Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33342d3334203d3e20323636343133.roa
File:                     323830343a333736633a3a2f33342d3334203d3e20323636343133.roa (raw, json)
Hash identifier:          JK3w7Y0zpczkq24nDZ/GCXBCRHGCMwVSj7JRdVbpb48=
Subject key identifier:   09:19:C5:35:8D:F1:16:69:C8:C5:DA:93:FE:28:98:46:7C:54:45:8C
Certificate issuer:       /CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
Certificate serial:       2A2C48F60DC294661CAD22E4434E7F824B5129E3
Authority key identifier: 76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33342d3334203d3e20323636343133.roa
Signing time:             Thu 04 Jul 2024 02:17:21 +0000
ROA not before:           Thu 04 Jul 2024 02:12:21 +0000
ROA not after:            Thu 03 Jul 2025 02:17:21 +0000
asID:                     266413
IP address blocks:        2804:376c::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2c:48:f6:0d:c2:94:66:1c:ad:22:e4:43:4e:7f:82:4b:51:29:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76BC8672B6C71CBFC423D1106E72877D60284FD6
        Validity
            Not Before: Jul  4 02:12:21 2024 GMT
            Not After : Jul  3 02:17:21 2025 GMT
        Subject: CN=0919C5358DF11669C8C5DA93FE2898467C54458C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:3a:fb:f9:77:16:6d:d6:2e:8b:76:f3:47:
                    f3:6e:ca:65:8e:8d:b1:1c:63:ef:98:2e:73:cb:a6:
                    b5:86:f0:26:a5:12:99:ba:39:00:0a:94:9d:2f:cd:
                    cb:f5:78:fc:4a:d7:b7:e4:e2:aa:b0:5f:ac:ac:39:
                    7d:28:71:fe:a6:96:32:d9:3a:0a:ac:0c:35:66:14:
                    be:8a:ec:d7:c3:a6:89:6e:a8:e8:94:8b:fb:84:80:
                    a8:30:db:c3:ad:61:6e:2e:fb:89:ac:df:34:22:72:
                    0b:0c:78:d6:08:ba:ca:eb:4c:0d:43:b9:a5:c8:02:
                    ae:ed:90:b2:06:0b:27:45:89:d7:6c:c7:13:a3:8e:
                    0e:59:76:cd:96:6c:89:ce:a2:26:25:69:03:86:65:
                    a9:e0:02:8d:01:bf:88:42:f0:b8:ba:b0:7f:e7:66:
                    14:db:56:bf:29:96:3c:83:ad:bd:a4:48:9a:f8:5b:
                    1b:51:2d:5a:f5:c1:fe:32:18:d6:a2:40:ca:19:95:
                    aa:f7:a9:b2:85:d0:1b:93:ee:a5:b5:d3:2f:23:c1:
                    56:77:b1:0d:db:7b:1b:8e:2d:09:f6:33:e2:41:8a:
                    36:b6:35:b5:98:a9:0e:ef:55:83:3d:0a:92:9d:8e:
                    f7:f4:fc:11:2e:e3:86:59:55:f4:c6:2d:a4:b2:d3:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:19:C5:35:8D:F1:16:69:C8:C5:DA:93:FE:28:98:46:7C:54:45:8C
            X509v3 Authority Key Identifier:
                keyid:76:BC:86:72:B6:C7:1C:BF:C4:23:D1:10:6E:72:87:7D:60:28:4F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/76BC8672B6C71CBFC423D1106E72877D60284FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76BC8672B6C71CBFC423D1106E72877D60284FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/323830343a333736633a3a2f33342d3334203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:376c::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:85:bd:a2:72:3a:28:76:bf:06:91:ab:37:1b:f0:f6:9d:80:
         7b:c5:41:72:16:bc:5c:ca:d5:df:43:31:5f:86:f1:b6:cc:e2:
         83:df:b7:fe:4e:8d:21:c1:d9:2e:0a:f1:82:d8:29:fc:63:11:
         9d:5a:2b:eb:16:af:d7:76:1e:9e:4b:8f:93:bb:b7:74:83:25:
         cf:ad:c1:2b:75:0f:f5:2a:42:43:24:bf:04:d1:29:c5:08:f3:
         fc:ab:d0:2c:b3:a8:f9:c4:08:04:05:73:d9:cc:88:0f:37:ed:
         b9:2a:bc:0f:a5:59:ed:98:78:2f:5c:aa:9c:8b:f1:88:e7:c2:
         a0:8d:68:24:a1:2d:51:45:a3:7d:37:40:66:90:58:96:c2:60:
         96:02:67:03:d8:ac:10:e7:95:9c:2d:22:7a:37:0e:ca:4a:3a:
         e9:31:27:0a:b7:95:44:e2:62:14:48:7a:e3:07:1b:5b:d6:f2:
         8a:4d:19:5e:b4:4b:ae:3d:b8:2f:54:22:7d:43:ca:12:25:8e:
         87:7f:81:33:ce:3d:65:31:e2:28:22:18:f2:4c:70:50:c4:6e:
         9e:3d:49:8e:84:de:92:27:53:22:48:c2:e6:f4:4b:c4:94:90:
         2d:62:ef:95:d1:56:0f:fa:58:82:0f:9c:0f:46:4a:c5:68:8a:
         78:e3:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:04:23 2025 by rpki-client