Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/323830343a6636633a3a2f33322d3438203d3e20323633353835.roa
File:                     323830343a6636633a3a2f33322d3438203d3e20323633353835.roa (raw, json)
Hash identifier:          UNT406dSy0y7xspDZc1qRwEyrLto0fFP25AncrEW2X0=
Subject key identifier:   4F:A2:51:0A:1A:98:9B:2D:83:AB:91:1D:CF:6B:E8:1E:89:64:B4:6D
Certificate issuer:       /CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
Certificate serial:       6E73E48EA59CA0BD97849F3E3FBC890CC3417E92
Authority key identifier: EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/323830343a6636633a3a2f33322d3438203d3e20323633353835.roa
Signing time:             Tue 02 Jan 2024 07:00:00 +0000
ROA not before:           Tue 02 Jan 2024 06:55:00 +0000
ROA not after:            Thu 02 Jan 2025 07:00:00 +0000
asID:                     263585
IP address blocks:        2804:f6c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:73:e4:8e:a5:9c:a0:bd:97:84:9f:3e:3f:bc:89:0c:c3:41:7e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
        Validity
            Not Before: Jan  2 06:55:00 2024 GMT
            Not After : Jan  2 07:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:61:ac:ce:83:4f:8e:2f:61:28:cf:34:e4:
                    7b:03:53:79:d4:e5:d7:8c:15:2b:19:93:53:70:02:
                    1f:b2:a7:01:dd:83:66:54:a5:86:2a:be:31:1a:a5:
                    90:1d:2f:35:4a:e0:4e:d0:b2:bf:2b:62:cc:08:ac:
                    90:a3:f5:60:14:81:b9:ed:db:e6:46:c3:14:aa:5f:
                    4d:54:c3:ae:0b:28:55:48:d0:80:a2:40:9d:9f:4a:
                    40:10:55:b4:9a:00:e8:3b:88:d4:a1:29:93:32:f0:
                    92:8e:05:f5:20:e9:cc:97:4d:b0:bf:6b:15:77:13:
                    bc:5a:8f:9f:cb:b2:91:fd:8b:69:2e:ce:67:9d:80:
                    ad:3a:88:4a:3a:aa:73:85:68:a6:bd:0e:51:64:8c:
                    fd:e3:14:41:76:1d:38:85:a7:a9:2f:cd:a8:95:09:
                    83:b9:77:62:22:d2:cb:03:81:b4:9e:2a:dc:a2:fb:
                    8c:57:ce:ec:34:14:6a:b8:f3:ee:d4:d2:e0:a0:bd:
                    37:97:dc:75:cf:4b:76:56:24:75:35:e9:2c:f5:6a:
                    53:42:b2:70:ba:9c:3e:ba:25:be:57:83:7d:55:20:
                    28:03:28:99:b7:c2:4c:28:c8:74:cc:87:b2:79:d7:
                    59:b7:30:a4:55:c2:51:20:da:f2:48:40:65:56:67:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A2:51:0A:1A:98:9B:2D:83:AB:91:1D:CF:6B:E8:1E:89:64:B4:6D
            X509v3 Authority Key Identifier:
                keyid:EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/323830343a6636633a3a2f33322d3438203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:a6:4a:f9:9f:66:f0:fd:3c:c8:dd:31:d9:28:d3:7a:f9:1e:
         8e:9b:82:7f:61:75:d9:c3:52:83:0f:e6:98:e4:b0:10:81:0e:
         e1:ad:26:f1:8d:16:67:a8:ae:72:79:46:6b:e0:b0:8d:4b:25:
         b5:78:ee:ea:d2:4f:d1:93:f0:c6:81:b3:3f:72:4e:30:58:ae:
         a9:7e:e1:8e:04:50:7e:67:bc:09:73:19:85:ec:d5:0b:88:c1:
         6c:c4:0e:46:e1:b5:34:cc:ee:3a:b0:4b:fd:4e:35:dc:3e:a4:
         00:9c:39:69:91:d4:34:9b:01:72:84:78:2f:a2:63:dc:ec:5b:
         32:53:95:5f:f2:34:76:f8:71:41:ba:6e:73:7b:11:fd:96:39:
         22:13:72:b6:9e:19:ac:47:c0:e6:4d:25:09:15:40:b6:d8:cd:
         37:b7:a2:e8:0a:93:18:92:e4:a8:0c:cd:62:63:c4:ae:18:2f:
         9d:be:90:64:20:5a:a9:01:c2:02:5b:ce:2a:ed:eb:53:38:16:
         aa:df:56:1f:92:9f:ea:54:38:ac:03:05:3e:50:db:1b:b1:71:
         5d:68:5b:84:63:a1:9f:ce:dc:49:55:5f:be:3b:c6:c8:1e:17:
         09:ff:af:6e:93:78:26:3b:fb:e0:f2:b8:d2:ed:89:0e:7f:89:
         6f:8c:49:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:07:24 2025 by rpki-client