Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a653030303a3a2f33362d3336203d3e20323636343133.roa
File:                     323830343a333736633a653030303a3a2f33362d3336203d3e20323636343133.roa (raw, json)
Hash identifier:          LVOj/roGyAidNP8n4rQm4oQ0ZeHFSBymETv5GyRwFE8=
Subject key identifier:   38:0F:F8:C8:7C:DF:A6:4F:06:B6:97:DA:44:4C:0C:E6:C4:9A:9A:E7
Certificate issuer:       /CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
Certificate serial:       089E6685111EEED67903C386F0D718ADC659D08C
Authority key identifier: 76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a653030303a3a2f33362d3336203d3e20323636343133.roa
Signing time:             Thu 04 Jul 2024 02:17:17 +0000
ROA not before:           Thu 04 Jul 2024 02:12:17 +0000
ROA not after:            Thu 03 Jul 2025 02:17:17 +0000
asID:                     266413
IP address blocks:        2804:376c:e000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9e:66:85:11:1e:ee:d6:79:03:c3:86:f0:d7:18:ad:c6:59:d0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
        Validity
            Not Before: Jul  4 02:12:17 2024 GMT
            Not After : Jul  3 02:17:17 2025 GMT
        Subject: CN=380FF8C87CDFA64F06B697DA444C0CE6C49A9AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:3f:02:7e:b9:e4:df:d5:31:9c:88:6d:25:
                    e5:66:2c:e9:9c:b9:b8:8e:8a:b1:56:4d:d7:1d:66:
                    29:54:af:e6:cd:e7:12:ff:74:10:af:09:58:5e:2b:
                    84:5e:63:ac:a4:d6:d4:de:23:ff:f6:fd:cb:8a:01:
                    99:23:a8:53:23:37:01:d2:48:13:fa:97:a0:d6:c7:
                    af:00:18:f2:ce:9e:56:f1:d4:00:96:09:4f:19:85:
                    ce:85:3f:de:e1:c9:07:27:93:0f:ee:75:7c:00:07:
                    95:6f:88:8e:23:d5:f8:d3:85:f9:c9:c0:d6:c1:29:
                    59:4f:a8:6e:df:6c:5e:6a:06:fe:1c:02:8c:00:d8:
                    0f:b3:13:f0:e7:60:34:07:67:d8:f3:39:dc:43:04:
                    92:48:7f:b9:2c:e7:45:d9:48:d5:74:9f:53:3c:e0:
                    19:64:5c:42:17:a0:ab:72:f7:dd:a0:db:50:1e:51:
                    aa:aa:10:72:3e:d4:2a:e9:4e:6d:dd:c2:29:69:f4:
                    18:e5:b5:0c:39:aa:b7:2c:84:ce:10:44:1d:44:b3:
                    7e:c2:94:3c:6d:bf:e4:77:9b:96:74:86:2c:fb:03:
                    f0:d7:8e:58:30:40:bb:78:21:60:ce:fc:87:b8:9d:
                    11:0c:8f:a9:a0:30:6e:44:cb:bc:9d:11:f3:5f:bb:
                    68:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0F:F8:C8:7C:DF:A6:4F:06:B6:97:DA:44:4C:0C:E6:C4:9A:9A:E7
            X509v3 Authority Key Identifier:
                keyid:76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a653030303a3a2f33362d3336203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:376c:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b2:02:06:7c:6c:76:61:b5:60:e1:79:ab:c7:a3:8e:1f:6b:2a:
         7b:b0:d8:9c:68:7c:16:63:61:9a:1a:a5:cc:49:38:80:dc:e4:
         91:5e:f4:e1:56:8c:06:77:df:69:9c:83:98:41:ae:c4:fd:3c:
         e2:95:af:23:cd:2c:a0:54:71:43:a5:94:0d:31:05:0f:e2:20:
         67:70:af:81:30:3c:2d:a7:b9:f2:2d:3b:c4:90:0b:16:fb:f9:
         17:95:e3:49:7d:6b:f2:e9:7f:67:33:f2:ba:73:e5:14:e3:d4:
         9f:a7:c7:40:12:d5:33:0f:0b:f2:38:d4:04:a0:30:78:6c:cf:
         2f:18:02:72:97:ed:30:cc:75:ba:ed:21:6a:7c:22:5c:89:43:
         51:f5:ee:b9:77:1d:26:18:f8:44:20:ca:5b:f9:13:a0:b1:74:
         04:d8:6f:d9:8b:5b:3a:86:3e:d5:2e:33:34:e0:68:6e:85:d3:
         db:0b:f2:49:b6:e4:08:b9:c6:f7:23:0b:9e:21:2e:1c:b2:6e:
         59:6c:0a:50:96:6f:3a:9b:f0:27:96:9a:f3:26:b2:c8:60:9c:
         ca:77:bc:0a:40:e0:ac:37:b4:49:33:b5:1e:4e:b6:0f:d4:fd:
         43:d9:20:db:53:99:c6:6f:c4:8f:80:d3:c7:75:c4:01:bd:49:
         22:7b:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:24 2025 by rpki-client