Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33322d3332203d3e20323731343239.roa
File:                     323830343a376236343a3a2f33322d3332203d3e20323731343239.roa (raw, json)
Hash identifier:          9oT77+SnJ2GHk/gU+VlKY+o4etd97w+uwjO4243tboo=
Subject key identifier:   79:62:BF:F8:4F:A3:9A:FB:E3:B5:A4:A3:AC:92:17:2E:05:5A:B2:D5
Certificate issuer:       /CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
Certificate serial:       171DA19896EB532570A79DC2110D9393CD12084E
Authority key identifier: FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33322d3332203d3e20323731343239.roa
Signing time:             Mon 08 Jul 2024 12:40:08 +0000
ROA not before:           Mon 08 Jul 2024 12:35:08 +0000
ROA not after:            Mon 07 Jul 2025 12:40:08 +0000
asID:                     271429
IP address blocks:        2804:7b64::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1d:a1:98:96:eb:53:25:70:a7:9d:c2:11:0d:93:93:cd:12:08:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
        Validity
            Not Before: Jul  8 12:35:08 2024 GMT
            Not After : Jul  7 12:40:08 2025 GMT
        Subject: CN=7962BFF84FA39AFBE3B5A4A3AC92172E055AB2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:6a:6a:c2:8c:7e:a1:24:59:28:cb:b0:4f:
                    05:56:14:f3:ed:e1:b1:78:de:bf:a3:68:14:3c:03:
                    da:97:94:a4:07:98:56:84:79:25:68:7d:e9:60:ce:
                    6e:74:3a:0d:94:06:c3:66:c6:07:51:21:30:fd:21:
                    0e:91:df:a6:fc:40:09:8d:06:43:6f:8e:c2:88:21:
                    2b:62:d2:7e:b0:20:9a:4a:81:41:63:d0:35:18:54:
                    1c:dd:c7:40:f3:83:77:d9:1b:b1:bd:b1:4d:17:23:
                    48:11:c0:c7:be:24:ac:13:63:38:1d:f3:1b:a8:a4:
                    43:ad:6a:d9:8d:16:21:c0:9e:56:e8:52:62:59:70:
                    ee:9c:8f:11:3c:17:a1:45:d4:b3:b9:4f:5a:e6:95:
                    40:71:24:55:4b:02:e1:06:be:a0:8b:bd:82:60:99:
                    83:ee:68:ab:51:f2:ff:1d:e4:01:5f:36:12:ab:46:
                    a0:2d:9e:35:30:31:b5:4d:c4:ec:98:c0:3e:ce:b0:
                    27:1f:a4:5b:f4:51:2d:76:4b:f3:07:32:e3:52:24:
                    f3:9d:ea:ef:4f:72:64:ce:52:a2:15:9b:1d:5c:be:
                    88:7a:06:f7:91:c0:8d:92:e3:ad:4f:35:6a:27:f3:
                    ea:2e:b6:4c:28:bf:df:6c:e3:35:98:6d:92:7c:d8:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:62:BF:F8:4F:A3:9A:FB:E3:B5:A4:A3:AC:92:17:2E:05:5A:B2:D5
            X509v3 Authority Key Identifier:
                keyid:FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33322d3332203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b64::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:44:8e:ac:c1:82:2d:4b:19:69:cc:6f:b6:ad:48:b5:d2:d8:
         14:70:05:25:40:67:76:08:5c:78:94:2e:ed:0f:a5:ff:87:d3:
         07:f3:97:3b:a7:87:be:d0:39:77:26:89:62:01:b3:ef:e6:f1:
         08:65:7e:ea:93:4e:ae:40:08:c7:96:84:7d:5b:ff:ac:96:86:
         f1:a4:b5:ec:3a:53:14:75:e0:77:77:03:c8:e6:bc:fc:cc:43:
         71:d3:18:c1:16:66:ce:58:02:eb:95:5a:1e:f6:c6:60:d6:69:
         f1:74:9d:d0:c9:35:b7:38:1e:13:cc:b5:09:ab:bd:6b:67:89:
         34:62:d8:70:05:7b:ae:6a:1d:ec:07:94:bd:0a:d1:9b:c1:43:
         fa:94:b4:fb:fe:ec:81:7d:50:26:c0:27:0c:b1:5d:1b:1a:8a:
         de:e2:de:6b:80:ee:8a:a5:38:29:c1:3a:9c:ac:ec:ff:05:79:
         3d:fb:79:cd:9f:ce:af:d6:1c:cb:5b:41:0f:a8:9e:7a:95:06:
         c7:ae:e9:51:f6:1e:74:52:d5:5e:71:82:0e:a6:ae:e5:98:16:
         34:d4:ba:23:ce:f0:9d:bf:99:b6:60:d4:08:3f:f6:9f:2a:25:
         97:92:b2:2d:be:c7:44:21:68:6b:52:65:d2:2a:4b:bd:ea:3c:
         b0:01:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:36 2025 by rpki-client