Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/323830343a346535303a3130303a3a2f34302d3430203d3e20323638323533.roa
File:                     323830343a346535303a3130303a3a2f34302d3430203d3e20323638323533.roa (raw, json)
Hash identifier:          tKSJyuHnW3gOSDArWJ5fFD0/sZ1yra5FDhOmNehCAKE=
Subject key identifier:   EE:B3:EE:9C:FF:81:22:E0:47:22:F3:46:1C:E8:37:C0:70:57:CE:CE
Certificate issuer:       /CN=5554B6ED4969AC940F590D2A6010C4406D254087
Certificate serial:       11A0E28341C24889DED67014B3E70EE0953F258F
Authority key identifier: 55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/323830343a346535303a3130303a3a2f34302d3430203d3e20323638323533.roa
Signing time:             Thu 09 Jan 2025 17:47:09 +0000
ROA not before:           Thu 09 Jan 2025 17:42:09 +0000
ROA not after:            Thu 08 Jan 2026 17:47:09 +0000
asID:                     268253
IP address blocks:        2804:4e50:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a0:e2:83:41:c2:48:89:de:d6:70:14:b3:e7:0e:e0:95:3f:25:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5554B6ED4969AC940F590D2A6010C4406D254087
        Validity
            Not Before: Jan  9 17:42:09 2025 GMT
            Not After : Jan  8 17:47:09 2026 GMT
        Subject: CN=EEB3EE9CFF8122E04722F3461CE837C07057CECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:66:bc:04:a0:6b:6c:e3:95:7c:de:72:d8:0f:
                    89:81:59:dc:be:8a:b4:89:b6:80:9a:28:f7:1c:92:
                    cf:ee:b3:79:2f:e5:de:e9:f4:4d:ab:94:4e:99:d8:
                    f2:83:0a:65:36:f2:cb:49:59:a9:f4:e1:19:94:d7:
                    1e:c6:b4:97:12:b8:77:3e:d5:43:88:34:8b:14:50:
                    da:51:d1:b1:e4:9c:5b:af:d9:b6:78:00:c5:d6:6e:
                    65:bb:6c:02:6e:88:79:71:98:51:84:5d:55:4f:f1:
                    6d:c3:4d:1f:cd:bc:3a:a9:d7:a9:45:30:07:d2:c3:
                    e7:a5:d0:64:09:cc:68:81:4f:df:84:c1:e3:7f:18:
                    11:a1:5c:27:86:a1:03:62:13:ad:2a:f8:36:db:b4:
                    7f:ab:f7:97:86:bf:5a:9f:0c:fa:02:7c:1c:df:98:
                    62:c8:21:4b:6f:22:6f:76:fe:b3:12:78:c0:7f:4a:
                    5d:40:43:12:38:2d:6f:10:1d:ab:fe:88:9d:39:e2:
                    43:45:18:a0:fc:e3:4c:44:00:c2:ee:6f:cf:15:34:
                    07:6b:6f:78:f3:88:9e:8f:f0:bc:41:e5:07:4f:6a:
                    c4:94:a1:69:ca:9f:19:b6:25:02:37:bc:c2:98:c0:
                    45:60:91:33:a4:fa:01:5e:c6:1f:a7:19:b0:3f:2a:
                    1c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B3:EE:9C:FF:81:22:E0:47:22:F3:46:1C:E8:37:C0:70:57:CE:CE
            X509v3 Authority Key Identifier:
                keyid:55:54:B6:ED:49:69:AC:94:0F:59:0D:2A:60:10:C4:40:6D:25:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/5554B6ED4969AC940F590D2A6010C4406D254087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5554B6ED4969AC940F590D2A6010C4406D254087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/323830343a346535303a3130303a3a2f34302d3430203d3e20323638323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e50:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:70:0f:2b:d8:e0:25:d8:e5:e2:d3:8f:29:ad:f0:e3:d7:23:
         fd:f1:ef:8d:39:fe:3d:7f:30:c5:17:75:fd:1a:ee:29:24:cf:
         e9:97:3c:40:7b:c5:f3:d5:7a:5c:cd:52:4c:51:5d:1b:f9:88:
         3a:5a:81:a7:7f:a4:46:bc:6a:19:79:b5:bc:07:08:0c:e6:cd:
         b3:e9:39:ec:36:de:8e:60:4e:e8:bc:44:37:c3:7b:ac:65:2c:
         69:9a:1f:31:5c:24:97:42:b6:7a:d7:70:90:33:cf:2a:ba:0c:
         a4:cc:4c:5c:fa:47:66:82:e1:ba:8e:1b:30:ac:fa:33:85:1e:
         81:d8:ec:8e:5c:83:3d:e3:f5:c3:7f:bb:d0:05:6d:e3:70:68:
         62:bb:73:1e:4a:ad:6f:7d:f0:18:42:0c:30:6b:05:87:ae:a8:
         db:2b:fc:72:b6:25:05:34:1e:25:e5:76:a7:09:7e:98:25:68:
         79:df:45:41:84:72:1c:41:25:69:f0:89:9b:29:7d:e1:47:c6:
         f9:f7:7f:bc:c0:af:9f:1f:70:ce:5d:34:bf:7c:f5:dd:59:7c:
         05:3e:40:e7:a0:c4:b8:5b:aa:ea:28:37:ea:ad:75:15:55:73:
         e2:96:7c:67:38:ac:e9:9b:57:02:45:23:29:07:0b:f1:a6:12:
         80:bc:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:18 2025 by rpki-client