Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa
File:                     323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa (raw, json)
Hash identifier:          4tvBWDbPyv8ntOcw7vK5T7oZz2Pg52xcphLzKv12bMQ=
Subject key identifier:   85:79:AC:0E:D7:77:6C:C9:6E:51:69:E4:69:69:20:C7:0C:3C:86:8F
Certificate issuer:       /CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
Certificate serial:       01966A6C49F04C5F54DCBB1919E38B367C8A70D8
Authority key identifier: 7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa
Signing time:             Wed 20 Mar 2024 18:37:08 +0000
ROA not before:           Wed 20 Mar 2024 18:32:08 +0000
ROA not after:            Wed 19 Mar 2025 18:37:08 +0000
asID:                     269647
IP address blocks:        2804:67bc:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:6a:6c:49:f0:4c:5f:54:dc:bb:19:19:e3:8b:36:7c:8a:70:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
        Validity
            Not Before: Mar 20 18:32:08 2024 GMT
            Not After : Mar 19 18:37:08 2025 GMT
        Subject: CN=8579AC0ED7776CC96E5169E4696920C70C3C868F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2a:96:86:b6:00:1a:db:02:12:b6:f4:c9:27:
                    92:a6:80:ce:58:bd:2f:3e:af:5b:43:bc:c7:97:69:
                    d5:15:0c:dd:b0:8e:61:81:02:14:41:ee:94:c7:a8:
                    0f:f7:16:8d:04:1a:e0:fc:ac:4d:f2:5b:4c:26:c5:
                    40:7e:14:8c:31:18:63:be:08:1e:3a:40:c1:c1:9a:
                    57:19:51:8c:f2:47:cd:71:c1:e8:24:13:c9:ac:af:
                    fd:0b:2f:3d:52:f4:44:62:67:63:85:e2:f8:0b:6b:
                    b5:49:9d:a9:5a:4f:83:b4:69:72:df:e9:d9:8f:bf:
                    3a:b6:58:3c:21:b6:78:79:7c:ac:45:b5:6c:bc:d1:
                    84:be:83:31:28:0a:6c:ee:23:d1:0f:f2:e2:de:86:
                    a8:a4:03:61:6b:f4:26:c5:71:9e:4b:0e:6b:cd:dd:
                    8f:d5:de:fd:b3:12:43:69:12:2f:1d:f2:09:cc:f3:
                    a0:52:c4:29:94:1b:e8:b3:87:a2:b9:b5:d1:1b:11:
                    0a:5c:8a:63:ca:f6:eb:16:d7:77:b0:9f:4e:a1:c0:
                    f9:03:64:a4:27:67:03:f0:52:07:fc:48:d6:38:d8:
                    08:b5:97:ed:6a:54:53:75:62:09:4e:1f:d4:82:06:
                    c1:d3:88:a5:66:e5:95:e9:f9:b4:43:24:e8:17:3c:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:79:AC:0E:D7:77:6C:C9:6E:51:69:E4:69:69:20:C7:0C:3C:86:8F
            X509v3 Authority Key Identifier:
                keyid:7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6d:fe:fa:93:f4:41:f5:cd:20:14:05:a1:91:a7:43:10:35:f2:
         96:69:07:d5:74:13:d9:ff:ae:3a:98:09:94:cc:69:b8:d9:5f:
