Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/1/323830343a333932303a383030303a3a2f33362d3336203d3e20323636303133.roa
File:                     323830343a333932303a383030303a3a2f33362d3336203d3e20323636303133.roa (raw, json)
Hash identifier:          id1z3hlZBh56fpmne9f7LdvWr2np6rJ4MlZO6Xn9+3c=
Subject key identifier:   10:7A:5B:A1:BF:B4:FB:B7:5D:45:42:39:B3:09:BC:F2:2E:96:4A:44
Certificate issuer:       /CN=EAC30F9C22DB300D3E6A11D193F1E339FF0EEDB9
Certificate serial:       0207A4FBE5B5ADDBEE75D9DC076AEA0A2742E0CF
Authority key identifier: EA:C3:0F:9C:22:DB:30:0D:3E:6A:11:D1:93:F1:E3:39:FF:0E:ED:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAC30F9C22DB300D3E6A11D193F1E339FF0EEDB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/1/323830343a333932303a383030303a3a2f33362d3336203d3e20323636303133.roa
Signing time:             Tue 18 Jul 2023 14:09:40 +0000
ROA not before:           Tue 18 Jul 2023 14:04:40 +0000
ROA not after:            Tue 16 Jul 2024 14:09:40 +0000
asID:                     266013
IP address blocks:        2804:3920:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:07:a4:fb:e5:b5:ad:db:ee:75:d9:dc:07:6a:ea:0a:27:42:e0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC30F9C22DB300D3E6A11D193F1E339FF0EEDB9
        Validity
            Not Before: Jul 18 14:04:40 2023 GMT
            Not After : Jul 16 14:09:40 2024 GMT
        Subject: CN=107A5BA1BFB4FBB75D454239B309BCF22E964A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:eb:b7:1d:53:27:66:38:1b:a9:67:4f:f4:
                    4b:81:d8:40:16:c5:24:2e:60:44:47:14:79:fc:47:
                    b5:2f:0e:d1:14:9d:fb:df:ab:c7:84:9f:3f:33:48:
                    89:59:6e:d4:1c:05:53:f7:74:f1:2e:ce:46:a3:0b:
                    a4:5d:0a:35:81:75:33:d1:ac:cc:8c:c9:dc:97:e0:
                    cc:18:8e:69:74:46:8c:22:cc:04:e6:26:d2:4b:0b:
                    11:12:87:2e:ff:b9:54:c3:49:d7:97:85:6c:51:eb:
                    7e:47:ca:fc:a8:1b:9d:c9:17:10:ff:e3:ac:7a:2c:
                    b4:a2:83:02:87:f5:67:68:b0:38:aa:ed:c2:a9:e8:
                    8f:24:8b:ce:46:ed:94:08:c7:ce:00:a0:7a:f8:04:
                    2d:e1:2c:5d:79:55:68:a2:b2:6b:74:e2:e4:f9:aa:
                    34:2e:5b:30:c1:a7:5b:3c:fa:d3:fc:30:87:bb:da:
                    d4:7f:2e:03:11:7d:ef:60:05:02:94:7b:6e:7a:5f:
                    7c:59:75:06:b5:e6:0e:f2:be:6f:29:a9:a4:96:cd:
                    c9:bd:c8:b9:00:32:0a:a7:d2:8d:e0:f4:08:46:41:
                    2d:64:fc:b5:c9:4f:c2:91:b7:fd:ed:e1:58:e4:cd:
                    24:d8:22:95:ff:41:67:53:ea:62:ef:a9:12:f2:1b:
                    9b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7A:5B:A1:BF:B4:FB:B7:5D:45:42:39:B3:09:BC:F2:2E:96:4A:44
            X509v3 Authority Key Identifier:
                keyid:EA:C3:0F:9C:22:DB:30:0D:3E:6A:11:D1:93:F1:E3:39:FF:0E:ED:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/1/EAC30F9C22DB300D3E6A11D193F1E339FF0EEDB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAC30F9C22DB300D3E6A11D193F1E339FF0EEDB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/1/323830343a333932303a383030303a3a2f33362d3336203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3920:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c1:2a:bc:60:28:45:07:cd:27:e9:ec:63:2b:2a:d2:21:46:40:
         fb:53:05:6e:b1:74:c5:46:47:b2:2a:28:b3:3a:57:31:b1:84:
         93:3c:72:42:b5:5b:5f:b3:8b:42:3e:53:c2:45:52:84:bf:da:
         9f:30:37:a6:67:81:04:68:1d:c5:2f:42:2f:4f:33:d7:a3:d7:
         73:78:42:5f:d6:1f:44:3f:26:f5:01:e1:18:d0:88:0a:d6:72:
         d8:19:f6:38:47:2d:ad:8e:be:c5:b2:6f:34:37:34:23:db:99:
         52:5e:f7:49:65:22:17:01:84:da:61:88:c9:82:ab:86:91:14:
         fb:73:ad:2c:36:63:ed:5b:e4:8f:29:9f:02:e4:d9:ed:de:aa:
         bc:fe:e3:d1:d3:a6:76:71:c3:72:18:94:1a:60:e6:45:0b:e1:
         c9:66:4c:fa:ae:8e:fe:3d:c4:1b:2f:1f:64:07:eb:08:20:cc:
         62:59:2a:ee:a0:c7:14:05:a4:8b:e7:ed:87:14:a1:8c:44:c2:
         2e:7e:67:06:c5:5c:69:71:96:d3:d4:1c:77:20:11:9e:3f:00:
         22:b9:6e:37:d9:31:a9:83:e7:e6:a4:d9:21:ac:4f:26:ef:14:
         f7:69:76:cb:c1:5e:14:3b:d2:3e:35:c7:d4:5b:e5:c4:70:b6:
         64:47:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:11 2025 by rpki-client