:2b:91:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:91:46:8D:3A:59:2B:5F:C3:E5:3E:1E:2A:26:91:29:A1:C7:A4:80
            X509v3 Authority Key Identifier:
                keyid:8E:2D:0A:43:59:95:B5:51:D3:5C:AD:14:D4:DF:AA:74:8C:E9:3C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E2D0A435995B551D35CAD14D4DFAA748CE93C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/323830343a323566633a3a2f33322d3332203d3e20323634333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:aa:0e:b3:a3:2b:f5:c2:b3:26:18:9c:4b:56:9c:91:50:
         cf:51:28:7a:b2:b7:ff:06:21:90:5a:a8:2e:24:95:d1:dd:8b:
         86:3c:7c:4f:d4:59:2e:71:4e:32:a8:9c:fb:30:5f:1d:34:6b:
         85:02:ee:6e:c7:0f:ef:55:69:43:be:bf:cc:00:84:31:9e:23:
         d2:34:e8:c5:07:ee:dd:8c:88:0a:6c:8f:d2:06:fa:48:96:92:
         ba:91:a1:d0:3a:ba:79:e6:43:9f:19:b2:32:f2:db:a8:62:d8:
         18:98:7e:08:61:3b:3c:49:17:2e:38:e2:ce:d0:66:ae:72:22:
         f1:7a:21:e0:36:ae:55:4d:69:3a:9b:77:c0:17:b6:ac:78:ae:
         fd:e3:da:0e:1d:5c:56:40:1f:15:1c:66:03:27:0c:71:41:d5:
         bb:15:8c:52:aa:1d:08:a2:76:90:7b:8f:5d:35:ae:32:d2:c1:
         0d:fc:77:b2:d4:7c:1a:c6:4b:a2:b8:51:60:a7:4e:60:8b:bd:
         94:6b:b9:6d:03:d4:f2:82:29:de:1b:61:a3:0d:22:61:c6:42:
         32:ee:8d:90:31:62:4c:21:40:93:47:00:c8:1a:4b:42:f8:63:
         08:9c:b2:52:4c:95:2b:59:60:71:bc:d3:fa:d7:51:4b:f0:2a:
         9e:5f:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:38:56 2025 by rpki-client