Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a383030303a3a2f33342d3335203d3e20323731303138.roa
File:                     323830343a373530343a383030303a3a2f33342d3335203d3e20323731303138.roa (raw, json)
Hash identifier:          qx6+WUtPkuz/nQc6Z2QEZz68aZYmeHoFULkCN1qRrMU=
Subject key identifier:   81:07:C4:46:E6:4C:F1:E4:F0:25:EC:10:63:67:93:DF:27:94:9D:43
Certificate issuer:       /CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
Certificate serial:       64EDDF708C7C483568F6A317A333F19BFB0E2E49
Authority key identifier: EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a383030303a3a2f33342d3335203d3e20323731303138.roa
Signing time:             Fri 07 Mar 2025 02:33:31 +0000
ROA not before:           Fri 07 Mar 2025 02:28:31 +0000
ROA not after:            Fri 06 Mar 2026 02:33:31 +0000
asID:                     271018
IP address blocks:        2804:7504:8000::/34 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ed:df:70:8c:7c:48:35:68:f6:a3:17:a3:33:f1:9b:fb:0e:2e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
        Validity
            Not Before: Mar  7 02:28:31 2025 GMT
            Not After : Mar  6 02:33:31 2026 GMT
        Subject: CN=8107C446E64CF1E4F025EC10636793DF27949D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:f0:db:91:45:c6:7b:d3:0a:2c:d0:e1:e1:
                    02:d6:fb:cb:63:db:4f:1c:35:09:b6:87:30:e5:49:
                    23:f9:59:d5:bf:d5:52:61:69:58:34:4d:11:7a:55:
                    2c:6a:77:8b:7e:d3:17:01:3f:da:dc:df:cf:d2:5b:
                    75:43:03:33:9e:89:0a:49:c3:5c:e9:a9:29:c5:19:
                    6e:95:09:18:30:9b:55:42:78:e1:1d:c9:a7:69:03:
                    0f:8a:41:28:a3:9d:0b:04:0a:61:21:58:58:a2:43:
                    ac:5a:7e:c6:26:4a:80:a5:83:12:79:8c:a7:38:03:
                    07:6c:8b:d3:3a:0b:79:b3:9e:7d:f8:5c:e5:45:51:
                    44:13:6a:5c:87:10:9e:a3:c4:ad:b7:58:76:89:fe:
                    4f:50:89:55:af:00:07:bb:af:83:89:75:90:84:33:
                    2f:0f:f4:de:a3:f0:b5:95:84:2e:27:0e:36:3f:b7:
                    59:98:7c:1b:4e:4a:c0:65:cd:a1:db:f2:d8:d3:b5:
                    85:91:c1:f9:5e:96:91:4a:35:f6:ae:75:b8:15:3a:
                    9a:f1:68:f2:81:b8:f0:0e:d7:8b:86:3b:a1:e6:d5:
                    6d:53:5a:65:c1:2a:a7:1e:9e:dd:8c:e0:38:22:d5:
                    f4:aa:b7:e3:51:89:37:5b:04:12:ac:bc:21:a2:66:
                    6d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:07:C4:46:E6:4C:F1:E4:F0:25:EC:10:63:67:93:DF:27:94:9D:43
            X509v3 Authority Key Identifier:
                keyid:EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/323830343a373530343a383030303a3a2f33342d3335203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7504:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1f:c9:c2:f2:f9:42:56:13:7b:25:bb:2f:b1:b2:c4:d1:84:5f:
         35:5c:14:6f:d0:37:ce:99:6f:45:70:ea:a5:9e:95:05:d2:b1:
         b3:78:ed:80:06:b7:98:d7:5e:1e:5d:8b:2a:38:15:83:a8:e6:
         ca:a2:c9:ad:1b:49:0f:07:20:06:e1:d5:c4:f1:46:ef:eb:f2:
         e5:93:12:25:6b:b7:d1:e1:77:3d:90:95:77:e0:56:22:12:51:
         3a:00:7b:06:41:7a:3b:93:5d:fc:19:48:48:b5:63:b5:a4:aa:
         04:81:72:27:9b:b6:58:cf:be:b5:3e:75:ad:c0:78:0a:3f:de:
         0d:e2:56:d2:b1:44:eb:3b:56:48:6d:d0:7a:53:f9:2a:11:96:
         40:4f:40:fb:d5:18:50:32:97:dc:68:a5:cb:d2:50:1e:cf:15:
         a5:7e:e8:0d:2d:f4:96:55:43:1d:7f:2f:34:12:1e:8c:09:12:
         cf:e3:5b:84:a9:19:79:bb:2d:17:3c:dc:1b:9f:14:71:7a:cd:
         b0:9b:46:db:ee:0f:dc:49:3d:a2:ce:12:6f:75:f4:48:43:05:
         e0:12:a0:c0:69:c0:00:f5:38:6f:93:53:a5:4b:3b:41:6b:36:
         44:09:22:e4:0a:9c:84:d4:bf:d4:ee:c9:8d:f4:bd:d3:56:ea:
         9a:e7:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:18:51 2025 by rpki-client