Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/323830343a323431383a3a2f33322d3334203d3e20323634323031.roa
File:                     323830343a323431383a3a2f33322d3334203d3e20323634323031.roa (raw, json)
Hash identifier:          uw5hnZxQ51+OaD6wFqM7ptVysh+aaNHM/KYq4NXcWbA=
Subject key identifier:   10:B2:19:15:91:6A:B5:94:26:8E:FD:95:EC:9E:D8:50:04:18:8A:CF
Certificate issuer:       /CN=6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862
Certificate serial:       5EF554896C4783C757850DCA71A2E59F7DF5E27B
Authority key identifier: 6A:23:AA:2A:FC:E2:E3:27:B2:ED:F3:EF:40:EB:D1:22:CC:BA:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/323830343a323431383a3a2f33322d3334203d3e20323634323031.roa
Signing time:             Sat 15 Jul 2023 15:00:00 +0000
ROA not before:           Sat 15 Jul 2023 14:55:00 +0000
ROA not after:            Mon 15 Jul 2024 15:00:00 +0000
asID:                     264201
IP address blocks:        2804:2418::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f5:54:89:6c:47:83:c7:57:85:0d:ca:71:a2:e5:9f:7d:f5:e2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862
        Validity
            Not Before: Jul 15 14:55:00 2023 GMT
            Not After : Jul 15 15:00:00 2024 GMT
        Subject: CN=3082010A0282010100E5608B4E8E3677180A55CC9A4497D914CC74669F669FBDC60C39DB746F3D4F07556FC9D7CAF454B1D4CB53DDFBFF48F6488DCF5AC49FB4F5005E06B2D980DB470B7F50D05047FF4E87C939573E6A5E6127F0D187EDD70F4677B093E304AABF913D07E2D34949E1748D7D0FA9ED0FEEE5C7882E82C1D18C4D8158B39F701F29D5A96CD7CD1358CB2122560565D324FF5776F72770C8227C98063F5FAB94BFB3AEEB15545E552D9F5D7CA85C9D5DF2DA9510ED57B991BDC0E839AF3C9D72EFB4308BFFED68AE0C3CB083FA1982A5215F6D62A73E314BE63A40520CF04CA6A96831263B56EFFA09B512E41C51245085AD8CF7EF12CBBEAC90C46E050362BECD1AB90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:60:8b:4e:8e:36:77:18:0a:55:cc:9a:44:97:
                    d9:14:cc:74:66:9f:66:9f:bd:c6:0c:39:db:74:6f:
                    3d:4f:07:55:6f:c9:d7:ca:f4:54:b1:d4:cb:53:dd:
                    fb:ff:48:f6:48:8d:cf:5a:c4:9f:b4:f5:00:5e:06:
                    b2:d9:80:db:47:0b:7f:50:d0:50:47:ff:4e:87:c9:
                    39:57:3e:6a:5e:61:27:f0:d1:87:ed:d7:0f:46:77:
                    b0:93:e3:04:aa:bf:91:3d:07:e2:d3:49:49:e1:74:
                    8d:7d:0f:a9:ed:0f:ee:e5:c7:88:2e:82:c1:d1:8c:
                    4d:81:58:b3:9f:70:1f:29:d5:a9:6c:d7:cd:13:58:
                    cb:21:22:56:05:65:d3:24:ff:57:76:f7:27:70:c8:
                    22:7c:98:06:3f:5f:ab:94:bf:b3:ae:eb:15:54:5e:
                    55:2d:9f:5d:7c:a8:5c:9d:5d:f2:da:95:10:ed:57:
                    b9:91:bd:c0:e8:39:af:3c:9d:72:ef:b4:30:8b:ff:
                    ed:68:ae:0c:3c:b0:83:fa:19:82:a5:21:5f:6d:62:
                    a7:3e:31:4b:e6:3a:40:52:0c:f0:4c:a6:a9:68:31:
                    26:3b:56:ef:fa:09:b5:12:e4:1c:51:24:50:85:ad:
                    8c:f7:ef:12:cb:be:ac:90:c4:6e:05:03:62:be:cd:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B2:19:15:91:6A:B5:94:26:8E:FD:95:EC:9E:D8:50:04:18:8A:CF
            X509v3 Authority Key Identifier:
                keyid:6A:23:AA:2A:FC:E2:E3:27:B2:ED:F3:EF:40:EB:D1:22:CC:BA:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/323830343a323431383a3a2f33322d3334203d3e20323634323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2418::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:b5:23:0f:20:9d:a1:fc:2e:c2:a5:72:e8:a3:2c:54:bb:1c:
         44:d4:47:9c:0b:31:7a:cc:a6:d4:80:d7:85:23:33:77:ac:04:
         0f:63:8d:e2:d7:92:b4:23:ae:df:45:ae:94:07:f0:31:ad:54:
         b2:9d:1f:03:9a:4e:ab:b1:89:08:0c:f2:8d:6a:d7:27:4b:9a:
         95:b2:79:d9:ac:eb:57:b6:3b:f7:d4:62:96:88:d0:64:d8:09:
         77:32:d3:27:da:20:d0:6f:eb:d2:10:58:0f:86:52:2f:d3:7d:
         c6:9c:8e:20:a3:09:07:20:1a:a4:63:4c:2e:a7:a9:c9:ca:31:
         6b:4b:79:0a:ed:69:f5:eb:81:4a:f1:57:94:7a:53:81:96:df:
         62:73:aa:62:82:74:88:e4:d7:40:e8:8b:c3:f9:b5:aa:3d:c5:
         a1:fe:72:ac:f5:81:d4:8d:16:85:13:8a:02:7d:f1:83:3c:8b:
         5a:2b:95:65:18:63:b4:3c:e7:34:30:9c:42:03:31:1d:73:e5:
         a6:fc:ec:97:9f:7f:e4:25:c5:46:58:26:33:c4:7d:28:8a:43:
         94:06:40:19:12:21:43:b0:a1:86:1f:65:73:aa:aa:21:4b:56:
         a4:0d:c1:e5:68:11:de:d7:46:51:0c:c9:ca:3b:1f:5c:06:65:
         d4:29:e6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:49 2025 by rpki-client