Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3830303a3a2f34302d3430203d3e203237363838.roa
File:                     323830343a353461303a3830303a3a2f34302d3430203d3e203237363838.roa (raw, json)
Hash identifier:          f0QEE/TQjYQtWPKLzt0sEaU3ybohfLLCoDB+TYrT2X4=
Subject key identifier:   43:26:37:5E:62:56:DB:FF:2B:57:F4:03:A5:7D:D0:42:40:96:BA:C8
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       6FAFF7D10D7490A0F959897F28404AD1703EE71D
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3830303a3a2f34302d3430203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:06 +0000
ROA not before:           Fri 15 Jul 2022 21:03:06 +0000
ROA not after:            Fri 14 Jul 2023 21:08:06 +0000
asID:                     27688
IP address blocks:        2804:54a0:800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:af:f7:d1:0d:74:90:a0:f9:59:89:7f:28:40:4a:d1:70:3e:e7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:06 2022 GMT
            Not After : Jul 14 21:08:06 2023 GMT
        Subject: CN=4326375E6256DBFF2B57F403A57DD0424096BAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:dd:c4:cf:1e:35:1e:16:25:a3:d7:81:d5:
                    2b:b2:7f:0c:9a:49:64:e7:83:68:d9:d5:a3:dc:e4:
                    27:22:fa:42:d5:38:ec:d6:6c:eb:b5:45:1c:cb:e0:
                    f3:10:64:dd:7d:07:12:c0:84:ce:e9:46:03:89:5d:
                    af:75:80:73:2e:db:a9:65:5a:ce:ec:04:f3:44:50:
                    1e:a4:9e:a9:08:20:8b:35:ae:eb:3a:78:31:45:48:
                    b0:98:6c:6f:d9:8b:8c:96:55:5b:c9:74:50:5d:c0:
                    6c:32:12:1b:87:41:3b:04:d1:e6:20:c8:94:ee:4f:
                    6d:5c:f3:22:a5:33:fb:f1:f0:82:0a:c8:98:4a:85:
                    2d:6c:b4:a4:5c:f3:fb:1a:4f:6a:7a:26:2c:e4:51:
                    b9:9c:bc:bb:a7:45:31:9f:a5:63:78:7e:9e:53:c4:
                    f3:a4:aa:9f:b3:05:6f:13:ea:c0:fe:b4:f2:f2:94:
                    6c:f7:2c:c2:05:b4:86:b2:b2:2a:75:18:b8:1f:84:
                    0a:90:69:e7:9c:2e:a3:98:cb:20:a9:f4:ab:80:fb:
                    6c:16:6d:c8:58:b9:2c:dc:93:b7:b6:6f:56:25:ce:
                    4a:20:b1:4a:ce:b7:0b:2c:42:9d:fc:0f:65:40:0b:
                    6c:af:26:d7:7d:e2:5c:2b:64:b4:43:51:a2:0d:2d:
                    ce:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:26:37:5E:62:56:DB:FF:2B:57:F4:03:A5:7D:D0:42:40:96:BA:C8
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3830303a3a2f34302d3430203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:00:06:89:dc:c6:02:a6:32:8e:db:35:5c:a2:5a:0c:14:57:
         70:b8:0a:2c:1c:2a:5e:93:99:31:a4:67:21:0c:64:7e:1a:25:
         2a:7b:eb:a5:a1:6b:7f:25:90:28:0e:c2:89:0b:a5:9e:69:91:
         0b:95:bc:68:40:3a:e6:19:c7:0c:36:78:dc:f0:1d:b7:0f:59:
         b6:45:78:02:f1:0a:56:82:f9:39:34:c2:51:4d:b0:27:c5:6e:
         a9:d0:97:de:69:e4:6e:f5:22:c7:33:55:52:87:30:b7:9d:e4:
         af:90:c3:58:59:69:90:96:8b:7d:4e:c7:6f:ae:6a:87:fb:89:
         b3:7e:a3:82:4a:d0:e9:07:5d:0b:d2:d9:58:c8:61:f4:a2:5f:
         a2:da:c6:45:af:9b:e5:b1:b6:f2:16:5b:23:ad:17:a3:04:91:
         b6:63:dd:67:ee:03:88:0f:28:fb:74:04:c5:cb:be:ed:95:5b:
         2c:0e:ff:e3:20:e9:27:3b:d4:5e:27:9d:0d:d7:75:1e:83:48:
         65:9a:75:be:88:53:e7:cf:0d:39:0f:25:05:b4:b9:3f:3b:22:
         e0:f0:6f:f9:0e:22:bf:89:f4:a1:85:58:b7:fa:17:c1:82:3e:
         4c:b4:c7:2d:8a:6c:6f:54:9d:38:fb:2a:e1:d1:a1:5d:43:df:
         f5:b1:5f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:52 2025 by rpki-client