Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/323830343a363630303a383030303a3a2f33332d3333203d3e20323639353237.roa
File:                     323830343a363630303a383030303a3a2f33332d3333203d3e20323639353237.roa (raw, json)
Hash identifier:          DNDD1Y+BYtLxoXVQV1MxG7UxDW70w2peAQMTU/XgMf0=
Subject key identifier:   76:DD:63:27:56:58:6C:86:26:CE:00:F9:A9:88:54:A3:D7:0E:B3:FF
Certificate issuer:       /CN=7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE
Certificate serial:       750B66E7906556B9270F95A2B44ED79025C0306A
Authority key identifier: 7D:24:FD:2D:59:F7:DC:84:36:8B:4E:D4:F1:53:DC:37:47:A7:6D:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/323830343a363630303a383030303a3a2f33332d3333203d3e20323639353237.roa
Signing time:             Tue 09 Jan 2024 19:02:43 +0000
ROA not before:           Tue 09 Jan 2024 18:57:43 +0000
ROA not after:            Tue 07 Jan 2025 19:02:43 +0000
asID:                     269527
IP address blocks:        2804:6600:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0b:66:e7:90:65:56:b9:27:0f:95:a2:b4:4e:d7:90:25:c0:30:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE
        Validity
            Not Before: Jan  9 18:57:43 2024 GMT
            Not After : Jan  7 19:02:43 2025 GMT
        Subject: CN=76DD632756586C8626CE00F9A98854A3D70EB3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:bc:e1:9e:9d:40:68:75:73:54:8d:bc:70:
                    eb:54:4f:6c:f7:98:80:32:34:5f:d5:15:d5:78:9a:
                    1e:dc:80:f4:9c:c8:ca:34:14:b6:db:58:a5:76:ba:
                    fb:4a:2d:ac:8b:bd:f4:60:75:f4:5b:44:af:74:1c:
                    c6:ee:15:f5:8a:26:a6:ee:d1:64:58:53:48:d6:0f:
                    bc:02:d9:e3:12:5e:3d:6f:1b:5f:10:5c:11:06:5a:
                    02:a7:69:3e:97:a8:7b:eb:1b:45:dd:67:72:e0:df:
                    95:be:fd:4a:84:f5:5e:a1:e6:d8:b0:5a:df:c6:db:
                    91:33:82:a7:a7:d1:94:fb:b7:b9:0c:38:1f:c6:49:
                    4e:76:a0:61:c2:5f:9a:46:bd:73:a8:2a:15:5e:10:
                    42:8a:c5:6d:96:9f:d8:c2:8a:62:88:e1:42:22:ea:
                    04:ce:b4:e2:9d:8c:dc:ed:f3:95:0b:2b:8e:92:cc:
                    b8:f2:04:20:f2:e2:a4:20:15:da:52:af:24:86:96:
                    ae:71:f2:70:17:6d:bd:72:a2:0e:a1:81:c5:cf:c7:
                    c0:76:51:f2:0c:59:aa:38:bd:68:25:08:4a:de:5c:
                    44:d7:ca:c9:c7:fb:1e:da:a7:51:b4:ac:46:45:82:
                    5b:4a:db:71:65:ae:d9:03:b4:85:23:54:46:2f:62:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DD:63:27:56:58:6C:86:26:CE:00:F9:A9:88:54:A3:D7:0E:B3:FF
            X509v3 Authority Key Identifier:
                keyid:7D:24:FD:2D:59:F7:DC:84:36:8B:4E:D4:F1:53:DC:37:47:A7:6D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/323830343a363630303a383030303a3a2f33332d3333203d3e20323639353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6600:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:e1:dc:d3:23:94:93:25:99:17:8b:b4:03:1b:9a:37:64:
         17:93:b6:c8:34:cb:2a:3b:ef:96:c4:29:fe:d5:6e:d6:68:e7:
         0a:b9:26:63:51:f2:ea:c7:a4:b4:10:cf:5c:f2:5b:0d:2d:bc:
         56:83:8e:a3:7e:a3:7a:14:83:79:b3:11:bc:fc:8b:83:43:29:
         0f:b3:a5:4d:05:c8:a3:4d:3f:9f:0b:5a:6b:0a:81:05:4e:d9:
         3b:3f:e3:06:3a:89:3d:e1:df:98:09:a2:66:cc:9c:45:d9:85:
         02:c8:c0:53:ac:c7:4f:87:de:8c:22:94:9f:f1:af:8c:f6:49:
         eb:c2:cb:ef:4f:45:02:a5:06:59:56:99:40:5f:c1:0a:35:2e:
         20:40:62:12:cf:26:ed:c3:38:b3:f8:93:55:44:c6:0b:a0:4b:
         f5:f9:f0:1a:9e:99:74:82:74:20:10:6f:b2:55:03:2a:14:42:
         04:49:fd:ac:7d:c8:c1:a1:b8:bf:b2:34:7f:7d:41:f4:d3:75:
         cc:2c:dc:74:2b:93:29:fd:a4:a6:b6:3d:e4:77:1a:fb:06:6d:
         1d:73:02:bb:00:55:98:b2:fe:b1:15:2a:f3:2d:80:1b:20:94:
         35:9f:de:9e:16:14:7d:27:73:40:36:fe:a2:8e:17:8f:cf:9a:
         9f:98:df:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:07:09 2025 by rpki-client