Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a3a2f33332d3333203d3e20323636353530.roa
File:                     323830343a336462633a3a2f33332d3333203d3e20323636353530.roa (raw, json)
Hash identifier:          JVZOD+ZMtay9BhR0DDkLQlTSDhHlPP+j/7QAIOKLcq4=
Subject key identifier:   68:5A:A7:BA:EF:43:AC:B3:CA:3A:8E:5B:8E:30:AE:BC:50:71:89:52
Certificate issuer:       /CN=6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30
Certificate serial:       7692C7EF53895DCDBF4A62A3CC14E37B6F10AEC0
Authority key identifier: 6E:A9:F6:7C:0E:EB:67:E4:E0:B2:9F:78:F1:1A:B5:CB:1D:DB:4A:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a3a2f33332d3333203d3e20323636353530.roa
Signing time:             Wed 14 Jul 2021 17:54:03 +0000
ROA not before:           Wed 14 Jul 2021 17:49:03 +0000
ROA not after:            Wed 13 Jul 2022 17:54:03 +0000
asID:                     266550
IP address blocks:        2804:3dbc::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:92:c7:ef:53:89:5d:cd:bf:4a:62:a3:cc:14:e3:7b:6f:10:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30
        Validity
            Not Before: Jul 14 17:49:03 2021 GMT
            Not After : Jul 13 17:54:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:55:69:70:ab:c0:b7:6e:d6:90:8d:9a:5c:
                    18:b6:05:3e:30:de:70:f8:98:12:df:da:5c:01:cc:
                    c2:45:59:c0:1b:c8:45:ff:f6:e6:82:6b:b5:ab:43:
                    31:1d:79:2a:73:2c:4b:8f:d8:52:f8:db:9a:5c:9e:
                    88:e5:42:a4:b6:86:1a:43:39:59:34:7e:b7:ba:6d:
                    b5:21:5f:07:4a:f5:6a:65:6c:96:2a:09:2e:74:e8:
                    7b:97:c6:d8:a0:dc:ae:4a:33:60:25:d5:8f:0d:f8:
                    18:1c:41:81:7d:3d:31:f7:90:b5:80:4c:b3:88:c2:
                    85:6a:6c:6c:58:95:2e:9b:27:3f:c4:70:86:a7:b9:
                    eb:f8:3f:37:da:9b:3c:53:53:9a:c1:a2:ba:8e:cd:
                    90:ab:80:44:0b:40:b2:da:0e:6a:b8:6f:dd:07:5b:
                    c7:3e:e4:4a:41:21:2b:6b:06:08:dc:00:e7:4d:bc:
                    81:b7:48:10:a2:78:9e:fd:40:d0:2f:8d:96:9e:5a:
                    78:68:66:c6:a8:c4:cd:6a:d8:3c:88:4b:fa:6a:15:
                    f4:9c:a5:b3:5c:e0:8f:41:4a:4b:29:11:70:c0:8a:
                    0c:5f:6c:3d:de:ff:46:7e:53:15:d4:f8:44:f9:8f:
                    15:50:7a:e1:b5:b9:0f:f8:a9:84:6c:83:07:24:1e:
                    d3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5A:A7:BA:EF:43:AC:B3:CA:3A:8E:5B:8E:30:AE:BC:50:71:89:52
            X509v3 Authority Key Identifier:
                keyid:6E:A9:F6:7C:0E:EB:67:E4:E0:B2:9F:78:F1:1A:B5:CB:1D:DB:4A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a3a2f33332d3333203d3e20323636353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dbc::/33

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:88:dc:ac:23:05:3b:24:fd:9c:7c:b0:a3:4e:0a:9d:dd:
         6f:46:9f:c1:94:56:31:f6:a2:bb:13:c3:b4:3d:cb:45:2c:4f:
         62:a4:bb:5a:32:a4:08:87:85:10:30:35:bb:ab:64:e3:56:b0:
         9a:a2:9b:c4:9d:ae:a2:35:d1:b4:70:79:38:20:df:03:b3:88:
         c1:ca:45:60:60:38:62:e7:bd:12:46:cf:ff:1a:80:b8:6b:c3:
         a4:c1:e8:d3:f2:7e:b6:da:eb:bc:c7:f6:2a:46:dd:0e:15:f6:
         ba:36:94:19:01:ac:9b:59:82:2e:e9:b5:19:24:cb:5c:0b:bc:
         53:e6:12:70:5c:f3:dd:de:4e:e7:7d:ed:c1:87:7e:0c:9c:e0:
         9d:1f:3c:c7:50:68:e0:8a:56:df:9d:51:6b:6c:a0:fa:bd:e4:
         f5:6c:84:4e:72:e8:71:bc:51:48:d4:69:19:bb:1d:e8:f6:ad:
         39:7d:77:81:fb:b6:ec:b0:43:eb:93:75:51:86:f1:7c:fd:64:
         f0:b6:f1:2a:e6:d8:7d:7c:e3:3e:2e:86:bd:ca:10:64:73:91:
         b3:ff:74:e6:d5:fd:d6:94:1f:7d:6f:6c:bb:57:12:df:bf:28:
         bc:52:de:ff:f7:68:a8:ce:51:de:79:31:a1:ed:d4:ca:cb:8f:
         c4:01:c8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:41 2025 by rpki-client