Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/323830343a313534383a3a2f33322d3438203d3e20323632363631.roa
File:                     323830343a313534383a3a2f33322d3438203d3e20323632363631.roa (raw, json)
Hash identifier:          fDNk7WYvfETnylSMgQzWfLYJV+UC4XP4uGXurBov028=
Subject key identifier:   78:38:95:7A:08:82:AE:5E:EE:E0:57:BC:49:0C:CD:DF:F0:31:D1:E8
Certificate issuer:       /CN=2E99EC5426678FEDA87CF25917DEEA66BCE0738C
Certificate serial:       09802374B9C93D528D8FD93DC567533E757C9807
Authority key identifier: 2E:99:EC:54:26:67:8F:ED:A8:7C:F2:59:17:DE:EA:66:BC:E0:73:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/323830343a313534383a3a2f33322d3438203d3e20323632363631.roa
Signing time:             Wed 19 Mar 2025 16:03:52 +0000
ROA not before:           Wed 19 Mar 2025 15:58:52 +0000
ROA not after:            Wed 18 Mar 2026 16:03:52 +0000
asID:                     262661
IP address blocks:        2804:1548::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:80:23:74:b9:c9:3d:52:8d:8f:d9:3d:c5:67:53:3e:75:7c:98:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E99EC5426678FEDA87CF25917DEEA66BCE0738C
        Validity
            Not Before: Mar 19 15:58:52 2025 GMT
            Not After : Mar 18 16:03:52 2026 GMT
        Subject: CN=7838957A0882AE5EEEE057BC490CCDDFF031D1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:f5:da:52:10:d9:ba:9c:fc:8f:1a:b2:36:
                    14:50:62:53:11:d9:76:03:99:ee:1f:db:c4:6d:18:
                    ea:6e:c5:5c:cf:81:34:25:45:6a:d2:4e:5d:c6:9c:
                    85:94:f9:0e:79:3f:c0:86:50:f7:4b:5b:33:3e:42:
                    17:3a:78:60:03:b7:61:8e:a3:d6:f6:b8:0e:c8:e4:
                    51:03:5d:49:9b:d4:bf:11:cd:8f:55:87:09:df:4b:
                    1c:76:05:2b:68:1c:19:80:a8:78:2c:3f:19:87:6a:
                    6c:d4:b4:88:51:7b:08:3e:48:6f:0b:d1:46:c1:e3:
                    3c:14:1f:22:e6:1b:f3:5b:3b:d4:22:60:24:f6:6b:
                    b7:d0:fc:55:77:5f:80:33:ad:cb:17:e9:f5:f5:b0:
                    9a:75:b6:10:cc:b9:9b:5f:0b:db:28:45:ae:81:08:
                    b1:33:f2:e5:11:f3:a2:60:20:37:e4:e3:43:ac:47:
                    93:84:cf:14:63:54:08:8b:11:a0:1a:50:ff:43:61:
                    30:51:73:d2:40:9f:30:5f:e0:46:1d:dc:0e:44:f2:
                    9a:5c:ee:2e:6a:76:26:c4:5e:a8:26:2b:1b:ae:f8:
                    31:d4:9c:1a:45:68:70:2e:7b:5b:a8:12:6c:74:50:
                    cf:63:a7:40:26:62:b9:a2:45:83:1f:06:57:cf:0a:
                    ce:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:38:95:7A:08:82:AE:5E:EE:E0:57:BC:49:0C:CD:DF:F0:31:D1:E8
            X509v3 Authority Key Identifier:
                keyid:2E:99:EC:54:26:67:8F:ED:A8:7C:F2:59:17:DE:EA:66:BC:E0:73:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/323830343a313534383a3a2f33322d3438203d3e20323632363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1548::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:eb:cf:85:03:d6:aa:01:c1:78:58:8f:0c:e3:d0:d6:9d:4f:
         5b:91:6b:2d:4f:8e:be:c0:02:fe:af:fd:9e:58:e0:20:36:cc:
         80:f4:d0:7b:1f:df:22:f7:b1:83:9b:dd:28:78:ab:62:0b:39:
         3f:b6:5e:51:bf:9a:83:63:7d:27:ad:9b:c8:1b:8b:50:4d:a5:
         8a:59:63:c3:82:df:53:48:76:0a:a2:c2:2e:cd:53:88:a5:64:
         5f:51:0f:0f:32:ca:c7:47:62:17:87:3f:86:7f:5f:59:ba:a9:
         43:46:ac:b4:fb:6a:c1:2a:dc:c4:37:e3:95:8c:fa:51:42:94:
         41:17:d6:53:00:00:f0:1b:bc:4c:c7:95:f9:7a:a8:f3:a4:19:
         30:57:cb:e5:a6:de:b8:49:70:61:4f:65:42:1d:f9:fc:87:17:
         05:e0:f7:e5:64:a7:e0:d5:5a:a4:a6:e2:58:46:2d:79:c8:74:
         ed:46:dc:2e:66:a4:04:49:03:05:62:8e:42:8c:dd:e4:71:0e:
         89:31:48:4a:b7:78:2c:97:66:14:11:7c:c3:c7:0f:52:98:eb:
         45:da:1e:2a:75:bb:3a:2f:d4:2f:f8:34:66:db:0a:ab:67:ab:
         a5:76:71:16:00:31:f6:e1:5a:65:d4:d2:ab:75:ab:d7:b0:e3:
         06:e1:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:35 2025 by rpki-client