Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3230303a3a2f34302d3430203d3e203237363838.roa
File:                     323830343a353461303a3230303a3a2f34302d3430203d3e203237363838.roa (raw, json)
Hash identifier:          10Dsj4bG1rMLYkEPPjJFGpdM74Lb2s5T6LHQqO0UmG8=
Subject key identifier:   DD:48:D0:01:6F:17:FB:C6:B9:62:08:8F:B5:E7:76:BA:E8:18:63:AB
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       5719D704D774B3C81ED1259677D4F0C53FB7BBB2
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3230303a3a2f34302d3430203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:05 +0000
ROA not before:           Fri 15 Jul 2022 21:03:05 +0000
ROA not after:            Fri 14 Jul 2023 21:08:05 +0000
asID:                     27688
IP address blocks:        2804:54a0:200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:19:d7:04:d7:74:b3:c8:1e:d1:25:96:77:d4:f0:c5:3f:b7:bb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:05 2022 GMT
            Not After : Jul 14 21:08:05 2023 GMT
        Subject: CN=DD48D0016F17FBC6B962088FB5E776BAE81863AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9d:20:8d:77:0d:8b:28:a2:33:f0:67:f3:ff:
                    bf:4f:c9:af:90:9b:39:70:f4:75:af:17:4f:5a:ab:
                    da:36:89:7d:40:ed:23:00:a0:71:c9:28:7b:e0:e0:
                    3d:5f:fa:45:3d:04:2a:d5:9f:67:ec:52:06:5d:22:
                    63:76:4f:cf:69:95:05:53:ca:b4:8d:ec:a0:00:83:
                    d0:5d:4f:8e:aa:8c:bc:6a:d7:83:0d:55:46:72:92:
                    4a:6c:03:f8:84:73:28:4a:16:ae:70:5e:91:2d:77:
                    f7:36:6a:43:b9:6b:3c:75:7b:7e:55:9c:67:8b:0b:
                    67:14:57:b5:c4:bb:f1:94:ee:26:34:51:8b:fd:08:
                    fc:3f:f6:44:04:50:11:b1:16:ae:ac:57:99:2a:01:
                    c3:fb:1d:a7:84:bc:50:06:14:e0:45:d3:5c:1d:69:
                    42:aa:1f:82:a8:cf:16:ab:ac:54:3f:b9:94:48:42:
                    65:4e:42:d2:7d:88:2a:11:4f:e4:ab:05:5f:d2:c6:
                    e7:28:ae:94:12:33:66:c4:2d:13:14:f7:0c:32:89:
                    a7:e1:1f:c8:f9:71:32:66:05:8e:4e:2a:d8:69:ad:
                    c5:19:4a:c2:4f:66:9a:2e:e1:05:ab:a6:73:f8:f1:
                    7b:da:4b:bd:22:23:02:87:29:b9:27:cb:1f:bc:f9:
                    d0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:48:D0:01:6F:17:FB:C6:B9:62:08:8F:B5:E7:76:BA:E8:18:63:AB
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3230303a3a2f34302d3430203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:b0:5e:26:fe:d1:c6:f0:18:26:3a:71:e6:96:6a:37:74:dc:
         df:18:91:4b:26:6e:60:d8:24:13:7d:ec:30:3f:23:94:63:67:
         e3:19:5f:c4:fa:f4:30:40:0d:90:28:97:42:ef:98:47:f9:bf:
         3a:aa:51:fa:a9:aa:49:e3:02:af:04:5e:21:ce:77:ea:05:12:
         84:59:5e:e7:8f:fa:cf:d3:fc:72:c4:5e:26:b9:d1:14:f5:92:
         f6:60:72:98:dd:b0:df:c4:57:36:86:63:bc:f1:8c:2e:7c:30:
         e1:0c:a7:33:c5:49:0f:17:30:e7:4e:b6:a1:b6:f1:70:cb:d7:
         cb:40:a0:88:32:95:30:9c:a2:b1:34:23:12:b5:ef:8e:c1:43:
         fb:69:ca:d7:f3:a7:11:67:f1:2a:e2:a3:92:79:46:4b:89:e4:
         e8:e5:89:0c:4c:89:1b:dd:74:86:e1:a3:46:af:54:b9:9c:37:
         6e:fc:02:db:a4:ad:7b:7c:b0:1e:c3:b7:36:ff:ca:89:51:6c:
         ed:41:01:03:ce:41:16:e7:6a:b7:f4:be:b8:03:26:78:74:7e:
         04:07:11:c0:2a:3e:2f:e8:c4:9a:42:3e:c8:c3:1f:af:28:73:
         9e:11:f1:12:b3:6c:4b:c9:10:c8:71:87:1f:cc:57:55:93:0e:
         ed:a5:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:30:37 2025 by rpki-client