Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/1/323830343a346336343a3a2f33322d313238203d3e20323637333638.roa
File:                     323830343a346336343a3a2f33322d313238203d3e20323637333638.roa (raw, json)
Hash identifier:          wK4Ri1SFSTr4bB7rLRsJwcScJoPSQW0INxZG4gd78DU=
Subject key identifier:   9D:C8:9B:D8:91:E4:05:7D:50:DA:7F:CE:06:47:6F:EF:D8:26:74:64
Certificate issuer:       /CN=EB2D46D00CD40AC7FF86006BE9B6602228B5A07A
Certificate serial:       5478BB5E02E0DB58D6BFAC6D5F2FC3E1F0A90815
Authority key identifier: EB:2D:46:D0:0C:D4:0A:C7:FF:86:00:6B:E9:B6:60:22:28:B5:A0:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2D46D00CD40AC7FF86006BE9B6602228B5A07A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/1/323830343a346336343a3a2f33322d313238203d3e20323637333638.roa
Signing time:             Thu 06 Mar 2025 11:22:11 +0000
ROA not before:           Thu 06 Mar 2025 11:17:11 +0000
ROA not after:            Thu 05 Mar 2026 11:22:11 +0000
asID:                     267368
IP address blocks:        2804:4c64::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:78:bb:5e:02:e0:db:58:d6:bf:ac:6d:5f:2f:c3:e1:f0:a9:08:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2D46D00CD40AC7FF86006BE9B6602228B5A07A
        Validity
            Not Before: Mar  6 11:17:11 2025 GMT
            Not After : Mar  5 11:22:11 2026 GMT
        Subject: CN=9DC89BD891E4057D50DA7FCE06476FEFD8267464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:ff:55:cf:87:98:56:5c:d1:6c:3f:36:c9:
                    e7:ba:d3:ea:44:dc:32:2c:5a:b8:83:46:65:75:7c:
                    1e:0d:af:5c:73:50:68:6b:ca:44:41:f3:a7:0c:13:
                    bf:f0:c2:63:e4:d2:bc:4b:5d:d1:a1:be:0d:71:1c:
                    f2:b4:44:f5:97:85:38:99:d3:79:e0:ea:c8:83:7c:
                    5a:f2:fe:00:4d:7d:e0:44:0c:af:61:f3:30:0c:26:
                    58:e1:b8:62:68:2b:5f:5f:1c:91:33:cf:c9:08:28:
                    5b:68:ae:c1:47:c2:6f:d4:c2:08:f2:70:4e:c1:d6:
                    b9:5f:8e:7f:63:c0:fe:47:14:74:c4:5a:30:48:23:
                    16:6d:c4:ac:1a:c3:a4:68:c3:98:47:55:98:c1:5c:
                    9d:a9:c9:2c:a2:6f:49:f8:fe:5f:bf:9a:a7:99:7d:
                    30:99:17:bc:17:9e:f7:04:79:a1:86:44:97:9e:9f:
                    60:f0:09:87:4a:10:24:ed:ef:67:84:6e:e1:ce:04:
                    43:11:dc:84:16:e1:ec:c4:80:7f:75:e3:27:55:3a:
                    0e:8e:e4:7b:7e:a3:89:2b:f7:f7:9c:81:29:8b:19:
                    f8:8f:d2:70:0d:59:1b:fe:86:65:41:6b:29:bd:c1:
                    07:07:9b:f6:cf:5a:eb:66:e6:5d:d2:2b:31:d6:25:
                    33:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C8:9B:D8:91:E4:05:7D:50:DA:7F:CE:06:47:6F:EF:D8:26:74:64
            X509v3 Authority Key Identifier:
