Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/323830343a323134303a3a2f33322d3332203d3e203533303539.roa
File:                     323830343a323134303a3a2f33322d3332203d3e203533303539.roa (raw, json)
Hash identifier:          Bo7AOyzRJadrVB2asnhApmnTBg7ZPKn3aMqkm/Iatb0=
Subject key identifier:   4B:68:DA:92:CA:E1:AE:4A:D8:B4:F6:AC:A2:C5:56:A5:D3:00:98:00
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       6FAE11707C6C95936D07DB4FBCCD540432CF71D2
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/323830343a323134303a3a2f33322d3332203d3e203533303539.roa
Signing time:             Tue 13 Sep 2022 09:05:27 +0000
ROA not before:           Tue 13 Sep 2022 09:00:27 +0000
ROA not after:            Tue 12 Sep 2023 09:05:27 +0000
asID:                     53059
IP address blocks:        2804:2140::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ae:11:70:7c:6c:95:93:6d:07:db:4f:bc:cd:54:04:32:cf:71:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Sep 13 09:00:27 2022 GMT
            Not After : Sep 12 09:05:27 2023 GMT
        Subject: CN=4B68DA92CAE1AE4AD8B4F6ACA2C556A5D3009800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:31:e5:0d:91:d9:83:cb:6d:92:59:90:a6:
                    43:3d:41:4a:0f:81:3b:cc:74:66:f2:4a:e9:fd:b4:
                    80:dd:1f:e9:8a:df:27:9f:ee:2d:d3:c0:87:2e:ef:
                    32:4c:d2:f7:c4:77:fa:3a:4a:08:88:46:5d:83:87:
                    ef:5a:39:eb:dc:50:55:61:9d:13:40:dd:ae:65:b8:
                    36:f8:46:07:7e:bf:98:ad:79:07:4d:34:3c:f3:f3:
                    85:01:5c:7e:6c:03:6c:f3:1a:cf:9c:7e:8e:a2:fe:
                    46:7e:2e:76:03:65:15:1b:12:33:78:3a:e2:98:4e:
                    fd:c8:ff:74:7c:47:67:e9:07:db:7d:27:22:90:b4:
                    6a:48:58:99:5b:d9:77:53:f7:3f:3c:4a:ee:93:5a:
                    5e:08:a1:bc:93:3f:51:59:a7:3c:1d:64:10:c5:51:
                    b3:d3:6d:c0:45:55:1b:5a:0d:0c:1d:7a:e1:77:3d:
                    96:e2:85:56:53:17:fd:67:c0:5e:43:29:22:ea:0a:
                    e5:eb:17:93:12:4e:a9:36:bf:eb:fb:1c:26:81:c4:
                    cf:f7:2e:43:be:48:b1:db:ba:5e:e4:b1:8a:ad:13:
                    0d:61:84:39:c3:97:36:73:b4:79:25:da:d1:01:47:
                    e2:6c:4f:c6:f7:b2:d7:98:c1:76:79:31:d3:be:cb:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:68:DA:92:CA:E1:AE:4A:D8:B4:F6:AC:A2:C5:56:A5:D3:00:98:00
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/323830343a323134303a3a2f33322d3332203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2140::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:e2:66:c6:2b:f0:d2:46:26:12:35:f6:f1:66:9d:85:36:e5:
         86:b7:2b:f3:ba:76:2b:55:9a:15:25:6d:03:ce:76:56:b7:4d:
         eb:5a:de:79:80:f7:eb:84:e5:15:0c:93:85:3c:8c:07:51:14:
         f2:fd:9b:1d:da:b1:12:04:9c:af:3a:c1:b9:84:7e:ab:f5:b6:
         c5:f4:d4:3b:a6:a2:e4:88:42:b3:05:8c:8b:78:d2:af:e9:f4:
         86:ae:29:08:5a:e2:52:93:e2:28:05:e9:1f:f6:e3:f7:d8:c2:
         c5:d8:cd:51:93:e1:ae:23:23:b7:27:22:5a:51:64:62:f3:b3:
         59:c0:f8:91:62:d0:2a:ed:e2:d6:06:5d:86:2e:40:1d:4f:e7:
         53:04:e1:09:b6:11:22:6e:e7:b3:9b:ac:a7:cd:e0:36:f0:18:
         48:e1:68:59:69:6b:f9:ad:b1:30:69:2c:50:6c:45:a8:5e:75:
         82:3d:1f:98:39:af:5a:42:58:49:02:39:8f:cd:9f:b7:3c:77:
         f3:b7:75:79:de:cc:a4:cd:17:08:fa:bb:93:3c:53:ae:ce:0e:
         32:b5:9b:9f:c0:63:f3:88:2e:48:3e:ef:9b:c2:5c:99:26:7b:
         3c:51:0e:06:91:72:a8:73:1f:2a:12:32:a0:e1:1a:a2:e1:f8:
         66:7e:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:56:52 2025 by rpki-client