Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a383630303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a383630303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          0FKQR6ZcbFfWgqj7DwqbSAqj4ojxuPQnnTUyJ5j3LWw=
Subject key identifier:   43:78:23:5E:4D:D4:93:B6:60:33:40:5D:EA:AD:C1:4C:1A:70:C2:DA
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       39E285B9B68580C51D04AB5D585A86266E8C5D58
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a383630303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:08:21 +0000
ROA not before:           Sun 23 Jul 2023 00:03:21 +0000
ROA not after:            Sun 21 Jul 2024 00:08:21 +0000
asID:                     264242
IP address blocks:        2804:24cc:8600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e2:85:b9:b6:85:80:c5:1d:04:ab:5d:58:5a:86:26:6e:8c:5d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 23 00:03:21 2023 GMT
            Not After : Jul 21 00:08:21 2024 GMT
        Subject: CN=4378235E4DD493B66033405DEAADC14C1A70C2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:32:b5:da:1e:24:e1:81:de:02:79:4c:0c:62:
                    9a:dc:86:32:0c:49:ad:ac:0a:72:07:48:46:30:81:
                    25:dd:96:0f:45:d7:8e:66:05:42:90:b8:cd:75:79:
                    ac:f3:a6:c1:1d:7b:3c:13:a7:52:0a:b2:09:ed:49:
                    8a:1c:d7:68:6a:16:fb:1e:35:f5:f0:7a:52:c8:29:
                    f4:02:ee:af:dc:88:67:39:85:b7:d2:61:72:aa:d2:
                    6c:d7:98:bf:2e:d1:a8:94:e4:22:58:46:ab:32:04:
                    79:98:a6:2e:32:ac:3b:ce:0a:10:60:ac:3f:82:d5:
                    ad:10:76:9c:1b:18:cf:69:7e:15:8f:d0:dd:6c:0f:
                    3c:eb:9f:1a:2e:d8:ed:8b:b6:e0:1a:c6:c0:52:6b:
                    41:08:16:7a:65:b9:38:bc:42:c2:d1:1d:b7:84:a7:
                    de:92:51:26:58:73:0e:7c:ee:78:57:6e:38:ed:bb:
                    bd:c3:99:e2:53:7b:fc:8a:bd:04:ec:85:74:55:7f:
                    f7:e6:73:35:b2:62:01:86:a6:d0:6a:63:be:ad:10:
                    d7:93:db:d1:e4:7c:5d:b2:a5:25:2d:8d:f9:9b:42:
                    60:84:87:ca:63:c3:06:31:8f:a0:4a:22:13:c8:1f:
                    eb:ac:f8:92:d8:97:72:c7:af:40:a7:0d:c4:44:f0:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:78:23:5E:4D:D4:93:B6:60:33:40:5D:EA:AD:C1:4C:1A:70:C2:DA
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/323830343a323463633a383630303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:62:4f:d8:56:7a:79:2d:52:a3:b1:ad:5c:53:a0:bd:51:41:
         13:0a:36:48:d7:8b:96:0e:83:5b:a0:81:17:67:1d:ab:c2:85:
         a3:ea:3e:c5:1b:24:3e:da:0f:4c:3e:52:d6:a7:e1:10:ae:21:
         dc:92:66:eb:ee:b3:35:f6:96:78:5f:89:f4:b7:12:dd:bf:31:
         82:3c:c4:27:f5:2e:f1:c8:8c:77:17:03:d9:e3:35:cd:59:71:
         56:8e:50:44:52:3d:ac:00:33:c3:09:2f:0d:69:55:94:4c:55:
         a3:45:d0:4a:58:ad:39:ce:54:4b:4e:71:6b:18:2d:86:4d:dd:
         7a:e5:3b:5e:d7:14:cf:53:ba:c1:fa:8f:6f:ea:bd:48:c9:ee:
         ae:aa:b7:ae:aa:1e:62:83:c4:9a:77:90:82:df:07:ad:9b:9c:
         a5:cb:da:1d:de:5a:57:17:56:59:4e:85:6c:ab:e6:d7:59:16:
         19:00:f1:97:a5:ce:3f:95:98:91:7c:cd:fb:39:e1:4a:7d:aa:
         bf:a0:a9:3d:40:66:0b:b7:6f:29:7b:b9:dc:f4:5b:aa:87:1e:
         be:52:85:6f:42:0e:ef:38:8c:81:98:34:e5:84:e6:d4:3c:8f:
         80:ba:33:1d:08:a9:8b:e7:85:84:9a:9c:5d:d3:5c:d1:bc:0f:
         48:7f:32:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:08 2025 by rpki-client