Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/323830343a326362343a633030303a3a2f33342d3334203d3e20323635323338.roa
File:                     323830343a326362343a633030303a3a2f33342d3334203d3e20323635323338.roa (raw, json)
Hash identifier:          un+OZiZIzg7qv42+n8aDcCpknNDvZWASiPxPrYb98is=
Subject key identifier:   59:DC:C2:E6:C7:93:8F:7D:13:FF:54:70:7A:BD:69:10:C0:DF:EE:17
Certificate issuer:       /CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
Certificate serial:       48181048936E80AE9C6F9407A16AB7992AE4D43D
Authority key identifier: F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/323830343a326362343a633030303a3a2f33342d3334203d3e20323635323338.roa
Signing time:             Fri 20 Oct 2023 23:01:36 +0000
ROA not before:           Fri 20 Oct 2023 22:56:36 +0000
ROA not after:            Fri 18 Oct 2024 23:01:36 +0000
asID:                     265238
IP address blocks:        2804:2cb4:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:18:10:48:93:6e:80:ae:9c:6f:94:07:a1:6a:b7:99:2a:e4:d4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5
        Validity
            Not Before: Oct 20 22:56:36 2023 GMT
            Not After : Oct 18 23:01:36 2024 GMT
        Subject: CN=59DCC2E6C7938F7D13FF54707ABD6910C0DFEE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:ac:da:85:51:77:4b:f8:5a:7a:2f:97:13:
                    be:d2:de:80:1a:ad:4b:b0:c4:04:98:a2:33:54:b6:
                    7f:94:6d:ca:ea:29:85:f3:2d:1d:7c:2a:b5:4f:78:
                    c3:61:31:df:fc:06:6c:7f:13:d5:c1:02:eb:95:55:
                    d8:f3:0f:7e:6e:24:18:71:b9:2e:e8:84:bf:ff:25:
                    e3:46:bc:25:4f:56:03:b4:d2:b7:07:bf:04:7d:38:
                    8c:b9:d5:f2:88:a1:8c:3e:31:d9:ad:7d:29:f7:e9:
                    2b:a6:51:71:f2:1c:37:a0:0b:c3:c7:80:c6:49:7a:
                    4e:c0:2e:12:c9:66:9d:4a:3c:71:f5:30:c8:23:bf:
                    68:83:e2:85:ee:06:65:0c:60:95:31:97:ed:5a:85:
                    e9:c9:b8:9d:a3:7d:97:89:41:f2:2e:2e:f1:d6:0a:
                    14:ab:0f:c7:03:dd:cf:bf:12:dd:0e:ed:a9:17:5f:
                    13:a0:1e:12:c4:b9:9f:8e:a4:5d:32:a7:47:8b:ad:
                    10:1d:5b:49:61:36:6a:1d:26:94:8a:b7:a5:ed:1f:
                    c7:6f:91:6d:37:a5:a3:59:49:9f:46:7d:78:f9:82:
                    80:b9:14:8b:53:58:73:bd:2f:cd:7f:b6:f9:2d:31:
                    3d:fd:06:59:02:bf:f4:a0:8b:e9:69:b6:9e:75:ba:
                    85:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DC:C2:E6:C7:93:8F:7D:13:FF:54:70:7A:BD:69:10:C0:DF:EE:17
            X509v3 Authority Key Identifier:
                keyid:F2:C7:98:CC:A8:39:52:3F:B3:C7:E4:C6:A3:65:E6:A6:5E:11:C9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C798CCA839523FB3C7E4C6A365E6A65E11C9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQMEkRRDZjQxbjj7fRX3rzQ8HHU2Xbt6SkyBsPVFnKwC/0/323830343a326362343a633030303a3a2f33342d3334203d3e20323635323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cb4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:03:f4:e0:03:24:fb:6a:61:3c:97:1c:7d:3f:82:10:2f:f4:
         7b:d8:d8:d7:61:45:0b:62:2d:96:6a:4c:8e:ff:17:e8:1d:78:
         02:16:5a:01:8b:77:44:7a:22:cf:01:17:47:82:98:ec:48:28:
         2e:09:4c:b6:3a:4b:55:fe:1e:97:6f:bb:85:fa:04:75:28:37:
         2a:d6:e4:77:88:81:e3:cb:0e:db:59:91:8c:38:43:a6:39:24:
         37:5b:d6:ed:09:ab:64:90:90:b9:9a:d6:c8:e3:11:43:c7:4d:
         53:57:c5:16:87:8b:0e:49:40:a6:ea:00:27:90:a6:91:b6:7b:
         3b:8d:30:d0:5e:97:78:e1:e0:88:c8:8d:bb:89:f2:df:49:c1:
         ed:20:ef:ae:23:0b:92:b4:82:88:58:46:a8:c9:35:7f:4a:87:
         69:54:00:0b:1e:bd:66:73:c5:1c:d8:ce:34:3d:10:d5:01:4b:
         57:52:a5:8d:43:91:c1:b7:6f:bd:a4:6f:ff:0f:e3:6a:e9:87:
         27:b6:2d:af:d5:0a:30:08:31:b6:d9:52:71:eb:de:e2:49:4c:
         fc:71:97:ef:c3:fc:a6:80:3d:c5:88:bc:70:9a:bd:f2:8f:85:
         39:ea:47:a7:4a:98:c9:0a:17:ff:a4:ad:45:31:a4:aa:27:2b:
         92:f7:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:29:06 2025 by rpki-client