Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a3a2f33322d3438203d3e20323632343137.roa
File:                     323830343a6532343a3a2f33322d3438203d3e20323632343137.roa (raw, json)
Hash identifier:          /C0fiyRD6aNaMP1gKAty/LGeUsA+fRkOEAO16yTZD+4=
Subject key identifier:   2A:86:CB:24:9F:7B:43:81:AC:5D:D4:36:49:2F:32:55:66:ED:74:BC
Certificate issuer:       /CN=EB846310FC1F1BA82FBB3923B2F76ED66DA86097
Certificate serial:       135AA6788767EDA42EC050B727DC16027772EFC8
Authority key identifier: EB:84:63:10:FC:1F:1B:A8:2F:BB:39:23:B2:F7:6E:D6:6D:A8:60:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a3a2f33322d3438203d3e20323632343137.roa
Signing time:             Fri 23 Aug 2024 16:24:48 +0000
ROA not before:           Fri 23 Aug 2024 16:19:48 +0000
ROA not after:            Fri 22 Aug 2025 16:24:48 +0000
asID:                     262417
IP address blocks:        2804:e24::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5a:a6:78:87:67:ed:a4:2e:c0:50:b7:27:dc:16:02:77:72:ef:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB846310FC1F1BA82FBB3923B2F76ED66DA86097
        Validity
            Not Before: Aug 23 16:19:48 2024 GMT
            Not After : Aug 22 16:24:48 2025 GMT
        Subject: CN=2A86CB249F7B4381AC5DD436492F325566ED74BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:bd:66:13:60:dc:04:af:1b:29:e0:c4:fc:
                    cb:d6:3b:d4:84:80:c6:13:0e:0a:12:c0:24:eb:12:
                    c9:6f:08:f6:12:a1:56:7b:9b:9f:3a:da:62:9c:c5:
                    aa:9b:a8:c5:6e:82:b2:2d:c4:90:42:44:23:29:f3:
                    8b:2d:9c:53:62:98:e6:cd:69:b6:94:7d:88:91:c3:
                    62:90:3b:80:d3:2b:08:ec:8b:cc:e5:44:f9:f0:75:
                    12:09:e6:34:d5:84:b5:53:83:ea:51:34:fc:a8:86:
                    4e:be:a4:ed:96:ee:8e:92:e9:07:97:0a:67:6b:96:
                    64:fb:00:4d:50:d0:2d:3a:3a:95:34:44:1b:c6:fe:
                    cf:25:dc:43:e1:bb:2c:5c:dd:92:b8:cd:cc:32:f9:
                    bd:89:d7:fd:3a:87:7b:fd:c2:df:06:51:cb:7d:19:
                    37:3f:1c:39:58:a2:dc:7c:18:0f:0f:b6:80:38:df:
                    8a:82:59:cd:81:55:71:b4:a9:41:77:80:1e:80:9e:
                    bd:48:ee:81:2c:9c:78:d2:37:29:bf:e3:22:72:6b:
                    1a:ad:4b:11:2d:b8:e5:d8:92:95:f8:9d:80:0b:ae:
                    0e:ed:73:a9:a2:63:5d:9b:d6:82:b3:b1:8e:2a:60:
                    81:8a:17:e3:3f:ec:1a:44:cc:f3:ff:42:48:31:18:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:86:CB:24:9F:7B:43:81:AC:5D:D4:36:49:2F:32:55:66:ED:74:BC
            X509v3 Authority Key Identifier:
                keyid:EB:84:63:10:FC:1F:1B:A8:2F:BB:39:23:B2:F7:6E:D6:6D:A8:60:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB846310FC1F1BA82FBB3923B2F76ED66DA86097.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a3a2f33322d3438203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e24::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:52:d8:fb:73:c5:42:b1:a1:74:20:06:a4:ff:f4:76:79:b2:
         45:47:83:91:a9:0d:25:2d:4e:19:1e:cb:9b:9f:b8:86:c5:91:
         95:46:4e:0f:2b:26:37:b0:f5:48:c1:37:96:9e:da:3f:d7:35:
         2e:c0:e4:8c:85:cb:de:24:12:b1:06:03:3e:b1:89:32:2e:13:
         0a:7c:9c:5d:28:a9:56:59:6f:50:31:2c:bd:6c:51:e7:18:d4:
         e5:dc:b0:53:0a:04:19:36:69:9d:1a:e4:55:3e:c9:51:3a:3c:
         15:8a:56:80:88:3e:43:0b:47:fe:70:9f:26:2f:51:61:14:cc:
         0e:a0:e9:5a:e1:b0:97:4d:98:6e:5e:3c:11:0c:0d:1c:56:e3:
         6f:98:2b:9d:d2:0e:41:13:96:af:be:c5:38:42:57:25:95:d2:
         f1:1f:36:9f:d2:ac:bd:c8:01:10:2c:30:76:07:00:02:f4:68:
         60:f6:b5:d7:46:32:4b:7f:82:e8:33:3b:eb:a3:0d:7c:0c:90:
         33:79:28:60:89:7f:f5:78:a3:15:41:00:ef:e0:d6:a9:c8:42:
         ae:64:43:93:f7:99:ce:70:67:9c:a6:e3:b6:b5:64:81:ee:4f:
         0f:3d:ae:e7:54:f8:e2:30:dd:af:d3:8b:f7:a5:cf:b4:4a:9e:
         51:69:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:53 2025 by rpki-client