Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sXNWVBBdYk7vZrBcBoTQ71ZAKGoiNsdJ9Y6tpGSA8PU/0/323830343a363963303a3a2f33322d3334203d3e20323730323839.roa
File:                     323830343a363963303a3a2f33322d3334203d3e20323730323839.roa (raw, json)
Hash identifier:          UkveLPpULWMCVVTymiA8RRbR1wpgWCtXJx0m5GKlYYk=
Subject key identifier:   23:22:95:BD:45:B6:CE:41:49:01:EA:2C:0E:0B:D6:14:CF:17:39:7F
Certificate issuer:       /CN=EBB17130920CEE19020C0AB106B5591EC5B5060B
Certificate serial:       0638D0E776848765FA57CFB6F48F06624D89F10D
Authority key identifier: EB:B1:71:30:92:0C:EE:19:02:0C:0A:B1:06:B5:59:1E:C5:B5:06:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB17130920CEE19020C0AB106B5591EC5B5060B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sXNWVBBdYk7vZrBcBoTQ71ZAKGoiNsdJ9Y6tpGSA8PU/0/323830343a363963303a3a2f33322d3334203d3e20323730323839.roa
Signing time:             Fri 27 Dec 2024 21:37:53 +0000
ROA not before:           Fri 27 Dec 2024 21:32:53 +0000
ROA not after:            Fri 26 Dec 2025 21:37:53 +0000
asID:                     270289
IP address blocks:        2804:69c0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:38:d0:e7:76:84:87:65:fa:57:cf:b6:f4:8f:06:62:4d:89:f1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB17130920CEE19020C0AB106B5591EC5B5060B
        Validity
            Not Before: Dec 27 21:32:53 2024 GMT
            Not After : Dec 26 21:37:53 2025 GMT
        Subject: CN=232295BD45B6CE414901EA2C0E0BD614CF17397F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:05:97:d9:1a:9d:60:43:da:b1:06:9a:91:
                    d8:8b:e8:1c:0c:36:3f:7a:e7:bb:87:ed:d1:22:52:
                    53:07:18:be:f9:3b:00:60:ad:fb:1b:d8:9b:ea:50:
                    01:fd:22:2a:41:ed:13:4a:12:05:c8:d1:40:86:2d:
                    32:6c:99:e1:87:39:12:33:58:ad:29:64:31:f3:e1:
                    52:26:d4:ae:e7:60:da:06:2d:1a:65:95:d5:d9:64:
                    51:ee:c7:06:54:cd:3a:f2:ca:87:30:a2:6d:06:16:
                    1c:9e:ca:7a:c3:d8:e6:2f:99:fc:e0:11:4c:dd:0c:
                    26:37:e1:1c:34:6b:32:04:67:85:1e:18:18:8b:40:
                    48:c4:d7:09:26:e5:a4:d5:39:d0:66:f1:53:c0:1a:
                    5c:18:c0:c3:0b:09:72:91:fd:f0:50:fc:f3:64:02:
                    aa:35:dd:51:07:64:cd:46:35:62:78:cb:4f:b6:f1:
                    3f:57:76:ce:89:22:89:38:3e:3f:13:af:53:10:b8:
                    4a:c6:9c:85:c4:76:6a:44:f2:c6:5c:15:01:71:58:
                    75:e0:d8:cc:4b:9f:a1:60:1e:50:6c:a1:80:c9:14:
                    ba:b7:02:e6:ea:46:6b:49:05:01:8e:75:91:b7:4c:
                    bd:a8:e2:21:ca:65:69:ef:99:43:61:c2:1d:b1:af:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:22:95:BD:45:B6:CE:41:49:01:EA:2C:0E:0B:D6:14:CF:17:39:7F
            X509v3 Authority Key Identifier:
                keyid:EB:B1:71:30:92:0C:EE:19:02:0C:0A:B1:06:B5:59:1E:C5:B5:06:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sXNWVBBdYk7vZrBcBoTQ71ZAKGoiNsdJ9Y6tpGSA8PU/0/EBB17130920CEE19020C0AB106B5591EC5B5060B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB17130920CEE19020C0AB106B5591EC5B5060B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sXNWVBBdYk7vZrBcBoTQ71ZAKGoiNsdJ9Y6tpGSA8PU/0/323830343a363963303a3a2f33322d3334203d3e20323730323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:6d:f9:bc:75:d1:57:7c:e5:70:c7:a9:3d:c6:43:af:d7:df:
         3d:76:ce:d0:0d:1a:a9:92:52:1c:3b:4d:f4:20:70:3b:38:6f:
         44:b5:50:ef:69:35:89:d1:5c:93:5d:4f:20:30:81:bb:a2:94:
         9b:c5:cb:af:7b:52:f7:32:05:92:e0:6c:58:69:56:92:ea:af:
         b9:9a:5d:02:3a:8b:c7:c6:4f:33:01:c4:4e:96:62:2e:22:c1:
         28:5a:9c:75:e4:50:a5:25:33:52:1a:12:df:11:8a:9e:50:41:
         d1:4e:a9:94:1d:38:6a:b5:08:d4:5d:6f:92:81:a9:ed:b4:92:
         c4:30:09:c1:5e:bb:8a:52:1f:ca:34:5b:8e:d3:83:13:8b:c9:
         71:97:a5:b5:44:49:ba:5c:5f:98:c6:fd:29:ee:33:7f:70:46:
         8b:7e:d1:a4:fb:f0:0a:1f:9c:67:c3:1a:fb:ea:f2:c5:66:76:
         e7:f2:fd:d3:12:4f:95:43:21:b8:e2:31:59:77:bf:14:1e:30:
         63:26:6e:9d:39:e5:61:df:dc:82:ec:9f:37:99:6c:d1:c2:31:
         0b:00:e5:2b:83:6a:64:cd:d3:2f:c4:ba:a7:0a:77:32:f3:c5:
         66:c3:43:a8:33:e7:9a:aa:b4:f5:b0:6f:9e:45:c8:3e:25:90:
         42:07:00:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:14 2025 by rpki-client