Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a373030303a3a2f33362d3336203d3e20323636343133.roa
File:                     323830343a333736633a373030303a3a2f33362d3336203d3e20323636343133.roa (raw, json)
Hash identifier:          uDo4a7sU9248pCCDloa7/qHDYN7l2uSvpM8PeTCCYLs=
Subject key identifier:   FC:DD:70:75:D1:36:63:78:D5:9B:5C:4B:80:22:64:B5:28:47:F0:EC
Certificate issuer:       /CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
Certificate serial:       43F931B7F69A058C1945BD2840C2C7093336D183
Authority key identifier: 76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a373030303a3a2f33362d3336203d3e20323636343133.roa
Signing time:             Thu 04 Jul 2024 02:17:20 +0000
ROA not before:           Thu 04 Jul 2024 02:12:20 +0000
ROA not after:            Thu 03 Jul 2025 02:17:20 +0000
asID:                     266413
IP address blocks:        2804:376c:7000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f9:31:b7:f6:9a:05:8c:19:45:bd:28:40:c2:c7:09:33:36:d1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
        Validity
            Not Before: Jul  4 02:12:20 2024 GMT
            Not After : Jul  3 02:17:20 2025 GMT
        Subject: CN=FCDD7075D1366378D59B5C4B802264B52847F0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b0:04:36:b7:92:40:ee:a0:ea:c3:4b:fb:03:
                    95:99:5c:d5:4a:2e:74:74:a7:ad:da:28:0c:e3:86:
                    70:e5:4f:9f:06:31:04:3d:dc:de:8b:e6:a0:c1:a8:
                    56:3c:41:07:8f:9c:30:bb:01:33:e9:62:00:47:03:
                    90:73:46:ef:67:22:bc:ad:d8:a9:f5:28:43:34:5e:
                    df:19:cb:58:d0:74:d4:f8:5c:2d:ec:46:51:44:2b:
                    e8:b0:9c:30:76:4a:82:32:66:cf:2d:82:43:83:20:
                    c0:0b:93:ef:dc:69:c6:b2:de:16:ee:89:ed:28:4c:
                    22:69:1d:d0:0b:7e:7a:4a:57:40:e4:11:57:24:cc:
                    ab:84:5b:ad:eb:36:8e:2b:b3:6d:11:a1:62:e4:12:
                    8c:78:8c:f8:3d:54:c1:e9:e0:d1:d7:75:cb:b8:94:
                    61:a7:37:f3:5e:bc:36:01:01:ea:fd:20:fc:95:e7:
                    a4:6c:fe:84:6b:b4:4a:38:5f:f6:10:93:9b:bf:b1:
                    5f:aa:2a:7e:83:12:a7:fa:a6:f4:9b:6c:dc:1d:2a:
                    c0:4a:59:d7:d0:57:70:ee:3d:75:7d:f5:75:06:09:
                    af:40:c2:8c:31:fc:6d:df:31:42:cd:51:b2:82:49:
                    96:c5:d2:bb:35:13:5a:58:00:c3:a7:4a:65:26:ca:
                    27:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DD:70:75:D1:36:63:78:D5:9B:5C:4B:80:22:64:B5:28:47:F0:EC
            X509v3 Authority Key Identifier:
                keyid:76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a373030303a3a2f33362d3336203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:376c:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2d:62:25:55:39:7a:07:e0:c1:44:92:4e:1f:db:62:13:74:cf:
         cc:bc:18:d6:1c:32:a3:f6:fa:e5:44:49:1f:94:d2:5f:05:c1:
         61:72:c4:47:14:57:05:74:12:bb:e0:e0:4f:8d:c5:88:99:35:
         ea:86:c4:53:d5:45:c1:0c:f4:32:e1:c5:03:eb:ae:6e:65:8e:
         de:05:60:01:55:c6:c7:4f:72:1d:ff:d5:f2:e9:89:a1:bf:cb:
         e5:43:8f:95:ed:b8:3e:26:51:b0:32:6b:d4:14:b9:16:b6:a5:
         d6:6c:73:7c:b7:63:8c:d6:f4:58:e3:6e:7a:45:e8:f0:90:8c:
         be:51:f4:39:81:83:34:78:3b:ca:81:19:fa:8e:2d:6c:36:7c:
         dd:42:67:00:73:73:24:16:fd:f4:db:61:e8:3f:9f:ac:2c:30:
         c2:de:61:0a:1f:ac:9f:55:89:9b:80:06:53:e2:b6:11:6f:fd:
         a0:b3:d2:07:f1:2c:34:cd:5b:d4:85:79:44:0f:a1:5b:2d:c7:
         df:4f:01:b4:38:3d:bd:ed:45:2b:40:e1:3e:e2:c1:09:ff:1b:
         ed:93:4f:6e:5f:28:4f:9f:e7:a5:2a:f2:04:d0:34:af:29:29:
         0f:d7:12:51:1f:84:88:c0:d6:06:38:5f:5c:30:76:be:2b:b4:
         16:01:46:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:08 2025 by rpki-client