                keyid:EB:2D:46:D0:0C:D4:0A:C7:FF:86:00:6B:E9:B6:60:22:28:B5:A0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/1/EB2D46D00CD40AC7FF86006BE9B6602228B5A07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2D46D00CD40AC7FF86006BE9B6602228B5A07A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/1/323830343a346336343a3a2f33322d313238203d3e20323637333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c64::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:f0:72:01:0d:9e:9a:5d:ca:a0:aa:36:5e:c2:09:20:c5:e3:
         f1:26:87:09:3f:46:d8:67:ca:50:78:38:53:2e:33:b4:97:f3:
         06:b3:ad:25:ec:7e:26:90:0c:16:eb:66:bf:e8:ad:8e:e7:a7:
         b1:0c:68:ec:79:cb:e5:72:4a:7c:b7:a9:67:37:50:bb:a4:18:
         b9:47:46:5f:10:e3:d1:65:55:40:25:62:6c:21:2a:2b:f4:2b:
         f3:10:00:dd:b0:29:d4:58:cc:e4:fa:ed:5f:e8:7c:b5:55:cb:
         45:ba:19:db:c6:ea:4c:30:ef:23:dc:b8:b0:4a:7f:37:f6:85:
         65:9d:e7:1a:43:90:ce:d3:70:c8:d6:9f:2b:d6:9d:cb:d5:63:
         78:2d:7f:42:f5:83:cd:69:97:59:a3:ac:ae:e2:25:6e:45:e2:
         fe:3f:5b:da:bc:05:b9:ec:ef:e1:bd:12:d5:90:c8:ce:da:0c:
         16:56:b4:d1:a9:ef:11:8c:4b:cb:a5:41:41:76:f1:c0:60:d7:
         3f:26:0d:e9:c6:ee:5f:0b:e2:2b:7a:9a:61:3d:fa:aa:90:16:
         fd:49:04:10:57:43:e2:b3:71:f4:d0:04:fa:05:47:8a:67:24:
         4f:16:13:88:9d:a2:1c:84:06:01:2a:c8:53:0f:51:ec:65:cd:
         cd:05:7e:bc
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUVHi7XgLg21jWv6xtXy/D4fCpCBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIyRDQ2RDAwQ0Q0MEFDN0ZGODYwMDZCRTlCNjYwMjIy
OEI1QTA3QTAeFw0yNTAzMDYxMTE3MTFaFw0yNjAzMDUxMTIyMTFaMDMxMTAvBgNV
BAMTKDlEQzg5QkQ4OTFFNDA1N0Q1MERBN0ZDRTA2NDc2RkVGRDgyNjc0NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXv9Vz4eYVlzRbD82yee60+pE
3DIsWriDRmV1fB4Nr1xzUGhrykRB86cME7/wwmPk0rxLXdGhvg1xHPK0RPWXhTiZ
03ng6siDfFry/gBNfeBEDK9h8zAMJljhuGJoK19fHJEzz8kIKFtorsFHwm/Uwgjy
cE7B1rlfjn9jwP5HFHTEWjBIIxZtxKwaw6Row5hHVZjBXJ2pySyib0n4/l+/mqeZ
fTCZF7wXnvcEeaGGRJeen2DwCYdKECTt72eEbuHOBEMR3IQW4ezEgH914ydVOg6O
5Ht+o4kr9/ecgSmLGfiP0nANWRv+hmVBaym9wQcHm/bPWutm5l3SKzHWJTNlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUncib2JHkBX1Q2n/OBkdv79gmdGQwHwYDVR0j
BBgwFoAU6y1G0AzUCsf/hgBr6bZgIii1oHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWptUkdyZ2J3cWhNUnE5VGtrNmJLaEp1ODlrcmJxRGRqaDZEdE5RWlR2
dGIvMS9FQjJENDZEMDBDRDQwQUM3RkY4NjAwNkJFOUI2NjAyMjI4QjVBMDdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCMkQ0NkQwMENENDBBQzdG
Rjg2MDA2QkU5QjY2MDIyMjhCNUEwN0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VqbVJHcmdid3FoTVJxOVRrazZiS2hKdTg5a3JicURkamg2RHROUVpUdnRiLzEv
MzIzODMwMzQzYTM0NjMzNjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBExkMA0GCSqGSIb3DQEBCwUAA4IBAQBq8HIB
DZ6aXcqgqjZewgkgxePxJocJP0bYZ8pQeDhTLjO0l/MGs60l7H4mkAwW62a/6K2O
56exDGjsecvlckp8t6lnN1C7pBi5R0ZfEOPRZVVAJWJsISor9CvzEADdsCnUWMzk
+u1f6Hy1VctFuhnbxupMMO8j3LiwSn839oVlnecaQ5DO03DI1p8r1p3L1WN4LX9C
9YPNaZdZo6yu4iVuReL+P1vavAW57O/hvRLVkMjO2gwWVrTRqe8RjEvLpUFBdvHA
YNc/Jg3pxu5fC+IrepphPfqqkBb9SQQQV0Pis3H00AT6BUeKZyRPFhOInaIchAYB
KshTD1HsZc3NBX68
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:06 2025 by rpki-client