Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/323830343a363864343a666530303a3a2f33392d3339203d3e20323639373139.roa
File:                     323830343a363864343a666530303a3a2f33392d3339203d3e20323639373139.roa (raw, json)
Hash identifier:          0m4HhXqwNSkIobEbKS4ioKo+OlEyc6apVme/Vq0aohU=
Subject key identifier:   0F:58:1E:5E:29:E2:4B:D2:88:6F:01:43:C1:77:6F:40:10:85:AA:D6
Certificate issuer:       /CN=0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463
Certificate serial:       3A4442DF63E8B9E643518278BE611BD7A014A405
Authority key identifier: 0C:7E:B3:E6:0D:6F:46:F7:F5:96:B6:D0:E9:9E:86:B9:2C:7B:34:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/323830343a363864343a666530303a3a2f33392d3339203d3e20323639373139.roa
Signing time:             Fri 23 Aug 2024 15:24:27 +0000
ROA not before:           Fri 23 Aug 2024 15:19:27 +0000
ROA not after:            Fri 22 Aug 2025 15:24:27 +0000
asID:                     269719
IP address blocks:        2804:68d4:fe00::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:44:42:df:63:e8:b9:e6:43:51:82:78:be:61:1b:d7:a0:14:a4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463
        Validity
            Not Before: Aug 23 15:19:27 2024 GMT
            Not After : Aug 22 15:24:27 2025 GMT
        Subject: CN=0F581E5E29E24BD2886F0143C1776F401085AAD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:e6:fd:4d:dd:0b:49:ba:85:3a:5e:45:1d:
                    d1:63:7d:4e:d1:d9:de:c2:d9:e0:f3:1c:1f:9d:62:
                    64:7f:9a:87:b3:4b:65:1a:1d:90:4b:54:2a:42:83:
                    c4:29:a9:dc:91:ff:bc:99:c5:be:e3:33:9b:94:91:
                    44:5c:f7:10:00:28:87:5d:7d:a9:57:ad:59:ab:6f:
                    e4:95:a4:65:93:d8:ef:99:31:9c:50:7f:78:28:83:
                    84:bd:7a:c6:a1:88:2a:5a:09:92:d6:7b:71:7e:00:
                    71:d2:c7:e9:d4:09:dc:ab:36:12:55:a3:77:e8:12:
                    c6:75:bd:b0:54:8f:47:8a:33:7d:10:a7:48:1c:a7:
                    39:8d:04:8a:84:bb:5f:28:07:9e:f7:00:b7:eb:19:
                    fe:e7:9f:ce:d4:41:e8:59:d1:78:af:ef:a9:91:a3:
                    2b:7b:ef:0f:fd:43:09:14:96:56:99:39:83:b5:6a:
                    c7:fe:c0:74:b6:f0:84:d9:07:4e:4a:3f:e8:a5:53:
                    90:54:fb:33:43:39:ef:2a:99:98:56:67:bf:26:5b:
                    58:66:90:88:46:22:50:63:3e:3a:66:f1:d3:d8:d0:
                    c3:2f:83:51:2d:41:8c:72:a2:9b:47:f5:50:43:76:
                    c3:62:de:59:ff:15:91:c1:bd:ba:9c:a1:11:44:a8:
                    c5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:58:1E:5E:29:E2:4B:D2:88:6F:01:43:C1:77:6F:40:10:85:AA:D6
            X509v3 Authority Key Identifier:
                keyid:0C:7E:B3:E6:0D:6F:46:F7:F5:96:B6:D0:E9:9E:86:B9:2C:7B:34:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C7EB3E60D6F46F7F596B6D0E99E86B92C7B3463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJD43UUo7J3CWcW6cayovEHEr4PMSECf5XmTsJCbNFDm/0/323830343a363864343a666530303a3a2f33392d3339203d3e20323639373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68d4:fe00::/39

    Signature Algorithm: sha256WithRSAEncryption
         7e:d9:30:8f:aa:52:a2:92:65:85:30:f8:91:0c:58:39:0b:80:
         0b:8a:e1:85:a5:9e:c4:0e:75:a4:33:77:a9:ce:54:04:6e:c7:
         34:15:95:2c:40:78:86:f2:01:56:ad:75:d6:c3:0a:a4:98:c0:
         9b:9b:f0:bb:4f:ce:e0:fd:77:c6:f0:54:5d:e6:8e:45:ac:52:
         94:51:a4:06:9e:aa:a2:bd:a8:ae:94:1e:84:83:a0:47:b8:60:
         f9:ef:a1:49:9d:5c:97:a3:5b:27:c4:0d:29:19:95:2f:57:df:
         d5:ce:d4:4b:e4:8b:ff:e0:c3:d2:a1:92:ac:31:3e:5b:30:9a:
         79:ca:84:17:9e:44:60:03:fa:58:7f:f3:86:22:2d:14:01:fa:
         42:cf:88:0b:27:62:2c:8b:18:a5:a1:db:19:a5:f3:cd:a8:b6:
         97:72:63:18:ac:35:55:56:65:3e:08:13:50:81:68:08:f2:d8:
         cd:a2:96:c4:eb:5a:ad:df:ba:d4:b3:eb:62:77:9d:6a:f3:6e:
         5c:a7:6a:6f:6d:e6:00:3f:e6:c0:d8:5a:bd:66:d3:f5:e8:aa:
         1e:ba:71:fb:cb:ba:a4:98:eb:9e:b9:93:82:0e:db:5f:b6:2a:
         8b:db:7b:c2:d9:ca:31:ce:af:e8:c5:6e:fd:4b:0a:b3:23:4d:
         4c:78:4d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:01:29 2025 by rpki-client