         1f:70:40:0f:15:38:d7:88:74:ab:8c:b7:46:81:66:9a:a2:d1:
         dc:c9:45:fa:05:a3:18:12:a8:29:89:a9:31:cc:4b:91:16:fd:
         e4:f4:30:7e:b6:38:09:4a:22:2a:b1:5a:8d:bf:35:d5:06:32:
         5a:99:1a:51:4a:ae:e5:a3:94:cf:83:56:76:2f:b1:39:67:eb:
         14:ad:68:f8:7e:78:7b:13:88:68:b4:ae:96:b8:8a:20:3b:1d:
         97:65:ca:13:90:d2:e0:89:30:30:6d:2b:f7:8c:6b:57:78:2e:
         d6:4a:07:49:0e:92:3c:78:75:38:d9:1f:99:8d:9f:e4:ac:56:
         bf:3c:dd:81:63:ff:e2:60:4e:71:8c:04:0a:9a:58:a5:5b:66:
         ca:e9:e3:28:36:08:2c:15:1f:e6:fb:a5:1e:a6:e4:b3:88:49:
         13:72:0d:d9:d7:f3:13:22:a4:25:2d:93:d3:34:09:31:be:e6:
         f7:65:e9:f4:7f:4c:f4:48:16:44:5f:29:27:b5:20:ad:ba:91:
         49:3c:7a:4f:4d:bf:ed:4f:69:ae:d1:e2:fe:1d:b5:a9:bd:e0:
         7e:f2:1e:de
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAZZqbEnwTF9U3LsZGeOLNnyKcNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZDQkQ3RTVGQkVFOTc1ODE1MTc2ODA1RDBDQzZFQjc1
QTM2RjQwQjAeFw0yNDAzMjAxODMyMDhaFw0yNTAzMTkxODM3MDhaMDMxMTAvBgNV
BAMTKDg1NzlBQzBFRDc3NzZDQzk2RTUxNjlFNDY5NjkyMEM3MEMzQzg2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1KpaGtgAa2wIStvTJJ5KmgM5Y
vS8+r1tDvMeXadUVDN2wjmGBAhRB7pTHqA/3Fo0EGuD8rE3yW0wmxUB+FIwxGGO+
CB46QMHBmlcZUYzyR81xwegkE8msr/0LLz1S9ERiZ2OF4vgLa7VJnalaT4O0aXLf
6dmPvzq2WDwhtnh5fKxFtWy80YS+gzEoCmzuI9EP8uLehqikA2Fr9CbFcZ5LDmvN
3Y/V3v2zEkNpEi8d8gnM86BSxCmUG+izh6K5tdEbEQpcimPK9usW13ewn06hwPkD
ZKQnZwPwUgf8SNY42Ai1l+1qVFN1YglOH9SCBsHTiKVm5ZXp+bRDJOgXPNrDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUhXmsDtd3bMluUWnkaWkgxww8ho8wHwYDVR0j
BBgwFoAUf8vX5fvul1gVF2gF0Mxut1o29AswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFRGOFdYR0hXZVBkekZNOUEzanU4VGVnNUNSUHM0THFVS2NXelZhcXBR
TDUvMC83RkNCRDdFNUZCRUU5NzU4MTUxNzY4MDVEMENDNkVCNzVBMzZGNDBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdGQ0JEN0U1RkJFRTk3NTgx
NTE3NjgwNUQwQ0M2RUI3NUEzNkY0MEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhURjhXWEdIV2VQZHpGTTlBM2p1OFRlZzVDUlBzNExxVUtjV3pWYXFwUUw1LzAv
MzIzODMwMzQzYTM2Mzc2MjYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM2MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZ7yAMA0GCSqGSIb3DQEBCwUA
A4IBAQBt/vqT9EH1zSAUBaGRp0MQNfKWaQfVdBPZ/646mAmUzGm42V8fcEAPFTjX
iHSrjLdGgWaaotHcyUX6BaMYEqgpiakxzEuRFv3k9DB+tjgJSiIqsVqNvzXVBjJa
mRpRSq7lo5TPg1Z2L7E5Z+sUrWj4fnh7E4hotK6WuIogOx2XZcoTkNLgiTAwbSv3
jGtXeC7WSgdJDpI8eHU42R+ZjZ/krFa/PN2BY//iYE5xjAQKmlilW2bK6eMoNggs
FR/m+6UepuSziEkTcg3Z1/MTIqQlLZPTNAkxvub3Zen0f0z0SBZEXykntSCtupFJ
PHpPTb/tT2mu0eL+HbWpveB+8h7e
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:34 2025 by rpki-client