Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a323430303a3a2f34302d3430203d3e20323636343136.roa
File:                     323830343a333737343a323430303a3a2f34302d3430203d3e20323636343136.roa (raw, json)
Hash identifier:          5nzbDIIDfXXCw4RR5utH8JsDFX9OSnsg93NE1uXtMeE=
Subject key identifier:   AB:07:BA:41:81:FB:82:45:79:08:E9:79:47:38:40:EF:C6:1A:30:FA
Certificate issuer:       /CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
Certificate serial:       2731BC39E0309405F5CF4E49D907FABB6303A0B1
Authority key identifier: 3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a323430303a3a2f34302d3430203d3e20323636343136.roa
Signing time:             Sun 26 May 2024 20:57:26 +0000
ROA not before:           Sun 26 May 2024 20:52:26 +0000
ROA not after:            Sun 25 May 2025 20:57:26 +0000
asID:                     266416
IP address blocks:        2804:3774:2400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:31:bc:39:e0:30:94:05:f5:cf:4e:49:d9:07:fa:bb:63:03:a0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
        Validity
            Not Before: May 26 20:52:26 2024 GMT
            Not After : May 25 20:57:26 2025 GMT
        Subject: CN=AB07BA4181FB82457908E979473840EFC61A30FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:a9:29:46:78:f5:71:e3:61:aa:08:a5:55:
                    e6:ef:5d:21:64:df:8f:10:ae:46:7e:55:71:54:00:
                    97:71:ff:01:59:ed:83:92:05:44:37:73:9c:96:d8:
                    cb:b6:be:6a:ae:a5:e9:aa:c0:6b:84:ce:08:03:ac:
                    19:33:f9:46:32:43:d6:78:35:ed:54:3e:32:0b:5b:
                    12:b0:16:55:37:89:30:74:19:4b:67:50:ed:4e:61:
                    5f:a7:34:e9:de:4e:5c:19:51:99:7f:5f:45:85:2b:
                    b6:7d:17:dd:2e:df:2d:30:69:53:09:cd:ea:73:f6:
                    a1:d0:d9:62:d3:ea:e5:81:ab:36:e4:43:a4:89:25:
                    3d:18:fb:0b:fc:c3:14:1a:bb:89:02:21:8d:4d:d3:
                    a6:c2:5f:3b:ca:b7:15:82:aa:2d:0f:bb:7d:fe:5b:
                    a1:9d:0c:84:64:a7:67:1a:9e:0e:65:6e:5a:cd:d2:
                    42:e2:dc:a2:8b:ce:59:2b:88:77:05:b9:31:fb:99:
                    92:b0:30:47:e1:35:7d:f4:26:8c:1d:f8:03:43:6b:
                    96:70:2e:5e:b7:f5:1a:a4:15:86:e8:de:1f:9d:53:
                    e2:b1:53:62:2e:9d:52:07:d2:e5:ef:55:86:b0:a0:
                    e4:6e:e0:0d:8d:a6:24:88:4e:3d:fc:3e:f0:52:6a:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:07:BA:41:81:FB:82:45:79:08:E9:79:47:38:40:EF:C6:1A:30:FA
            X509v3 Authority Key Identifier:
                keyid:3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a323430303a3a2f34302d3430203d3e20323636343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3774:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:b5:11:7d:64:13:0f:dd:d7:c5:8c:8b:87:b2:10:cb:4c:17:
         83:ee:60:d3:ca:61:61:a9:68:a0:8c:69:a2:a8:7a:f1:4c:16:
         38:75:9e:98:71:93:84:f5:ee:9f:0b:32:66:2f:3c:4e:7e:52:
         1a:49:70:c7:3f:ef:de:30:12:c2:5c:98:45:0e:73:e8:51:59:
         b0:2a:ea:ed:9b:e9:44:8b:72:bf:f4:6b:73:28:78:a4:c9:86:
         fd:52:96:b0:12:88:ca:45:f8:ed:1a:be:0f:4a:e8:88:8b:15:
         48:4b:e1:82:ff:9e:09:27:b3:47:62:d6:37:c6:03:74:b1:28:
         f3:ac:10:9b:7c:f1:54:96:8a:7d:56:7e:72:53:8d:fb:ee:c2:
         1a:ca:ad:68:79:36:36:0a:6f:19:34:d5:a3:77:49:37:53:b2:
         40:47:9d:5c:66:69:41:89:89:05:68:d9:24:0a:d9:a9:30:00:
         85:12:03:f1:3d:db:03:44:32:40:fe:b4:90:19:fc:b6:6e:4d:
         ff:b9:e6:59:0a:e9:d3:bd:0d:e8:fa:2e:48:10:4c:0f:7e:d9:
         66:de:79:e7:05:23:06:72:de:60:6f:3d:de:72:4f:fb:9c:a6:
         0d:7d:bd:91:0a:ad:ce:e4:75:73:c6:8d:fc:b5:bf:cc:12:95:
         1d:ea:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:01:30 2025 by rpki-client