Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a3a2f33322d3438203d3e20323632333736.roa
File:                     323830343a313064343a3a2f33322d3438203d3e20323632333736.roa (raw, json)
Hash identifier:          uR9vzk6+B5SupMhGDNnXpw/+OIi96WBusIYYW4cDnw4=
Subject key identifier:   7D:DF:DF:D9:0F:66:59:BB:CF:D1:B9:5F:85:07:06:65:34:03:6D:20
Certificate issuer:       /CN=3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6
Certificate serial:       7762F277C43E09D1BEA5A0D29DCB1EE974CEAA19
Authority key identifier: 3F:56:05:C5:5C:36:98:9F:0F:2C:66:40:A7:F7:FD:BB:DB:0B:62:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a3a2f33322d3438203d3e20323632333736.roa
Signing time:             Thu 10 Aug 2023 17:46:00 +0000
ROA not before:           Thu 10 Aug 2023 17:41:00 +0000
ROA not after:            Thu 08 Aug 2024 17:46:00 +0000
asID:                     262376
IP address blocks:        2804:10d4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:62:f2:77:c4:3e:09:d1:be:a5:a0:d2:9d:cb:1e:e9:74:ce:aa:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6
        Validity
            Not Before: Aug 10 17:41:00 2023 GMT
            Not After : Aug  8 17:46:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:0c:31:2d:1c:6a:40:46:1b:3c:e9:d3:fc:
                    f7:b6:ce:64:1c:5b:62:00:4f:e1:96:cd:aa:23:d5:
                    9c:1e:71:d0:cf:d4:e8:0d:df:b3:da:a8:b7:23:5d:
                    5a:33:a6:dc:66:bf:ce:62:97:d8:a4:da:dc:72:4b:
                    32:d8:f6:9e:f6:75:5a:d0:03:3f:7d:a9:de:4a:74:
                    a7:00:39:3c:98:01:40:a4:4a:0a:7b:e6:0c:40:96:
                    d1:eb:ea:19:62:ea:46:0c:45:73:57:f1:46:c1:f5:
                    9f:12:12:0a:b7:36:80:7f:48:e9:11:42:bc:a2:7b:
                    9f:a2:5a:a0:ee:a3:66:4a:cd:01:5b:79:94:ed:9b:
                    bc:be:d0:80:06:23:21:7e:71:d6:68:46:0d:58:cb:
                    c5:47:5f:72:94:a3:5f:e1:97:23:44:56:1d:47:f2:
                    7f:5f:d5:c3:e0:2a:52:81:60:e7:87:77:bd:c1:c1:
                    84:10:9a:a3:36:19:a2:0e:b2:0b:e2:8f:47:39:d2:
                    5c:24:10:16:a8:e2:1d:6f:10:f4:70:99:1f:7a:b6:
                    e3:58:14:30:5f:67:1a:b7:1c:8c:bc:34:9f:6a:7e:
                    15:4e:b1:9d:5a:5f:fc:ae:65:ac:a3:1b:79:50:11:
                    e0:e5:47:18:41:21:f6:a3:f1:96:11:75:d6:d4:69:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DF:DF:D9:0F:66:59:BB:CF:D1:B9:5F:85:07:06:65:34:03:6D:20
            X509v3 Authority Key Identifier:
                keyid:3F:56:05:C5:5C:36:98:9F:0F:2C:66:40:A7:F7:FD:BB:DB:0B:62:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F5605C55C36989F0F2C6640A7F7FDBBDB0B62F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a3a2f33322d3438203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:63:22:f3:fc:ca:e0:a8:bf:95:f7:e4:c8:3e:30:74:3d:3e:
         a1:d0:c4:37:5d:b4:40:c2:87:aa:fd:40:09:d2:ab:ed:9d:1b:
         a0:82:fe:e2:a8:74:c5:a1:46:3a:7a:ca:fd:8e:5f:73:1f:6f:
         01:a6:95:a4:a2:08:75:8c:96:d0:5d:52:66:c7:8d:43:25:f5:
         3b:57:1b:77:ba:89:57:30:d7:35:0a:cd:a0:47:9d:3a:c0:12:
         c1:c0:fb:af:bf:8a:5b:0e:ca:94:02:5a:4a:95:7f:9f:af:0d:
         07:a1:b0:8b:19:88:25:11:46:04:19:ee:dd:6b:0d:6f:75:24:
         1c:0c:7a:e5:93:9d:00:a5:f9:8b:24:16:02:90:68:f7:df:48:
         12:b1:3a:25:8a:af:f4:1e:cb:5c:6d:fd:9c:8f:5c:d9:13:1b:
         1f:66:66:ec:60:05:77:f4:02:6f:ba:ce:88:70:fc:97:a5:93:
         f4:0a:cf:c2:24:65:36:eb:2b:a5:b5:e0:01:2d:e0:35:92:67:
         fa:d9:f9:4e:f0:cf:60:e7:59:81:43:81:e8:45:05:5d:33:5e:
         da:1f:8a:08:65:4d:40:fc:90:fc:45:6a:83:a3:ef:09:49:57:
         6c:14:e3:68:68:47:d8:b9:50:2c:ff:f2:d5:9c:6a:88:0f:bf:
         ed:5c:71:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:33 2025 by rpki-client