Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a33303a3a2f34342d3434203d3e20323638303239.roa
File:                     323830343a353665303a33303a3a2f34342d3434203d3e20323638303239.roa (raw, json)
Hash identifier:          AW/U5L5KoQb4ZgVc9XBTDXdTVZv2x2oxXpHSZQDrz9g=
Subject key identifier:   43:DB:25:1D:A8:F7:35:41:11:6A:DC:5E:A8:19:23:35:D3:43:AE:D2
Certificate issuer:       /CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
Certificate serial:       7BECDCF9065F9875426B1CA93F0D92E0496CCB80
Authority key identifier: 5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a33303a3a2f34342d3434203d3e20323638303239.roa
Signing time:             Thu 02 Feb 2023 14:00:16 +0000
ROA not before:           Thu 02 Feb 2023 13:55:16 +0000
ROA not after:            Thu 01 Feb 2024 14:00:16 +0000
asID:                     268029
IP address blocks:        2804:56e0:30::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ec:dc:f9:06:5f:98:75:42:6b:1c:a9:3f:0d:92:e0:49:6c:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
        Validity
            Not Before: Feb  2 13:55:16 2023 GMT
            Not After : Feb  1 14:00:16 2024 GMT
        Subject: CN=43DB251DA8F73541116ADC5EA8192335D343AED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:33:fe:13:34:4f:03:75:2f:b1:fb:74:59:
                    9b:90:7f:ef:6a:2d:7b:79:d0:d7:14:bf:d1:56:7d:
                    0b:49:24:1a:ea:22:8f:df:9a:26:13:66:3c:08:f1:
                    db:cc:ca:f3:b1:a5:88:a1:73:57:10:a3:56:f8:fa:
                    67:9f:51:76:4f:74:76:bf:85:79:ed:ce:bd:cd:6c:
                    6a:7b:19:9f:ee:6d:51:c0:f4:97:6f:ee:4b:2e:2b:
                    a5:e3:cf:dc:6f:52:fd:e1:1b:bd:bc:1d:6f:f0:21:
                    24:40:92:8e:43:eb:5c:44:8c:2c:f2:cc:dc:91:08:
                    1d:71:7a:02:83:b1:fc:e7:12:f1:5d:56:7f:c7:e0:
                    05:c7:43:3a:58:ad:47:62:cc:a3:fc:61:bf:62:f7:
                    da:75:a4:de:7d:39:41:6c:39:8e:9a:73:5f:6b:fe:
                    88:ce:4b:f2:23:cd:be:88:2d:9b:ae:4e:e3:fc:df:
                    ac:4f:32:80:e2:09:8b:23:09:07:07:81:9e:26:03:
                    c2:fa:e9:ce:80:8f:a5:38:25:5d:15:ef:a0:86:c6:
                    dd:d1:38:f3:fe:56:8d:f8:2b:e9:75:c6:14:4d:8f:
                    15:56:0e:aa:fe:de:15:7a:e6:05:63:b6:9f:8c:28:
                    4e:04:ae:9a:6b:62:d1:40:58:18:53:07:e3:7b:fc:
                    6d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DB:25:1D:A8:F7:35:41:11:6A:DC:5E:A8:19:23:35:D3:43:AE:D2
            X509v3 Authority Key Identifier:
                keyid:5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a33303a3a2f34342d3434203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56e0:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:ab:b7:b0:e2:d6:f3:b7:17:07:6e:84:7f:65:97:95:17:
         8c:f4:43:16:73:76:82:6d:29:8e:29:5b:d4:51:27:42:23:28:
         f6:30:de:22:88:4a:6a:ad:eb:6a:c6:4f:73:bf:1f:fb:ca:9a:
         d9:f2:c1:00:59:0f:12:96:7a:11:bd:ec:48:69:cd:9e:c8:f7:
         09:a1:6b:d0:c8:13:c4:e5:f6:ee:51:ba:91:46:be:b4:26:40:
         3d:31:95:e6:c2:7d:a8:22:b6:6a:ff:0a:f3:80:e8:31:bd:16:
         41:b0:4c:65:e2:7d:82:36:0c:b4:58:02:b0:67:f1:09:02:b7:
         31:ff:81:96:21:68:b9:ae:5a:7c:11:ef:ba:8c:a0:36:43:8a:
         0c:ee:f3:c5:01:60:a6:af:e9:67:35:75:4b:70:81:a1:e6:ba:
         4d:45:24:39:e6:1a:38:e1:4a:cf:2f:5f:00:38:b6:b7:3e:94:
         f7:5f:f2:dc:dc:bc:62:25:f6:de:4c:0a:72:66:13:46:33:1a:
         6a:a6:6d:85:99:79:f2:cc:6a:ae:3b:da:ca:ce:b1:01:95:34:
         81:de:d3:41:7f:d1:71:19:30:4b:27:28:52:57:c8:6f:fb:e3:
         a8:9b:2b:ba:19:fa:69:59:c4:93:ad:1d:6d:06:24:92:ca:e0:
         24:d8:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:27 2025 by rpki-client