Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a343030303a3a2f33342d3334203d3e20323636353530.roa
File:                     323830343a336462633a343030303a3a2f33342d3334203d3e20323636353530.roa (raw, json)
Hash identifier:          v2FnTfPCvBjAKKvTH1V5PnyDQlh7tQlJfSDvkNVPJms=
Subject key identifier:   1F:45:79:D5:93:C9:5E:3C:4C:E6:85:FE:CC:BA:E2:5A:4F:CB:3C:4F
Certificate issuer:       /CN=6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30
Certificate serial:       06065B3727542FC5358B77192DAEBC82F81EB3B7
Authority key identifier: 6E:A9:F6:7C:0E:EB:67:E4:E0:B2:9F:78:F1:1A:B5:CB:1D:DB:4A:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a343030303a3a2f33342d3334203d3e20323636353530.roa
Signing time:             Wed 14 Jul 2021 18:07:10 +0000
ROA not before:           Wed 14 Jul 2021 18:02:10 +0000
ROA not after:            Wed 13 Jul 2022 18:07:10 +0000
asID:                     266550
IP address blocks:        2804:3dbc:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:06:5b:37:27:54:2f:c5:35:8b:77:19:2d:ae:bc:82:f8:1e:b3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30
        Validity
            Not Before: Jul 14 18:02:10 2021 GMT
            Not After : Jul 13 18:07:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:a0:11:ed:ee:09:e1:b2:8b:c5:42:22:a9:
                    8b:84:12:58:0e:f3:90:ee:62:b6:8c:52:91:a0:e8:
                    f7:76:10:63:54:47:a6:4c:d6:05:92:46:fc:d4:cc:
                    19:53:42:45:9d:1a:2b:e4:8d:6d:46:67:40:d3:ac:
                    15:41:b1:7b:35:45:66:2a:7d:6d:dc:2a:79:4c:e8:
                    50:32:85:0a:5e:00:cf:39:4c:6e:b4:cc:9e:4f:e6:
                    a7:de:ae:32:82:e8:a6:cd:f5:1e:2d:9e:50:0e:82:
                    03:bf:34:0f:a5:b6:0e:e7:4f:57:35:71:7d:0a:b6:
                    3b:fc:09:a0:a8:15:21:71:99:f6:58:e7:33:08:ba:
                    96:10:e8:13:41:de:a5:ef:85:a2:e5:75:7a:87:8c:
                    48:e9:17:29:d1:e2:be:33:8e:71:fe:15:d1:03:99:
                    d7:68:0e:4f:e0:67:a6:02:e2:47:61:86:3a:40:c8:
                    51:d9:8a:1a:8f:2b:ad:48:bc:dd:10:90:93:6d:57:
                    3e:94:42:96:59:82:37:b8:53:2b:94:d7:96:79:92:
                    c1:ed:71:dc:1a:6e:c1:70:e9:cb:b6:32:58:65:99:
                    17:cf:80:37:16:9f:76:f0:ac:eb:6e:02:b0:72:20:
                    cb:dd:88:71:5f:d6:97:82:30:df:2e:ec:ee:ee:fe:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:45:79:D5:93:C9:5E:3C:4C:E6:85:FE:CC:BA:E2:5A:4F:CB:3C:4F
            X509v3 Authority Key Identifier:
                keyid:6E:A9:F6:7C:0E:EB:67:E4:E0:B2:9F:78:F1:1A:B5:CB:1D:DB:4A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a343030303a3a2f33342d3334203d3e20323636353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dbc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:6a:85:b3:0b:f2:f3:63:78:41:c5:cd:2d:7a:c7:87:7d:
         49:27:32:d1:a8:72:4c:d8:31:85:8a:4c:6e:e7:e5:b9:37:3e:
         95:fa:5e:60:a0:63:b8:fa:c3:45:3b:62:9c:49:bc:ca:f8:5b:
         ee:8d:0d:53:a5:02:10:f2:8d:34:14:de:23:5f:59:3c:cf:a1:
         03:e8:2d:53:08:5c:c2:ec:e3:94:24:bb:c5:c9:8b:ac:27:e6:
         e8:b1:6c:0b:9b:9d:38:98:ac:0d:55:79:0a:33:62:72:2e:91:
         00:db:0d:15:b8:3f:9e:72:00:2e:f7:60:51:cc:02:5e:fd:49:
         18:b5:9e:3a:de:db:bd:ac:9d:59:a3:2f:66:e1:a0:7d:f3:d7:
         51:8f:37:1a:d0:50:96:ba:ec:0f:e2:ed:24:c7:80:f6:d5:d7:
         d9:fe:24:98:aa:a5:2d:b9:69:22:33:0f:8d:8e:c2:06:f8:82:
         6a:11:54:1a:fb:c3:a3:fb:8b:89:85:8e:1c:f3:c2:23:27:0f:
         76:d4:8e:cb:54:71:4a:b8:74:f9:2a:05:07:35:6f:0b:61:43:
         85:d6:39:00:d4:c1:82:88:e3:e7:e6:cf:5a:b9:f1:f0:bb:3b:
         84:fb:2d:dc:21:6c:e8:a5:6d:2c:35:d2:08:9e:28:c7:9f:79:
         38:1b:9f:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:51:38 2025 by rpki-client