Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/323830343a346535303a3a2f33322d313238203d3e20323638323533.roa
File:                     323830343a346535303a3a2f33322d313238203d3e20323638323533.roa (raw, json)
Hash identifier:          DzE0ZAZBUWM763YBPqqyH4iqUz+TMT1RExljjIFhOAM=
Subject key identifier:   29:A1:2B:9B:B1:B6:8E:AC:BD:ED:38:F1:00:AC:E5:DB:CA:1A:35:DD
Certificate issuer:       /CN=AD3AEE6D0F6670021EECC39215F89978080B77E0
Certificate serial:       7683A1A2589FD7825C69E0F653FDE5F4C2A23C20
Authority key identifier: AD:3A:EE:6D:0F:66:70:02:1E:EC:C3:92:15:F8:99:78:08:0B:77:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3AEE6D0F6670021EECC39215F89978080B77E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/323830343a346535303a3a2f33322d313238203d3e20323638323533.roa
Signing time:             Thu 13 Mar 2025 16:40:09 +0000
ROA not before:           Thu 13 Mar 2025 16:35:09 +0000
ROA not after:            Thu 12 Mar 2026 16:40:09 +0000
asID:                     268253
IP address blocks:        2804:4e50::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:83:a1:a2:58:9f:d7:82:5c:69:e0:f6:53:fd:e5:f4:c2:a2:3c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD3AEE6D0F6670021EECC39215F89978080B77E0
        Validity
            Not Before: Mar 13 16:35:09 2025 GMT
            Not After : Mar 12 16:40:09 2026 GMT
        Subject: CN=29A12B9BB1B68EACBDED38F100ACE5DBCA1A35DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:a1:bf:0a:20:d3:51:f9:b6:d2:81:44:8a:
                    eb:76:f4:33:01:2b:56:72:c4:5a:23:60:63:e1:db:
                    c1:5d:98:bd:a2:bc:79:a9:48:11:7a:b4:90:43:e9:
                    f9:10:b1:9b:85:0c:74:61:f8:14:a7:81:57:aa:9a:
                    ba:53:47:bd:51:28:37:83:9f:0c:67:53:b9:19:b7:
                    8f:fa:b5:36:ad:a1:fa:2a:db:14:9d:d9:2e:ea:be:
                    88:a3:66:5d:da:a0:46:ef:1e:c0:84:f9:7d:89:4b:
                    2f:1d:02:ce:09:e4:13:d3:97:32:c1:8b:a3:65:71:
                    b5:57:59:ac:78:a9:f4:9c:a7:cd:2a:5b:4b:7b:c5:
                    6c:ac:55:37:9c:22:7e:bb:5c:d4:f4:ba:0e:b8:f9:
                    31:f0:f5:91:b7:d3:b6:33:a4:fd:29:73:37:e4:63:
                    08:07:77:68:96:5e:f1:c6:a5:9c:17:d8:0c:8c:8d:
                    6d:d8:54:c7:c3:25:6c:75:53:92:99:67:6c:0d:46:
                    8b:95:e7:6d:3b:b3:56:3c:19:57:94:e2:7f:81:d0:
                    b0:ff:e1:0e:d5:4d:ff:13:d4:ac:1c:2e:5f:3f:0a:
                    12:30:58:65:8e:97:59:8f:d6:c5:79:85:e8:25:66:
                    e2:6d:97:bf:0f:12:e8:19:1a:19:1e:a7:f5:80:c7:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A1:2B:9B:B1:B6:8E:AC:BD:ED:38:F1:00:AC:E5:DB:CA:1A:35:DD
            X509v3 Authority Key Identifier:
                keyid:AD:3A:EE:6D:0F:66:70:02:1E:EC:C3:92:15:F8:99:78:08:0B:77:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3AEE6D0F6670021EECC39215F89978080B77E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/323830343a346535303a3a2f33322d313238203d3e20323638323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:d8:71:9c:5a:65:31:c8:cd:45:01:57:97:35:3e:4d:15:75:
         67:54:15:d6:c6:d6:42:c1:be:0f:9a:a7:a1:50:d3:73:1b:fd:
         78:72:ff:4c:6e:5c:0b:69:c2:26:f0:e5:99:67:d8:58:a3:44:
         75:6e:ff:13:35:66:34:53:c1:27:c3:71:ed:4a:00:44:ed:a1:
         eb:b1:85:9f:ca:fb:b0:4a:70:5f:88:51:8a:83:96:92:4f:a2:
         00:84:e5:66:12:ad:66:2c:61:70:86:86:48:6b:e2:e0:b0:81:
         9c:10:9d:d9:57:ce:f5:30:f6:7f:73:47:95:a5:34:17:f8:4c:
         82:e0:38:47:45:15:7c:ef:1b:79:80:53:00:9d:3e:da:b1:19:
         67:7f:06:2f:09:3b:05:24:8f:a7:30:5f:b0:07:b1:3a:78:79:
         70:fd:86:85:23:90:49:cd:a7:d7:de:73:d1:bb:7e:d7:55:95:
         7c:16:02:a3:54:dc:e4:8c:d6:89:3f:3c:c1:c5:40:c4:d4:40:
         ad:24:99:92:e4:b1:7e:85:96:78:06:8a:1d:c1:d6:2f:f2:c2:
         00:e1:73:91:0c:fa:5a:13:68:ff:04:80:5f:a6:d1:b5:0d:ce:
         09:c9:3b:88:24:95:50:c6:c2:9c:72:3a:0a:71:d0:43:89:ea:
         32:c0:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:46:38 2025 by rpki-client