Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a343030303a3a2f33342d3334203d3e20323633393230.roa
File:                     323830343a323763303a343030303a3a2f33342d3334203d3e20323633393230.roa (raw, json)
Hash identifier:          ZWlHSJcE4bzjey2fWEUKQ67+4fCmlKU7nYc5L+ZzgsM=
Subject key identifier:   4C:32:FC:0F:EC:AB:A3:79:E8:64:ED:0D:19:07:47:3D:37:49:F3:16
Certificate issuer:       /CN=F3860F57CCED8C936C498E86A51A295017183FFB
Certificate serial:       51075DFC439875AB9D366CA83A6810EB8E9BF853
Authority key identifier: F3:86:0F:57:CC:ED:8C:93:6C:49:8E:86:A5:1A:29:50:17:18:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3860F57CCED8C936C498E86A51A295017183FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a343030303a3a2f33342d3334203d3e20323633393230.roa
Signing time:             Tue 02 Jul 2024 16:51:53 +0000
ROA not before:           Tue 02 Jul 2024 16:46:53 +0000
ROA not after:            Tue 01 Jul 2025 16:51:53 +0000
asID:                     263920
IP address blocks:        2804:27c0:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:07:5d:fc:43:98:75:ab:9d:36:6c:a8:3a:68:10:eb:8e:9b:f8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3860F57CCED8C936C498E86A51A295017183FFB
        Validity
            Not Before: Jul  2 16:46:53 2024 GMT
            Not After : Jul  1 16:51:53 2025 GMT
        Subject: CN=4C32FC0FECABA379E864ED0D1907473D3749F316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b9:96:dd:89:6d:99:84:d1:e6:b4:ed:a7:3f:
                    cd:98:22:f3:0a:08:3e:cb:cf:2c:e9:1e:50:e1:47:
                    08:60:05:05:2f:83:26:51:9d:eb:63:82:c0:8b:d5:
                    0b:ef:59:84:fc:45:73:6c:8a:bc:7c:31:9a:b3:9a:
                    0a:99:c6:9f:9a:21:08:70:39:20:52:ae:0b:6a:bf:
                    95:60:a0:a6:dc:9d:e5:3a:7f:55:02:92:60:28:fa:
                    bd:53:0d:e5:9f:bf:a0:91:96:97:a0:2a:b9:38:71:
                    6c:3a:0e:f0:db:28:9f:4f:aa:f3:cc:ce:c4:c9:ec:
                    86:b2:69:60:24:1e:c8:74:d4:37:c4:f6:2f:70:08:
                    72:97:ed:69:80:53:4b:cf:b1:c8:12:a3:db:d6:53:
                    37:97:17:09:b1:a4:2e:65:a7:6f:08:46:21:c3:d7:
                    76:c4:7b:01:d1:3e:3a:6a:6d:b3:21:20:b6:7f:03:
                    10:c5:75:48:ed:78:b5:e7:97:05:24:90:09:b0:d0:
                    39:f6:e2:98:56:82:ac:06:37:37:f1:24:a8:f7:bb:
                    19:f8:e7:51:15:e8:83:4f:bf:85:a3:9d:b5:af:d6:
                    7c:bd:ec:9c:26:e1:87:59:e6:8b:c5:1e:b3:f2:39:
                    9b:d8:53:b9:c0:38:d3:f0:f4:a9:43:95:9d:06:a6:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:32:FC:0F:EC:AB:A3:79:E8:64:ED:0D:19:07:47:3D:37:49:F3:16
            X509v3 Authority Key Identifier:
                keyid:F3:86:0F:57:CC:ED:8C:93:6C:49:8E:86:A5:1A:29:50:17:18:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/F3860F57CCED8C936C498E86A51A295017183FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3860F57CCED8C936C498E86A51A295017183FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a343030303a3a2f33342d3334203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:32:26:e8:be:c3:7c:b6:95:da:8b:ce:dc:31:12:42:3b:f3:
         d8:4e:fa:96:06:fb:19:28:2b:4d:a6:df:e6:d7:66:1d:95:7e:
         47:37:37:aa:13:8c:ef:d9:8b:98:ec:88:24:59:6d:af:72:a7:
         78:e3:4a:2c:56:d5:a1:73:a8:c0:16:2c:c9:b1:f6:49:02:66:
         45:88:fe:4d:0a:fe:74:4d:d2:36:9a:a8:ea:ee:92:8f:a5:cc:
         00:b9:0d:ec:99:9b:58:ba:e6:3a:07:66:f4:23:9c:b1:c8:be:
         d2:8a:92:f3:ee:00:9f:ca:a4:39:84:7b:01:25:3e:ff:18:35:
         82:f9:c7:d2:4b:72:9f:3b:a6:7a:64:f9:ad:b6:cf:77:06:24:
         7b:45:d1:14:90:71:3a:46:0c:46:24:68:ce:7e:9f:a0:fd:e1:
         3a:ff:b2:3b:c0:18:8f:16:75:3f:9a:28:23:06:cf:cd:f3:e9:
         a0:02:6d:65:ab:27:c9:72:f4:0d:32:6c:ba:10:21:42:4a:87:
         90:00:c2:ab:16:66:11:0b:e4:db:eb:23:24:f2:ab:a6:15:df:
         95:13:9f:a0:a5:ae:3e:97:ea:a9:22:18:41:f0:82:e8:fd:c0:
         1f:68:5a:0b:5f:7b:2d:7b:16:3f:5d:64:3c:4b:f0:dc:c0:e7:
         0f:30:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:22 2025 by rpki-client