Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a3a2f33382d3338203d3e20323638303239.roa
File:                     323830343a353665303a3a2f33382d3338203d3e20323638303239.roa (raw, json)
Hash identifier:          2/N8oCPUZqiffCMwh8Xe2OnERYhLPkgXvXYcRUtEG8Y=
Subject key identifier:   B7:B9:95:41:C7:D2:E2:3B:2C:56:B7:9A:6E:76:0A:A5:E8:EB:A6:21
Certificate issuer:       /CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
Certificate serial:       031D34D8B57C38C0E70719EB9584FA5F47CD8D16
Authority key identifier: 5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a3a2f33382d3338203d3e20323638303239.roa
Signing time:             Thu 02 Feb 2023 14:00:20 +0000
ROA not before:           Thu 02 Feb 2023 13:55:20 +0000
ROA not after:            Thu 01 Feb 2024 14:00:20 +0000
asID:                     268029
IP address blocks:        2804:56e0::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1d:34:d8:b5:7c:38:c0:e7:07:19:eb:95:84:fa:5f:47:cd:8d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
        Validity
            Not Before: Feb  2 13:55:20 2023 GMT
            Not After : Feb  1 14:00:20 2024 GMT
        Subject: CN=B7B99541C7D2E23B2C56B79A6E760AA5E8EBA621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:ba:db:58:49:fd:14:00:bc:bf:7b:39:40:
                    cd:92:cf:0d:e1:4c:cc:a1:1c:39:ce:eb:0e:64:2b:
                    ee:3f:1e:1a:84:52:46:39:31:07:22:c3:e2:87:7c:
                    35:05:cf:ef:e9:04:d1:0d:e5:9c:4b:6d:ba:f1:ab:
                    2b:f7:5a:ad:e2:d4:22:23:ed:16:2b:6d:e1:89:e8:
                    aa:a0:5e:3e:89:c6:66:f5:e6:2e:4f:84:25:1d:85:
                    62:00:76:93:d3:db:90:e9:af:6f:00:f9:63:b5:02:
                    ba:6e:9a:9f:7f:23:4a:28:04:5e:e2:a7:e8:c7:5b:
                    26:14:98:c7:5c:8f:ad:eb:41:58:fe:4e:85:a4:d0:
                    73:cd:b5:e3:60:9d:58:82:f5:8f:30:fc:13:9c:36:
                    cd:97:f5:61:36:ca:8d:a3:99:9c:84:8c:fa:ec:7d:
                    07:4f:87:96:9d:5b:2f:7e:9e:13:0b:1e:ef:24:19:
                    14:cc:ca:a8:db:80:9e:8a:1c:e2:3c:50:80:17:13:
                    7a:bd:f0:ce:51:3e:a7:f7:91:13:53:e4:36:c7:38:
                    3c:f2:7e:a1:e5:d7:96:20:1f:f9:39:29:08:ee:e5:
                    8d:3a:09:49:f7:61:b5:de:8b:23:70:96:a8:87:39:
                    8f:d4:39:fd:67:4c:f3:d6:53:89:76:4d:5d:74:0f:
                    dc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B9:95:41:C7:D2:E2:3B:2C:56:B7:9A:6E:76:0A:A5:E8:EB:A6:21
            X509v3 Authority Key Identifier:
                keyid:5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a3a2f33382d3338203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56e0::/38

    Signature Algorithm: sha256WithRSAEncryption
         12:44:7b:e2:47:00:ad:c4:b8:b9:36:78:00:09:53:89:3a:f8:
         39:42:95:51:3f:36:85:fe:33:ef:92:3b:f6:d2:2e:e3:27:59:
         2e:b4:0c:e9:06:4b:a6:4f:2d:c8:1d:eb:6e:d5:ba:ca:44:92:
         33:21:7d:ad:a6:de:82:03:fe:3d:0e:c6:96:97:85:40:8b:bb:
         4a:9c:9d:8b:29:85:ef:77:9c:c1:58:03:1f:30:25:d0:7c:d4:
         e5:74:84:0d:48:9a:0a:0f:45:f9:1f:1d:28:96:5a:15:2b:26:
         1f:27:5f:b6:31:6b:48:b7:0a:c6:2b:d7:38:38:11:36:bb:b6:
         82:dc:c1:24:d5:12:33:a7:47:b0:46:14:3b:09:d0:40:d9:55:
         24:e4:e9:6c:3c:ef:4b:6b:e6:21:e0:0b:34:ed:27:c0:2b:ec:
         88:8c:9f:e9:98:e7:03:52:44:26:e7:a9:15:fa:bb:5f:34:9b:
         59:53:ad:21:b1:ce:d2:1e:7f:1e:35:8c:48:4c:dd:ae:80:84:
         d2:cd:63:4e:73:f5:e6:39:eb:21:e2:ed:0b:53:c1:fd:3b:9e:
         23:4f:53:10:01:c4:bb:1c:dd:3b:03:97:b8:39:50:0f:be:c5:
         fc:eb:a3:9f:10:3a:f1:83:58:39:91:4e:51:cd:af:25:f1:28:
         a4:ff:28:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:15:18 2025 by rpki-client