Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/323830343a373634303a3a2f33322d3438203d3e20323731303939.roa
File:                     323830343a373634303a3a2f33322d3438203d3e20323731303939.roa (raw, json)
Hash identifier:          cKFBGNaipx8BdqWnoxyYfmwXFQrMRC8VF/OmbbduL+c=
Subject key identifier:   0A:C5:6F:B7:D5:E4:BB:22:0B:F6:63:29:01:E9:67:B3:06:E3:49:6F
Certificate issuer:       /CN=08587D9125035CCB8778F8F224DB8976BD3757A5
Certificate serial:       7E99493A6BE768305C7E28AFEC315458A5AEEA62
Authority key identifier: 08:58:7D:91:25:03:5C:CB:87:78:F8:F2:24:DB:89:76:BD:37:57:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08587D9125035CCB8778F8F224DB8976BD3757A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/323830343a373634303a3a2f33322d3438203d3e20323731303939.roa
Signing time:             Mon 17 Jun 2024 11:58:57 +0000
ROA not before:           Mon 17 Jun 2024 11:53:57 +0000
ROA not after:            Mon 16 Jun 2025 11:58:57 +0000
asID:                     271099
IP address blocks:        2804:7640::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:99:49:3a:6b:e7:68:30:5c:7e:28:af:ec:31:54:58:a5:ae:ea:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08587D9125035CCB8778F8F224DB8976BD3757A5
        Validity
            Not Before: Jun 17 11:53:57 2024 GMT
            Not After : Jun 16 11:58:57 2025 GMT
        Subject: CN=0AC56FB7D5E4BB220BF6632901E967B306E3496F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:ad:87:a3:3f:65:9e:38:fd:fa:d5:97:7f:
                    bc:44:a7:48:0e:52:4c:ac:c2:fd:10:f1:b2:e8:0f:
                    91:be:70:ef:bf:d5:17:61:71:ea:b8:e0:95:db:41:
                    32:91:8d:36:d0:60:0b:0b:23:d5:59:22:14:57:2c:
                    4a:64:26:a5:b3:27:6e:56:0f:a8:a4:3c:ea:e4:ad:
                    55:5c:7f:c4:78:c6:55:aa:13:59:57:54:06:0b:7f:
                    c3:23:18:2a:2a:a5:c1:e3:1f:b5:2d:bf:c9:0d:9e:
                    57:e3:3b:84:87:3b:a2:7a:ce:d2:f0:2e:76:43:f2:
                    fe:14:66:87:88:96:6f:bc:89:fe:f6:74:57:59:96:
                    3d:06:ff:c3:db:37:4e:8a:fb:be:a1:65:40:a3:5c:
                    66:30:5b:b1:ad:38:23:7f:b4:1a:05:ee:62:44:45:
                    44:a9:7d:3b:4c:39:72:6d:5b:8e:55:0d:12:b6:dd:
                    48:8d:e7:f0:2f:d3:b8:d6:0a:f1:bd:ec:d7:80:2c:
                    21:ec:56:2b:8b:31:1f:9d:0b:24:d2:5e:45:86:da:
                    1c:bb:ef:d3:b0:79:3b:15:2a:3b:a1:38:04:ed:bf:
                    5e:c8:73:a9:87:f5:25:5e:6e:8d:6b:72:e9:d0:f2:
                    29:51:ef:ef:d0:e8:e9:30:ef:08:39:3c:5b:ed:92:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C5:6F:B7:D5:E4:BB:22:0B:F6:63:29:01:E9:67:B3:06:E3:49:6F
            X509v3 Authority Key Identifier:
                keyid:08:58:7D:91:25:03:5C:CB:87:78:F8:F2:24:DB:89:76:BD:37:57:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/08587D9125035CCB8778F8F224DB8976BD3757A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08587D9125035CCB8778F8F224DB8976BD3757A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/323830343a373634303a3a2f33322d3438203d3e20323731303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7640::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:58:fa:42:d4:79:d8:29:5f:59:eb:37:6f:c9:09:55:83:78:
         48:d8:54:c1:66:bd:9c:34:38:92:15:eb:0e:91:b1:ef:02:11:
         69:9a:07:b2:91:c1:c4:e3:57:25:9e:bc:1c:c6:a4:49:05:be:
         aa:0b:f7:dd:00:4c:54:74:4d:ff:38:30:8c:5f:82:b9:1a:c8:
         cf:ba:4d:28:fd:a3:30:48:db:71:82:35:a1:dc:90:a7:8b:a1:
         68:bd:17:da:88:7f:07:65:0d:04:00:21:7d:49:0c:54:28:20:
         a4:7b:47:3b:46:71:43:fc:cc:38:30:5b:30:2f:84:a3:4e:b8:
         a0:a0:6f:e0:59:ac:d3:75:82:cf:93:4c:f7:c0:fd:10:2f:5f:
         18:54:2b:8b:3c:d7:4a:7a:11:ee:36:75:21:25:a4:d7:fd:11:
         f2:81:71:aa:d7:f3:65:68:c4:e5:ee:1c:1e:39:cc:6f:88:de:
         28:f2:71:98:af:3f:7b:d2:7a:aa:5e:57:1f:dc:4a:ea:b7:3e:
         a4:e1:7e:f4:cf:ee:ca:29:a4:a3:47:92:dd:90:58:42:bf:fa:
         0b:68:e5:56:c3:7b:de:e1:d7:49:f1:78:cd:b0:9c:99:ed:f5:
         f6:bc:22:18:7c:08:bc:c7:bb:db:ac:f3:6d:a7:6e:f1:f7:a0:
         4d:73:92:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:25:13 2025 by rpki-client