Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a383030303a3a2f33342d3334203d3e203532383230.roa
File:                     323830343a386163303a383030303a3a2f33342d3334203d3e203532383230.roa (raw, json)
Hash identifier:          vBF4xvmWWr9v6IAwd4fJ2srsSRNAisplOnwiF6ynuas=
Subject key identifier:   E7:4A:38:04:27:21:B8:28:82:26:A3:16:C4:92:05:42:F4:4A:D4:9A
Certificate issuer:       /CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
Certificate serial:       5BF2FDFFED0F4A9C77D2C70330B479D15DB5F1A2
Authority key identifier: 7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a383030303a3a2f33342d3334203d3e203532383230.roa
Signing time:             Wed 04 Sep 2024 13:10:01 +0000
ROA not before:           Wed 04 Sep 2024 13:05:01 +0000
ROA not after:            Wed 03 Sep 2025 13:10:01 +0000
asID:                     52820
IP address blocks:        2804:8ac0:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f2:fd:ff:ed:0f:4a:9c:77:d2:c7:03:30:b4:79:d1:5d:b5:f1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
        Validity
            Not Before: Sep  4 13:05:01 2024 GMT
            Not After : Sep  3 13:10:01 2025 GMT
        Subject: CN=E74A38042721B8288226A316C4920542F44AD49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:5f:02:de:8f:0b:bd:b1:fa:f2:2c:34:3c:
                    68:78:07:ae:4b:e5:47:9b:7d:4c:06:3f:83:18:0e:
                    7a:c8:ed:60:5e:33:39:ab:6d:46:87:d6:5e:93:e6:
                    bd:78:80:e6:3d:1e:12:73:1b:51:1c:74:2d:17:09:
                    e6:4c:c2:fa:61:ab:94:10:8f:4d:69:b7:3f:d4:ae:
                    f7:8d:16:05:2c:c6:ce:f2:4a:74:df:b8:80:15:8b:
                    6e:6b:d8:bd:26:8f:b0:5f:85:f6:37:92:e0:c6:5b:
                    53:7b:2c:65:c9:56:fe:6a:c8:24:d9:93:28:95:15:
                    37:b1:98:6f:7b:3b:3d:a6:f0:6d:23:7d:7c:ae:30:
                    ab:30:ac:ff:9e:6e:27:04:82:3c:60:89:e4:03:63:
                    51:a6:80:73:6c:8c:9a:86:49:8f:46:39:d6:d6:25:
                    78:f6:43:12:35:5d:3c:f0:da:db:83:cd:de:24:d3:
                    40:d1:a7:c0:4e:20:c0:70:6c:9c:ff:fa:ed:a3:24:
                    e4:42:f0:1e:d4:ba:18:12:66:fb:ff:a2:92:ba:fa:
                    29:dd:98:09:14:b2:4e:75:04:16:af:81:3f:95:5e:
                    c8:fe:cd:a6:6b:c0:28:72:9b:89:9e:b5:00:d7:3c:
                    57:21:36:4b:86:5b:c1:4e:25:86:8c:46:8b:9e:8d:
                    e5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4A:38:04:27:21:B8:28:82:26:A3:16:C4:92:05:42:F4:4A:D4:9A
            X509v3 Authority Key Identifier:
                keyid:7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a383030303a3a2f33342d3334203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ac0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:ab:b8:dc:bb:77:c6:6d:4a:13:1f:e2:ca:2f:f8:95:19:65:
         e1:23:e7:2f:70:91:d7:03:ef:ff:4b:a8:4f:ec:7d:fa:8d:fa:
         2b:a9:b0:2c:c5:f1:69:bd:ec:17:01:16:63:dd:ee:2e:e1:08:
         5f:59:66:67:f9:a9:c0:41:0f:43:a4:23:66:3a:fd:34:c3:19:
         f9:a6:5a:bd:5d:19:38:91:ee:43:cf:91:a5:0d:f4:c1:a9:29:
         ed:a1:a5:4d:2f:00:e2:c9:21:ef:6d:86:b6:73:dc:07:0f:95:
         75:5d:1e:b1:bd:fd:42:af:2e:4b:45:5c:c4:3a:ff:f0:8d:14:
         62:f3:60:d2:23:8c:ae:20:8b:9e:08:fd:b2:8f:c5:f5:b1:d2:
         6f:ea:46:49:ff:c0:f8:24:50:d7:50:f8:79:d0:5d:4a:80:d8:
         c2:bf:4c:a7:14:ae:47:71:4c:a9:d9:74:af:8b:c1:8b:dc:cb:
         8c:f3:4e:81:06:64:77:89:24:a1:bd:0a:c7:d9:e2:ee:72:87:
         3a:53:9a:20:39:3b:6e:1c:cc:3c:7f:54:6c:f9:d7:a2:c1:e1:
         8f:b1:b8:8c:ca:30:e6:8c:c8:e8:79:7b:eb:5a:4a:ac:23:6a:
         8e:07:46:b6:e0:2a:3f:80:43:f6:cc:53:f4:f7:a2:6b:80:0e:
         72:60:28:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:10:03 2025 by rpki-client