Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a383030303a3a2f33342d3334203d3e20323730393937.roa
File:                     323830343a373462303a383030303a3a2f33342d3334203d3e20323730393937.roa (raw, json)
Hash identifier:          IP8pvuoTlYCp6vaAU9ROOE/OxRRSn7AF8jKc2ithMSI=
Subject key identifier:   A9:A2:94:ED:DD:3F:99:59:39:97:D2:37:B6:56:E1:AA:8A:BC:3E:E5
Certificate issuer:       /CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
Certificate serial:       0DF284618BC3AE23D25998FCF1932397A857ED51
Authority key identifier: 7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a383030303a3a2f33342d3334203d3e20323730393937.roa
Signing time:             Tue 14 Jan 2025 14:01:29 +0000
ROA not before:           Tue 14 Jan 2025 13:56:29 +0000
ROA not after:            Tue 13 Jan 2026 14:01:29 +0000
asID:                     270997
IP address blocks:        2804:74b0:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f2:84:61:8b:c3:ae:23:d2:59:98:fc:f1:93:23:97:a8:57:ed:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
        Validity
            Not Before: Jan 14 13:56:29 2025 GMT
            Not After : Jan 13 14:01:29 2026 GMT
        Subject: CN=A9A294EDDD3F99593997D237B656E1AA8ABC3EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:67:e2:0e:05:61:22:49:42:1e:07:b7:65:
                    16:1d:e9:b8:89:25:f8:af:4e:86:48:40:3b:24:55:
                    44:c2:c1:19:6d:b9:5a:2d:14:ff:0c:ab:72:55:54:
                    0b:16:a7:b9:2b:ae:f9:6e:a6:53:4a:b4:bb:f5:fd:
                    c4:a0:b0:61:bc:26:f2:8d:16:8a:5e:d9:dc:d2:3c:
                    2c:3b:d8:2f:c8:57:6c:2e:59:3b:63:33:14:76:89:
                    90:34:52:ea:e4:23:42:70:f0:fa:77:f2:23:83:b3:
                    34:f8:bf:fa:ad:a6:e0:8f:11:c0:8e:47:97:07:33:
                    87:d8:74:c0:3c:9c:3a:15:ef:98:31:9e:1b:cc:3f:
                    28:6c:e2:9a:1d:b6:6c:ec:1a:c2:da:f4:2e:d0:fc:
                    4c:70:9f:57:6d:0f:3e:05:be:2f:d3:3c:00:e1:0f:
                    6f:3d:d3:7b:be:34:3a:ef:0e:e2:76:dd:52:bb:74:
                    e0:fe:d2:50:7f:a1:e9:5b:8e:c7:9e:f0:80:31:53:
                    e3:5b:3e:8d:95:b2:08:ae:01:3d:3e:5f:28:eb:30:
                    28:34:70:c3:61:99:b8:50:fe:b7:33:37:27:12:65:
                    3e:39:46:f8:23:fe:59:5f:c0:41:18:82:71:03:12:
                    25:38:9a:d1:91:28:c0:82:0d:4f:23:90:9d:2d:99:
                    53:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A2:94:ED:DD:3F:99:59:39:97:D2:37:B6:56:E1:AA:8A:BC:3E:E5
            X509v3 Authority Key Identifier:
                keyid:7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a383030303a3a2f33342d3334203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74b0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:2a:96:08:d2:0c:e6:f0:fc:a7:9b:98:a1:3a:ab:a2:25:52:
         5c:cd:7c:87:24:0e:8b:a2:0d:dd:d1:b2:3f:36:ff:d2:75:4c:
         54:c6:8d:d9:f9:2f:80:f0:6b:ff:10:37:63:a5:ba:28:04:a0:
         d9:88:09:99:48:15:0c:5e:0b:79:27:d3:c6:ae:2b:87:6b:40:
         8a:e3:ea:d9:0d:6c:1f:bf:71:53:a0:57:7b:c2:d0:e1:4b:28:
         12:41:07:9e:6a:d7:89:cb:c2:79:eb:06:24:b2:ef:8c:7a:5f:
         05:12:0c:c6:03:d1:3f:f1:95:10:60:e7:4a:56:cf:d2:58:1a:
         19:4b:61:b3:af:27:ac:d4:5c:e8:71:b4:1d:90:3c:3e:21:27:
         b3:10:03:f1:2a:49:66:48:9f:b7:8b:fb:c9:57:81:e8:c1:f5:
         ff:3c:0b:06:cd:59:d0:3c:82:c3:de:dd:06:ae:e7:da:5d:60:
         b6:ef:cd:20:ba:b6:7e:93:1e:b0:00:5a:00:40:96:98:48:f0:
         0c:57:5d:e5:aa:98:42:6c:5c:a7:08:fd:22:67:f0:39:76:53:
         a1:ac:4e:15:72:49:02:94:50:a1:3a:c4:72:79:c1:8a:b9:46:
         1c:5c:f5:67:d5:b8:1c:4b:a0:21:ac:0b:a0:6f:a9:7b:73:49:
         c4:83:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:58:55 2025 by rpki-client