Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/323830343a363165633a3a2f33322d3332203d3e20323639323635.roa
File:                     323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (raw, json)
Hash identifier:          njp8sTJR1VMYOBf9BsAYhMAidvhlELiUvgy/Q/9XRog=
Subject key identifier:   BE:EF:BD:C6:0D:23:DE:A3:2B:33:B4:34:A4:EB:04:EF:36:CA:85:9E
Certificate issuer:       /CN=D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C
Certificate serial:       53D8D510EC70FD15802BAA4126F2BA0E8162C34C
Authority key identifier: D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/323830343a363165633a3a2f33322d3332203d3e20323639323635.roa
Signing time:             Fri 14 Feb 2025 00:46:00 +0000
ROA not before:           Fri 14 Feb 2025 00:41:00 +0000
ROA not after:            Fri 13 Feb 2026 00:46:00 +0000
asID:                     269265
IP address blocks:        2804:61ec::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d8:d5:10:ec:70:fd:15:80:2b:aa:41:26:f2:ba:0e:81:62:c3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C
        Validity
            Not Before: Feb 14 00:41:00 2025 GMT
            Not After : Feb 13 00:46:00 2026 GMT
        Subject: CN=BEEFBDC60D23DEA32B33B434A4EB04EF36CA859E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:e3:d0:a7:1f:c3:92:97:0a:56:16:d2:ac:
                    78:84:90:07:e1:9a:49:be:3a:76:c2:a8:5b:8d:ac:
                    52:e5:1d:fe:f2:ce:dd:d3:8e:87:24:31:b1:c2:1b:
                    a2:ac:3c:a4:9e:d7:38:94:6a:7c:49:a2:27:13:86:
                    be:90:b5:7c:ef:0f:77:07:f2:47:10:a9:57:c1:c2:
                    76:fe:44:be:32:60:a1:23:fb:45:e0:67:d7:b0:3c:
                    19:38:7d:f6:32:a7:59:81:b9:08:d2:8b:d6:ad:26:
                    d7:29:5a:5a:2a:66:96:ce:18:5a:8b:73:6f:a3:ab:
                    10:a5:83:b8:48:5a:63:7b:a7:3f:09:b1:a8:92:43:
                    e7:bd:8a:9e:7a:d8:d0:83:9b:8a:45:4d:37:13:4f:
                    26:3a:42:fb:f3:be:0e:8c:03:c1:7b:63:c4:a3:cd:
                    63:c9:8a:f5:9d:2c:25:10:30:41:d5:f7:c1:9d:e1:
                    e8:f7:30:7f:ea:85:d9:0c:9a:d9:71:a4:cf:3d:ba:
                    91:2c:49:fb:92:7e:e6:67:4a:63:26:fd:33:08:52:
                    99:45:d4:77:1e:0a:d3:39:cc:b7:9a:f7:ec:60:fe:
                    2f:7c:a8:e8:dc:65:85:72:55:46:bf:2b:ee:b8:44:
                    10:91:de:43:67:ba:c9:80:4d:5b:bc:2b:69:c7:56:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EF:BD:C6:0D:23:DE:A3:2B:33:B4:34:A4:EB:04:EF:36:CA:85:9E
            X509v3 Authority Key Identifier:
                keyid:D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/323830343a363165633a3a2f33322d3332203d3e20323639323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:4b:2d:4c:a1:fd:6d:9e:31:d1:d7:6e:35:94:20:53:6f:e6:
         1e:ac:ac:cb:37:4f:3f:60:c0:f0:ce:d8:d0:a5:65:8d:14:4b:
         fa:af:69:94:be:20:8d:5b:01:8d:2f:e5:da:b8:6b:7e:69:06:
         61:e8:39:fc:4c:41:83:3c:60:ec:17:8a:67:ea:67:db:c8:cd:
         03:0a:a5:73:16:b1:6e:8d:fa:0c:13:71:c2:87:87:d5:75:ff:
         28:2e:7d:d3:f0:e9:bf:8f:4b:0d:53:7c:04:8c:3a:2f:15:0d:
         54:af:0b:ff:24:34:78:37:21:34:bc:c5:af:bd:ac:ed:73:df:
         bf:c5:00:2d:b4:a4:fd:38:73:d1:6a:c0:b1:f1:5a:d5:28:df:
         b2:01:99:dc:3e:78:9a:08:a4:7a:16:8e:8a:d7:93:dc:82:b2:
         b9:75:e8:ff:49:eb:e1:b3:26:6d:73:84:32:86:76:ec:ac:f6:
         e0:88:a4:5a:5f:55:2a:7a:07:3b:3b:fb:58:fd:c0:9e:09:04:
         27:7a:49:f1:bd:bb:9d:6d:da:be:ad:c9:6a:72:fd:33:a4:8c:
         5d:c4:ab:11:1c:58:c8:63:0b:6a:2e:11:bd:d3:31:6d:4d:8b:
         20:5b:62:fe:2b:20:f4:85:bf:fb:49:5c:7d:6f:c6:65:52:44:
         90:0e:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:29:26 2025 by rpki-client