Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a383030303a3a2f33342d3334203d3e20323733373430.roa
File:                     323830343a386238633a383030303a3a2f33342d3334203d3e20323733373430.roa (raw, json)
Hash identifier:          oJThmqoMDP/ckdQbhsaYNCTnBOE3506zgNegtQO1M5U=
Subject key identifier:   6B:87:E5:91:6D:6D:9B:A2:24:4E:E5:37:20:35:CA:05:C4:1F:43:BA
Certificate issuer:       /CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
Certificate serial:       681E0DE589A70CC6C1852DDA697E57BDB4CE2B55
Authority key identifier: 8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a383030303a3a2f33342d3334203d3e20323733373430.roa
Signing time:             Mon 21 Oct 2024 22:39:01 +0000
ROA not before:           Mon 21 Oct 2024 22:34:01 +0000
ROA not after:            Mon 20 Oct 2025 22:39:01 +0000
asID:                     273740
IP address blocks:        2804:8b8c:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1e:0d:e5:89:a7:0c:c6:c1:85:2d:da:69:7e:57:bd:b4:ce:2b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
        Validity
            Not Before: Oct 21 22:34:01 2024 GMT
            Not After : Oct 20 22:39:01 2025 GMT
        Subject: CN=6B87E5916D6D9BA2244EE5372035CA05C41F43BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:53:e5:77:e8:39:3b:0e:4c:6e:31:2c:a6:
                    b8:06:23:d4:a8:7c:89:f1:6e:bb:91:16:a1:44:24:
                    74:e1:c5:7a:ba:05:78:13:92:23:b9:83:43:fa:94:
                    77:c3:0a:ac:08:5e:ac:e4:c1:e3:8c:09:45:e3:60:
                    2c:36:be:81:a5:47:f2:ca:46:e4:a4:66:8a:c4:a4:
                    bd:07:92:6b:b4:16:a0:75:30:6e:03:91:52:3e:b6:
                    3e:9e:83:5f:d1:f3:99:57:aa:01:4b:d1:7c:f5:8f:
                    f3:ed:89:b0:4f:c2:2d:86:62:d3:8c:de:39:53:d8:
                    81:d3:45:3b:fa:00:9f:02:c1:b4:b2:e3:5b:06:7d:
                    42:b0:b3:81:d8:4e:d4:5d:3b:6f:a1:07:c7:41:67:
                    65:0d:b4:e2:92:be:cb:db:68:0e:25:7a:42:72:fe:
                    fd:95:d3:13:f4:e5:8f:df:18:65:0b:6f:bd:ed:8a:
                    ef:d8:8a:c9:97:f6:4a:06:3d:8b:a3:50:0d:6c:6b:
                    10:a9:aa:33:b7:59:06:fb:b9:10:ee:a6:35:17:d4:
                    9a:0f:5f:19:fe:4f:56:0a:a6:6e:c1:f4:7c:58:a9:
                    ca:98:87:f2:71:81:37:9e:89:01:02:60:08:f3:29:
                    e8:91:69:e6:28:93:2b:28:65:37:2a:45:8d:87:a5:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:87:E5:91:6D:6D:9B:A2:24:4E:E5:37:20:35:CA:05:C4:1F:43:BA
            X509v3 Authority Key Identifier:
                keyid:8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a383030303a3a2f33342d3334203d3e20323733373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b8c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         96:ca:58:84:67:3a:e5:4e:f2:1d:b6:6c:3d:63:04:9f:02:a9:
         51:b1:5e:2c:04:85:d0:bd:b2:9a:30:c0:a8:d0:cf:4a:3d:3d:
         1c:60:04:85:67:ff:f5:86:b2:41:15:ef:fa:1b:89:5d:1b:95:
         72:33:59:e8:9b:d5:e6:a3:98:27:86:ff:9c:04:2e:9f:7d:83:
         12:ab:8c:ea:57:40:6d:d6:32:e1:7e:9f:4d:79:c8:1a:58:77:
         0f:c4:62:8f:3f:d4:db:06:31:8a:0d:f7:08:2a:85:38:aa:e2:
         11:f4:ca:f7:6a:ce:2e:1f:d0:43:01:60:0c:23:61:44:43:5a:
         53:b8:f9:fc:ee:79:92:d3:e7:7e:d3:b4:e6:c5:c5:92:d4:ce:
         c8:24:5a:07:2a:45:a0:22:72:cd:4c:bb:7b:60:23:46:90:15:
         23:38:42:7e:2a:77:30:0d:0a:1b:a9:7f:4b:af:34:72:ac:a4:
         7f:ca:eb:8f:14:ab:82:c1:12:d0:99:98:ff:7a:87:57:9e:a5:
         a2:a1:39:b6:39:c8:7e:32:6f:97:be:cd:0e:84:86:f4:84:a2:
         3e:15:27:12:b5:05:55:9d:ad:10:71:b8:8e:09:03:4d:87:be:
         a6:34:05:07:56:92:60:88:99:27:0a:fd:7b:64:b6:dd:58:41:
         dc:8f:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:47:48 2025 by rpki-client