Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a3a2f33342d3334203d3e20323639363437.roa
File:                     323830343a363762633a3a2f33342d3334203d3e20323639363437.roa (raw, json)
Hash identifier:          YHdmuL4rrIXGGjC2lRi44C3mziwj/oVm9dlrpki8lAU=
Subject key identifier:   01:FD:38:20:99:04:11:78:34:FD:C0:53:90:D0:62:69:1F:B0:D2:CE
Certificate issuer:       /CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
Certificate serial:       1B57E0845668219925B7E593A1626FDAFCDF5AF5
Authority key identifier: 7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a3a2f33342d3334203d3e20323639363437.roa
Signing time:             Wed 20 Mar 2024 18:37:08 +0000
ROA not before:           Wed 20 Mar 2024 18:32:08 +0000
ROA not after:            Wed 19 Mar 2025 18:37:08 +0000
asID:                     269647
IP address blocks:        2804:67bc::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:57:e0:84:56:68:21:99:25:b7:e5:93:a1:62:6f:da:fc:df:5a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
        Validity
            Not Before: Mar 20 18:32:08 2024 GMT
            Not After : Mar 19 18:37:08 2025 GMT
        Subject: CN=01FD38209904117834FDC05390D062691FB0D2CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:45:49:ac:a9:e0:6c:4b:df:57:ae:7d:c7:
                    a9:54:c0:a4:bf:76:1d:f0:29:73:38:cd:77:24:82:
                    98:d6:fd:1f:72:b7:1f:d1:65:13:83:c9:77:78:ea:
                    37:28:1a:f2:00:46:d0:56:c6:23:b4:d1:40:12:20:
                    61:16:a0:bc:38:6c:27:a3:64:b6:a8:f6:cf:7d:d8:
                    4e:b5:e6:9e:36:f0:3c:2d:96:7b:fb:4b:25:2f:3e:
                    0b:1f:1a:2d:f7:77:f4:9d:1c:92:85:17:c8:b7:64:
                    89:7f:2f:41:b0:3b:a1:56:9e:57:d2:85:f5:15:98:
                    75:e9:2f:d9:4b:d5:30:ba:89:f6:27:8a:25:6b:f9:
                    d4:31:28:95:8d:08:58:be:7c:93:01:7d:7f:a9:ba:
                    37:27:aa:84:b3:15:cf:ff:68:5f:1f:61:3e:88:5d:
                    25:9c:65:e1:cc:1c:e4:4a:ba:81:b0:d0:9f:3a:04:
                    7c:45:28:64:19:f3:d9:dd:96:da:fa:13:23:13:bd:
                    b0:ff:7a:54:7b:32:fd:4b:bf:4a:f3:5c:05:10:5a:
                    c3:2c:89:3b:06:35:ac:6e:9b:18:07:29:b9:9b:5e:
                    72:ea:27:2f:c5:95:57:69:9d:94:c4:f7:16:b4:ff:
                    81:4d:86:13:d7:00:22:e6:17:16:de:d4:a5:d6:7e:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FD:38:20:99:04:11:78:34:FD:C0:53:90:D0:62:69:1F:B0:D2:CE
            X509v3 Authority Key Identifier:
                keyid:7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a3a2f33342d3334203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:ff:5f:67:01:57:41:19:8b:a3:5a:46:c0:b5:30:6f:e5:d7:
         45:6c:de:49:a7:c1:6f:80:16:5e:28:e1:67:a8:e9:92:8f:88:
         72:8e:63:0a:e1:72:4d:b7:a5:db:e7:5a:e8:14:37:05:cc:9d:
         45:a8:1a:c3:1f:28:ae:f9:fc:69:b7:20:e4:3f:e0:56:52:72:
         7f:40:e2:83:56:c5:17:74:4b:e8:43:08:ea:e7:64:27:54:7a:
         3a:72:ef:93:07:57:8f:49:7d:12:4f:87:c1:cc:a7:e6:80:c6:
         24:f6:de:4f:01:8c:ee:e0:84:02:25:ec:db:b0:98:47:5b:5d:
         27:94:c0:3a:9e:7e:32:50:08:a4:b2:8c:ab:ab:e9:5d:02:7c:
         d7:f3:01:c0:19:91:15:7b:af:63:83:9d:57:8a:92:5d:13:d2:
         39:df:07:37:26:3d:f2:44:fc:e3:2e:c5:6a:e1:23:22:59:1c:
         c8:4c:de:e9:84:af:74:61:05:df:6e:59:eb:e1:0d:cf:0e:34:
         0d:01:c9:a0:ca:fd:cb:64:f3:d1:20:67:ec:62:ff:89:db:c6:
         b0:c8:6f:c6:f2:f9:35:d4:1d:26:f4:bd:21:41:03:d3:59:05:
         dd:85:ce:8f:60:14:07:2b:b5:5d:fe:51:9b:7c:4a:df:c3:09:
         20:53:41:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:29 2025 by rpki-client