Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a323030303a3a2f33352d3335203d3e20323636343136.roa
File:                     323830343a333737343a323030303a3a2f33352d3335203d3e20323636343136.roa (raw, json)
Hash identifier:          aKbWMdYCwR7YKY9/z7ZBRC8RCn4d0dXY20GfhAxodVg=
Subject key identifier:   0F:63:F8:4F:30:9F:E0:D9:AF:91:5A:DB:B8:49:6C:18:0B:A5:EA:53
Certificate issuer:       /CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
Certificate serial:       788F1570C4B4937A4530397B3F08869A4BBBC571
Authority key identifier: 3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a323030303a3a2f33352d3335203d3e20323636343136.roa
Signing time:             Sun 26 May 2024 20:57:11 +0000
ROA not before:           Sun 26 May 2024 20:52:11 +0000
ROA not after:            Sun 25 May 2025 20:57:11 +0000
asID:                     266416
IP address blocks:        2804:3774:2000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8f:15:70:c4:b4:93:7a:45:30:39:7b:3f:08:86:9a:4b:bb:c5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
        Validity
            Not Before: May 26 20:52:11 2024 GMT
            Not After : May 25 20:57:11 2025 GMT
        Subject: CN=0F63F84F309FE0D9AF915ADBB8496C180BA5EA53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:6c:3b:7f:86:87:54:20:b6:e9:3a:e9:8e:
                    65:90:75:0e:95:ef:e3:d8:bc:c1:52:0a:09:48:de:
                    88:be:55:c8:c3:7f:b6:27:d0:bc:c1:ad:f0:7e:2d:
                    d2:e7:5c:83:56:5b:90:d5:4c:82:1c:af:a8:27:77:
                    eb:5a:b4:ed:78:33:19:91:82:1b:00:f1:01:47:70:
                    b1:49:16:26:bd:24:c6:c3:b6:4b:e9:1d:03:a4:c3:
                    d3:6a:96:56:9e:d3:c2:63:d8:b6:1a:e1:39:67:0b:
                    75:39:69:fa:4b:0b:cb:25:3d:c2:63:9d:0a:1f:f7:
                    38:a4:4a:8a:b3:e0:35:97:8e:5d:66:cd:72:5a:fd:
                    5a:40:cb:2c:cb:1e:ba:3a:0c:26:8c:1c:92:ce:77:
                    78:52:41:19:35:de:35:88:74:76:57:0f:93:d5:45:
                    2d:a7:90:0e:19:13:c3:e8:ec:2f:6a:96:49:ac:06:
                    7a:71:39:8f:ce:82:22:f8:c1:f4:3a:cc:4d:b7:1c:
                    ef:f5:7b:b0:10:8d:89:cc:c4:88:4e:c4:d6:ae:bc:
                    a5:bf:f9:b0:e8:c6:f1:b5:a9:f3:c5:2f:bb:55:1f:
                    15:94:7b:0c:d0:f6:6e:db:78:e7:6b:58:d2:c2:53:
                    71:d0:33:8a:69:e9:15:14:3c:05:37:98:e5:d6:12:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:63:F8:4F:30:9F:E0:D9:AF:91:5A:DB:B8:49:6C:18:0B:A5:EA:53
            X509v3 Authority Key Identifier:
                keyid:3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a323030303a3a2f33352d3335203d3e20323636343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3774:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         28:54:ab:37:e7:d4:6f:56:7c:ab:ff:7b:db:6a:6a:00:7c:be:
         47:ff:2e:e7:70:98:28:fa:f0:17:a9:76:f7:0c:c1:0d:58:08:
         08:99:7a:53:ad:b6:03:fb:35:ba:a6:71:e2:10:55:18:8b:7e:
         e6:b8:a6:10:f9:94:ff:69:18:86:9f:3b:7a:d8:4e:58:e0:f5:
         1f:08:33:38:85:c9:f8:7d:19:ff:d1:13:da:88:1f:7a:10:c4:
         75:af:a4:e3:f8:74:a9:c6:82:77:64:9b:6a:3c:99:35:7e:15:
         27:ed:18:19:54:3c:57:db:73:c2:f7:36:06:64:c7:c0:f2:bc:
         5d:73:29:26:8d:81:97:79:68:fa:81:c9:31:99:5d:bb:9e:cf:
         86:ff:85:c9:73:4a:69:20:2a:4d:b3:bf:3d:4b:19:59:54:08:
         21:26:49:e4:ed:a9:89:c5:30:c2:f6:24:ab:a7:e3:2c:a8:de:
         f8:0b:49:39:29:f7:1f:29:aa:9f:80:2c:53:42:20:40:5e:c6:
         84:d1:5f:81:a2:fc:64:7c:92:1e:ce:f6:44:59:61:51:66:9a:
         1d:10:e6:ef:87:c8:29:cf:00:ab:d8:3e:b7:5c:b8:50:c7:bd:
         96:d6:fc:81:e0:26:df:96:15:e2:fa:52:ee:de:07:3e:05:31:
         52:28:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:17:53 2025 by rpki-client