Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/323830343a366166633a3a2f33322d313238203d3e20323730333730.roa
File:                     323830343a366166633a3a2f33322d313238203d3e20323730333730.roa (raw, json)
Hash identifier:          8M2rdvxkP+zhn04Zoqfl4gDfqfAzJVh80WSQWQLW3eA=
Subject key identifier:   1A:13:98:3B:CA:06:E6:7F:78:2E:F3:4F:95:86:A5:1B:61:E8:55:66
Certificate issuer:       /CN=6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9
Certificate serial:       5E0284CFF6FFAFE17112204EA339FEF459CEDEB8
Authority key identifier: 6B:FE:4C:13:23:7B:DB:8F:DD:E5:06:CE:A7:34:B9:89:B3:DC:91:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/323830343a366166633a3a2f33322d313238203d3e20323730333730.roa
Signing time:             Tue 02 May 2023 11:27:13 +0000
ROA not before:           Tue 02 May 2023 11:22:13 +0000
ROA not after:            Tue 30 Apr 2024 11:27:13 +0000
asID:                     270370
IP address blocks:        2804:6afc::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:02:84:cf:f6:ff:af:e1:71:12:20:4e:a3:39:fe:f4:59:ce:de:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9
        Validity
            Not Before: May  2 11:22:13 2023 GMT
            Not After : Apr 30 11:27:13 2024 GMT
        Subject: CN=1A13983BCA06E67F782EF34F9586A51B61E85566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:fc:3b:5e:03:cd:52:5a:ba:62:46:09:7e:
                    d3:a4:19:bc:89:0e:c4:43:0a:21:48:4d:15:21:a1:
                    c0:3a:29:64:41:3e:1e:38:63:60:b0:f2:ff:de:01:
                    37:a8:32:9a:6d:d2:c4:88:56:5b:68:7d:1c:22:41:
                    95:2f:e2:d9:91:fd:85:8f:cf:8b:b0:7f:29:8c:72:
                    a4:f4:ce:45:94:d5:4e:de:8b:e6:05:6f:44:24:42:
                    e4:ee:97:71:49:d6:68:9e:01:89:d0:0e:ec:06:d1:
                    ac:6a:93:ae:a0:11:bb:8f:50:26:3b:ae:ea:31:41:
                    37:a2:b1:c7:e6:74:72:5e:7a:b2:29:c5:ae:16:2b:
                    c6:ef:8f:32:71:56:ad:1c:06:3c:f8:ab:2b:60:25:
                    9f:52:1a:6a:15:1b:97:4e:c0:b5:ba:2c:f7:74:c9:
                    4b:f6:e3:b9:ef:b3:dc:46:e7:c2:dd:92:da:8c:69:
                    8b:9b:38:b2:fa:c9:42:06:62:4b:e7:61:da:34:e8:
                    0b:e7:e4:e6:50:20:af:d5:b2:47:d3:e6:4a:70:b3:
                    85:9c:3d:69:4d:e0:be:0a:c9:95:5b:49:e5:43:79:
                    30:45:e8:0a:6f:bf:9a:71:ef:70:35:19:e1:1c:90:
                    ed:08:8e:1d:75:9d:a5:3b:c0:a7:83:b6:18:7b:85:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:13:98:3B:CA:06:E6:7F:78:2E:F3:4F:95:86:A5:1B:61:E8:55:66
            X509v3 Authority Key Identifier:
                keyid:6B:FE:4C:13:23:7B:DB:8F:DD:E5:06:CE:A7:34:B9:89:B3:DC:91:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BFE4C13237BDB8FDDE506CEA734B989B3DC91F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/0/323830343a366166633a3a2f33322d313238203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6afc::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:10:6c:41:92:d2:d8:d2:a5:94:bd:ef:36:e9:09:0a:3e:ba:
         18:a6:5d:45:d4:9e:71:cf:97:dd:8b:87:67:c1:20:99:b5:fc:
         13:4c:b3:e3:d2:21:f7:8d:71:4d:3f:9d:5d:f1:5d:30:02:0d:
         dc:fd:18:94:c7:0d:2f:52:8f:19:ea:ea:31:91:8f:f7:29:a9:
         fb:61:68:04:c3:37:c1:67:ba:3a:38:09:39:78:c3:ba:39:2f:
         4b:23:4a:8c:df:fc:5e:a1:67:d9:f3:c2:04:9b:37:6d:16:0e:
         cb:6f:5f:68:07:df:7e:a1:5f:6f:1c:66:89:15:d8:bb:14:99:
         c3:cf:d1:21:7f:dc:18:21:58:f7:7e:7c:1f:4a:bb:69:ca:f0:
         9d:75:76:02:c0:74:8e:fe:63:b7:99:f2:5d:41:9a:94:95:c9:
         fe:4f:ea:1b:7f:ef:03:65:fd:b1:35:8a:cb:ba:0f:ce:5e:6b:
         4f:0d:47:8a:00:f8:d9:c2:d4:78:c2:c5:9c:eb:77:bd:f1:16:
         1e:c4:26:46:f6:65:1d:8c:06:ac:48:a9:89:c1:29:a8:54:45:
         10:44:40:2b:e1:03:c7:36:86:30:e9:54:d9:b2:55:1e:47:51:
         dc:af:69:0c:c5:49:61:b3:cb:07:46:e8:d1:c2:a5:46:e8:45:
         45:ec:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:41:28 2025 by rpki-client