Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/323830343a6237633a3a2f33322d3332203d3e203532373632.roa
File:                     323830343a6237633a3a2f33322d3332203d3e203532373632.roa (raw, json)
Hash identifier:          0lhfHf+W/7tWlT0BXLQTnp8K3r3I6YmvFW+5k78tCek=
Subject key identifier:   B8:3E:E9:77:FF:18:5F:7D:3A:9E:39:DE:25:C9:CF:E3:DE:C5:86:07
Certificate issuer:       /CN=6F734850930AF3F6955B905DD1C2BD66727CD8D2
Certificate serial:       1FACAF70EC57DC60B1599331C908A9B9702BE6D0
Authority key identifier: 6F:73:48:50:93:0A:F3:F6:95:5B:90:5D:D1:C2:BD:66:72:7C:D8:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F734850930AF3F6955B905DD1C2BD66727CD8D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/323830343a6237633a3a2f33322d3332203d3e203532373632.roa
Signing time:             Mon 06 Mar 2023 14:06:19 +0000
ROA not before:           Mon 06 Mar 2023 14:01:19 +0000
ROA not after:            Mon 04 Mar 2024 14:06:19 +0000
asID:                     52762
IP address blocks:        2804:b7c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ac:af:70:ec:57:dc:60:b1:59:93:31:c9:08:a9:b9:70:2b:e6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F734850930AF3F6955B905DD1C2BD66727CD8D2
        Validity
            Not Before: Mar  6 14:01:19 2023 GMT
            Not After : Mar  4 14:06:19 2024 GMT
        Subject: CN=B83EE977FF185F7D3A9E39DE25C9CFE3DEC58607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:8f:aa:48:ce:6a:3a:90:57:74:65:cc:89:
                    83:6a:e1:f3:7e:f4:16:64:3c:65:95:80:97:61:ea:
                    23:4f:b5:7d:5e:08:f2:00:37:62:62:4a:92:b5:d3:
                    be:2c:77:ee:6e:16:44:73:c5:27:96:a5:82:45:32:
                    e6:4c:e7:3c:47:04:65:a0:07:fc:b6:63:41:7d:eb:
                    2f:fe:ff:b3:8b:37:98:b6:bf:a4:35:1b:f1:08:0e:
                    98:c3:ee:1e:5d:4b:ce:92:13:08:98:76:a0:3c:cc:
                    63:6a:e3:28:fb:d7:10:b8:11:b8:93:f5:57:b7:16:
                    ae:0f:5b:43:37:5d:d4:19:b4:6e:c5:54:a9:d4:02:
                    dc:96:5b:49:20:cb:c0:27:55:a1:9d:39:4c:de:ff:
                    4c:a9:a5:20:14:83:95:da:7a:89:4a:0e:0a:33:1c:
                    28:0c:79:3f:ef:8a:00:80:47:ab:cd:87:9a:05:db:
                    7f:c7:e0:8c:56:43:26:92:aa:0d:5d:02:68:12:a7:
                    11:70:68:27:1f:cc:55:24:84:4e:47:d5:0d:33:8d:
                    e6:a7:6a:b4:9b:16:a0:61:cd:68:f1:2b:ef:48:47:
                    03:de:ec:2c:ff:15:22:29:8e:30:2e:56:53:65:20:
                    ca:61:83:a1:74:63:c4:c8:56:5e:ae:47:e6:17:24:
                    92:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3E:E9:77:FF:18:5F:7D:3A:9E:39:DE:25:C9:CF:E3:DE:C5:86:07
            X509v3 Authority Key Identifier:
                keyid:6F:73:48:50:93:0A:F3:F6:95:5B:90:5D:D1:C2:BD:66:72:7C:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/6F734850930AF3F6955B905DD1C2BD66727CD8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F734850930AF3F6955B905DD1C2BD66727CD8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/323830343a6237633a3a2f33322d3332203d3e203532373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:91:c8:2b:2a:de:ac:8a:f7:c6:c9:d9:8a:ac:5b:2a:96:71:
         cd:aa:32:46:a6:c6:dc:17:a6:63:e1:c2:fd:30:4c:38:25:18:
         14:79:8e:ac:d1:1c:72:67:09:c4:15:31:a0:f8:57:86:1d:a0:
         20:eb:6a:13:4a:f8:d8:e8:dd:77:e9:a5:b2:67:c1:5d:5c:7d:
         3a:a4:05:bb:7e:6b:d3:bf:33:d7:88:3f:b7:cb:c8:8f:9e:e9:
         22:1e:a6:e3:48:78:a6:31:05:57:ec:6a:f5:2d:52:1a:aa:af:
         50:f7:a9:05:11:b3:ed:45:fa:13:02:75:b0:5d:f5:a8:fc:cc:
         a4:f8:36:50:8a:29:5b:d5:82:06:01:67:7d:9e:73:eb:dc:d9:
         07:5c:59:a1:c2:f2:f6:0c:72:2b:1a:cf:cd:ad:dc:2e:d4:15:
         61:99:ac:cc:ee:b4:b7:a9:a7:30:9c:b4:d1:4c:ef:fb:ec:e1:
         d3:85:cc:88:d3:be:11:8a:eb:45:6c:11:1a:d7:fa:08:4b:1e:
         7f:17:71:c8:25:ca:d2:d3:65:80:f3:67:8b:d1:60:b2:18:ef:
         13:3c:fc:f8:71:d8:07:bf:cf:35:8a:34:28:6f:4c:43:f6:86:
         3b:48:95:ae:10:1b:2d:8c:ae:e4:ee:fd:08:c3:31:56:45:96:
         65:0d:ea:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:06:11 2025 by rpki-client