Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a313030303a3a2f33362d3336203d3e20323636343133.roa
File:                     323830343a333736633a313030303a3a2f33362d3336203d3e20323636343133.roa (raw, json)
Hash identifier:          Y3jWiwSXdW2jE/71wg9XMEgsatOONvEODyG51VTRdFU=
Subject key identifier:   65:E2:05:B0:4C:21:11:4F:45:C2:AC:7E:DF:CD:04:44:4C:10:5E:A7
Certificate issuer:       /CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
Certificate serial:       0E3445FF8779E07498FDD2B231FD839FEB24F20D
Authority key identifier: 76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a313030303a3a2f33362d3336203d3e20323636343133.roa
Signing time:             Thu 04 Jul 2024 02:17:21 +0000
ROA not before:           Thu 04 Jul 2024 02:12:21 +0000
ROA not after:            Thu 03 Jul 2025 02:17:21 +0000
asID:                     266413
IP address blocks:        2804:376c:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:34:45:ff:87:79:e0:74:98:fd:d2:b2:31:fd:83:9f:eb:24:f2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
        Validity
            Not Before: Jul  4 02:12:21 2024 GMT
            Not After : Jul  3 02:17:21 2025 GMT
        Subject: CN=65E205B04C21114F45C2AC7EDFCD04444C105EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6b:5a:6a:bb:ba:3c:4f:ad:2b:ad:ff:03:01:
                    5d:f3:f5:52:d8:2b:0f:1b:39:86:62:3f:08:32:bb:
                    da:24:97:1b:05:78:22:d0:3b:15:23:d7:d9:b4:92:
                    75:2a:92:f8:ad:d8:9e:26:0d:f7:6f:3d:76:04:f0:
                    b4:83:90:8a:34:1c:b0:0d:a7:64:80:b2:d0:4b:0c:
                    b3:53:b6:aa:fa:dc:b1:c4:aa:69:c2:c1:0c:fb:7b:
                    dd:67:15:2d:35:60:94:a6:d3:42:c5:8a:27:20:c8:
                    42:81:59:4f:e0:a1:83:7b:28:da:b1:ca:32:d6:d7:
                    f6:20:18:7f:5f:ff:10:68:41:9c:67:52:33:bc:d3:
                    d5:d3:52:82:f1:93:a3:32:3c:04:ef:8c:95:ea:15:
                    38:05:22:a1:6a:0d:60:c5:00:a5:fd:10:75:92:a1:
                    01:bc:17:2a:54:af:8f:36:37:85:05:6a:4f:22:81:
                    82:ca:ce:c2:7c:cd:1b:d8:a0:66:87:c2:e1:a3:84:
                    23:ad:88:2f:96:3c:a5:7c:28:74:ac:20:58:79:ad:
                    31:4f:0d:3c:53:e5:2e:39:26:6a:45:f3:10:38:80:
                    a4:a1:89:3c:eb:2d:bb:be:9c:91:6c:2a:9a:5e:79:
                    57:83:5c:2f:0c:7a:e4:29:29:43:23:0a:a1:53:dc:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E2:05:B0:4C:21:11:4F:45:C2:AC:7E:DF:CD:04:44:4C:10:5E:A7
            X509v3 Authority Key Identifier:
                keyid:76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a313030303a3a2f33362d3336203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:376c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         99:b1:14:b9:c8:68:c0:5c:18:cb:95:c3:d8:9d:c4:b6:34:ad:
         a7:35:87:53:7e:67:d5:70:cd:a7:b5:e0:34:6e:e9:08:f1:1d:
         42:4c:16:9f:1d:cf:28:df:0c:c7:0f:7c:a5:81:6f:7e:32:28:
         97:b8:11:e7:34:16:79:dc:73:54:da:26:63:44:29:23:1c:72:
         7e:c6:76:6e:38:2a:6b:47:aa:8f:24:2d:61:8b:7d:cb:23:90:
         5b:0c:07:95:54:94:df:d4:07:22:70:05:da:23:81:46:8a:f6:
         4d:55:3b:5e:de:d3:17:bc:3f:4e:46:46:92:63:cc:10:7f:e1:
         2a:c8:8b:c8:80:35:f6:28:6a:44:e7:83:cd:c2:5d:45:cb:4a:
         74:11:53:1e:45:bf:9d:2c:8c:5f:7a:68:b8:5f:64:e0:2a:2c:
         86:7e:77:20:26:5a:2c:ce:5a:d7:f8:fe:cc:ba:c5:ff:bb:fb:
         8d:2f:57:04:d6:03:d6:fb:0f:e9:1b:1c:4c:84:0d:5a:25:1d:
         a7:17:d3:93:68:ab:72:86:c2:2d:4b:ec:d4:84:1e:ec:ba:f2:
         a2:c2:af:6c:c1:6d:25:70:66:5f:66:52:6d:c9:85:74:07:0d:
         50:64:80:cf:87:a8:37:52:ad:fb:ce:0a:fa:66:47:aa:ca:ae:
         03:65:0a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:42 2025 by rpki-client