Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3630303a3a2f34302d3430203d3e203237363838.roa
File:                     323830343a353461303a3630303a3a2f34302d3430203d3e203237363838.roa (raw, json)
Hash identifier:          +Sl8v2tNW9QantILpUOPZ+iTKVJI0ahgTbMsSdonQhk=
Subject key identifier:   2B:0A:EF:85:A4:C4:61:99:15:9D:24:16:27:15:B5:93:F8:9C:A3:B5
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       36BA727582753E9E205BE51493DDF285D725E367
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3630303a3a2f34302d3430203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:09 +0000
ROA not before:           Fri 15 Jul 2022 21:03:09 +0000
ROA not after:            Fri 14 Jul 2023 21:08:09 +0000
asID:                     27688
IP address blocks:        2804:54a0:600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ba:72:75:82:75:3e:9e:20:5b:e5:14:93:dd:f2:85:d7:25:e3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:09 2022 GMT
            Not After : Jul 14 21:08:09 2023 GMT
        Subject: CN=2B0AEF85A4C46199159D24162715B593F89CA3B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:9e:3b:2a:c6:7c:04:b7:a2:54:2f:f1:7a:
                    9b:74:7d:e7:cb:be:68:05:f1:97:d1:76:d7:27:9e:
                    80:b9:4a:94:5a:12:c5:f5:9a:6d:00:da:91:96:41:
                    1f:b0:bd:cd:3f:e4:05:e4:01:8c:ba:08:2c:7d:83:
                    72:ff:aa:22:71:6f:fe:c7:ac:1b:4a:2f:3f:1d:fd:
                    e5:1c:65:1c:f6:45:c3:93:e5:c3:bf:db:42:9c:a7:
                    eb:a1:d7:6d:9d:12:db:46:cb:41:b7:ff:85:5a:a5:
                    fe:f6:35:9c:2a:6c:cb:04:a7:8b:d9:5b:73:1b:96:
                    50:ba:61:b1:ea:19:bc:a7:18:d5:06:f0:a2:42:40:
                    f5:3e:7e:aa:39:51:c7:83:c8:09:53:27:ae:f4:da:
                    a5:ab:d4:96:3c:b8:d2:5b:68:b1:d6:2c:86:13:73:
                    14:81:06:71:e6:9c:fd:cc:e9:dd:74:dc:25:5f:45:
                    ee:86:8c:83:95:d4:ca:12:25:5d:d5:b9:dd:61:62:
                    f6:10:8c:d6:66:a1:23:99:8a:c8:82:3d:8f:b7:91:
                    11:7b:76:9c:7c:2b:4a:5c:b2:63:77:90:a8:ca:73:
                    0d:32:e6:e7:4b:2c:69:71:c0:6c:84:27:16:3a:69:
                    29:7d:d2:84:ac:eb:01:d8:ab:23:89:37:5a:99:ba:
                    03:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0A:EF:85:A4:C4:61:99:15:9D:24:16:27:15:B5:93:F8:9C:A3:B5
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3630303a3a2f34302d3430203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:0d:22:4c:0d:db:94:2f:34:28:bf:4e:f7:d8:51:6c:b9:60:
         19:0f:63:f8:fb:62:de:32:6e:c3:e0:b0:d0:7e:d5:d1:7e:31:
         3c:e9:55:d8:bb:03:4d:f3:df:85:9d:79:fd:12:d9:f1:fa:e7:
         c7:4f:fb:61:84:40:3c:f8:e1:fb:e3:d8:a9:4d:e6:dc:27:70:
         d3:1a:c0:90:ad:61:3c:d4:74:1a:47:bb:50:ed:75:0c:89:6c:
         fa:24:a6:16:45:b8:34:39:38:aa:3d:8e:fc:39:ce:22:83:45:
         89:ee:4d:49:5e:cf:2e:d5:fc:34:2f:14:d8:d1:25:14:37:c8:
         d8:76:28:67:18:39:3c:3a:d2:d0:26:ce:92:46:55:8e:a5:53:
         83:c9:42:00:2c:2f:f0:9d:d8:d2:db:27:b5:08:dc:73:13:5f:
         33:90:54:93:58:89:b3:96:05:f2:f4:a1:94:6f:c5:b3:d2:c1:
         be:75:de:a1:b2:ff:cb:09:58:1a:a8:f3:2c:62:56:8d:eb:a8:
         75:d8:10:e8:23:65:c7:4b:bf:45:e0:8f:6e:fa:2b:80:3d:50:
         42:c6:44:98:08:68:6c:b1:0e:05:5b:b0:b9:37:5e:3a:e1:ba:
         75:5a:1e:f0:a4:fe:51:36:98:7e:ad:a6:b0:df:a3:57:09:5e:
         d8:34:a5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:09:23 2025 by rpki-client