Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/323830343a333831343a3a2f33322d3438203d3e20323636343534.roa
File:                     323830343a333831343a3a2f33322d3438203d3e20323636343534.roa (raw, json)
Hash identifier:          EFmp+lOVQAAnIg76PX4x7ns0j+QTWegQz1CC/6XoGq8=
Subject key identifier:   EB:F9:84:86:08:70:38:25:BD:6C:AA:1F:93:4F:F7:4B:86:8D:04:72
Certificate issuer:       /CN=78A4A875BA6BBD81EBF95316342157431299CE88
Certificate serial:       79F0DF0E63E0639C053B907821B11A793430B9AB
Authority key identifier: 78:A4:A8:75:BA:6B:BD:81:EB:F9:53:16:34:21:57:43:12:99:CE:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78A4A875BA6BBD81EBF95316342157431299CE88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/323830343a333831343a3a2f33322d3438203d3e20323636343534.roa
Signing time:             Sat 25 Jan 2025 16:05:32 +0000
ROA not before:           Sat 25 Jan 2025 16:00:32 +0000
ROA not after:            Sat 24 Jan 2026 16:05:32 +0000
asID:                     266454
IP address blocks:        2804:3814::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f0:df:0e:63:e0:63:9c:05:3b:90:78:21:b1:1a:79:34:30:b9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A4A875BA6BBD81EBF95316342157431299CE88
        Validity
            Not Before: Jan 25 16:00:32 2025 GMT
            Not After : Jan 24 16:05:32 2026 GMT
        Subject: CN=EBF9848608703825BD6CAA1F934FF74B868D0472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:0c:a2:30:19:3f:83:5e:64:9d:79:60:88:
                    bc:2b:9b:1c:4c:37:13:91:36:ba:97:73:36:ee:26:
                    a3:57:9e:e0:8f:e7:c3:32:b8:e7:24:08:ff:ba:36:
                    82:cb:3a:80:a6:d1:34:18:2e:15:7e:6d:cd:a3:33:
                    46:6a:f9:3e:06:54:3f:2d:07:b3:c7:71:4f:74:c1:
                    3f:82:2b:68:66:14:6e:95:8b:d2:1f:01:e2:7b:d9:
                    81:c6:38:e1:cc:c1:bf:12:ec:06:c4:a7:9f:c0:ec:
                    8e:d1:0a:80:f0:85:87:f8:82:96:55:fe:38:47:91:
                    eb:a4:7d:c9:ea:21:3b:5f:b6:31:28:40:10:1f:55:
                    a9:a5:db:dd:8b:67:0a:a8:a7:e8:a5:c6:5d:c2:5d:
                    2b:ee:8b:06:f0:89:2e:39:4a:ed:2a:78:31:c9:69:
                    e3:a0:f6:08:e2:20:32:b3:01:68:2f:dd:02:47:64:
                    14:11:98:5a:80:ed:e1:9e:85:12:56:3b:3e:31:6a:
                    58:85:dc:34:3a:a2:6e:84:ab:5e:6e:e6:3c:66:d4:
                    8d:46:44:b4:df:40:be:17:1c:15:52:0a:32:49:8e:
                    4d:70:54:f8:22:53:83:ef:48:4d:a7:3b:f8:5c:fd:
                    01:19:42:8f:2f:2e:23:8f:da:c3:9b:24:19:ed:60:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F9:84:86:08:70:38:25:BD:6C:AA:1F:93:4F:F7:4B:86:8D:04:72
            X509v3 Authority Key Identifier:
                keyid:78:A4:A8:75:BA:6B:BD:81:EB:F9:53:16:34:21:57:43:12:99:CE:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/78A4A875BA6BBD81EBF95316342157431299CE88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78A4A875BA6BBD81EBF95316342157431299CE88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/323830343a333831343a3a2f33322d3438203d3e20323636343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3814::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:e0:13:b1:f7:ad:b6:46:99:3e:05:35:7c:c7:03:0d:ee:9a:
         3e:d6:ef:fa:8b:55:f5:b4:26:de:a1:e6:b4:39:78:9f:e5:44:
         2e:21:d6:0b:13:30:fb:35:f0:80:07:f3:c9:9e:3a:85:f8:dd:
         d7:de:17:b2:d6:f3:20:64:a0:4a:a8:4a:a9:f7:d6:f8:cc:c2:
         9a:f8:df:93:2d:99:34:65:93:0f:e7:ba:2c:42:99:04:2d:b6:
         4e:40:e9:e7:95:5e:2b:57:18:70:6b:17:7e:cd:d1:0a:b5:db:
         6d:83:1c:b8:08:5e:37:c4:8d:53:35:56:86:05:f1:5d:0f:48:
         32:0d:7b:ae:a1:2f:8c:b8:26:e6:03:2f:e2:db:c3:84:8a:84:
         a1:71:2e:e4:05:43:c7:29:0d:2e:90:45:c9:3b:0c:5b:63:a8:
         f2:61:f3:25:8d:17:4a:3a:f3:09:fe:53:a0:62:d6:28:dc:b2:
         63:c3:0b:46:99:37:a5:45:ee:66:53:ca:7d:77:87:25:4c:89:
         ec:19:35:f2:aa:84:13:4b:37:77:23:e9:80:67:4c:0e:d4:f2:
         d0:1c:8b:78:51:0f:57:d2:f9:c4:28:d8:eb:68:a9:88:d6:9a:
         8c:0d:a9:17:b4:49:5e:92:8d:1d:4a:3e:90:b3:5f:58:cb:37:
         40:b0:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:11 2025 by rpki-client