Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/323830343a343831343a383030303a3a2f33332d3333203d3e20323637303936.roa
File:                     323830343a343831343a383030303a3a2f33332d3333203d3e20323637303936.roa (raw, json)
Hash identifier:          50IaJtpcZBLMtFp97D9/1+O0esQtAoNmdtpWDK8SL9w=
Subject key identifier:   77:45:8A:1B:CA:A9:45:DB:A9:07:05:77:B4:70:22:E8:E9:C4:D8:4F
Certificate issuer:       /CN=D3027D8397E5F8E3DAAB6ECE11B02390F35298C8
Certificate serial:       3F12FE96891D73507CFB47796891E79DD58D63B2
Authority key identifier: D3:02:7D:83:97:E5:F8:E3:DA:AB:6E:CE:11:B0:23:90:F3:52:98:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3027D8397E5F8E3DAAB6ECE11B02390F35298C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/323830343a343831343a383030303a3a2f33332d3333203d3e20323637303936.roa
Signing time:             Tue 27 Jun 2023 17:41:43 +0000
ROA not before:           Tue 27 Jun 2023 17:36:43 +0000
ROA not after:            Tue 25 Jun 2024 17:41:43 +0000
asID:                     267096
IP address blocks:        2804:4814:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:12:fe:96:89:1d:73:50:7c:fb:47:79:68:91:e7:9d:d5:8d:63:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3027D8397E5F8E3DAAB6ECE11B02390F35298C8
        Validity
            Not Before: Jun 27 17:36:43 2023 GMT
            Not After : Jun 25 17:41:43 2024 GMT
        Subject: CN=77458A1BCAA945DBA9070577B47022E8E9C4D84F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:ef:29:11:c5:c0:8c:f3:5b:56:5a:2e:13:
                    87:00:ef:29:a8:e7:62:ba:32:e4:5b:60:04:fd:88:
                    65:02:13:77:11:86:28:86:bc:b6:19:81:02:d3:71:
                    63:e8:4f:9d:ce:03:2c:c4:65:4a:9d:49:b1:3a:f6:
                    83:91:ff:c2:b4:d3:2d:ac:aa:06:22:34:a0:c1:5f:
                    0a:34:b8:14:7e:a3:c2:4e:a0:88:95:5e:c4:b4:e3:
                    a6:32:a9:80:0a:49:4c:c6:4d:e6:8b:d8:f8:44:db:
                    57:7c:de:1e:9b:0e:2a:46:c9:5b:a8:9b:1e:d3:7a:
                    b9:64:05:c9:ba:90:3c:d5:8f:cc:bf:a7:e1:01:b6:
                    03:46:e2:1d:19:38:3b:da:51:a9:45:95:5a:9f:05:
                    0b:c2:38:ba:c9:20:7d:31:06:2d:e4:89:38:16:44:
                    35:2b:0d:a1:d5:0f:e2:f9:22:a8:3e:e8:60:2f:0a:
                    fa:13:6d:6b:a6:c6:21:f7:ef:2f:47:2d:65:27:91:
                    78:05:7d:02:3e:ed:c0:16:6f:4a:b6:93:95:96:78:
                    0c:17:bd:19:e0:d9:50:14:27:b2:55:a3:62:39:1b:
                    21:9b:3c:c6:60:99:3b:32:ee:51:e4:94:0a:b0:da:
                    9d:b7:41:4c:ee:48:f7:e9:77:fc:ba:66:2f:4f:de:
                    48:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:45:8A:1B:CA:A9:45:DB:A9:07:05:77:B4:70:22:E8:E9:C4:D8:4F
            X509v3 Authority Key Identifier:
                keyid:D3:02:7D:83:97:E5:F8:E3:DA:AB:6E:CE:11:B0:23:90:F3:52:98:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/D3027D8397E5F8E3DAAB6ECE11B02390F35298C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3027D8397E5F8E3DAAB6ECE11B02390F35298C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/323830343a343831343a383030303a3a2f33332d3333203d3e20323637303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4814:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:15:25:0a:c9:13:8a:d0:82:84:25:e1:93:8c:cc:75:bf:50:
         db:b6:c7:b4:42:d1:7c:37:92:60:a4:e0:6e:17:e0:7e:aa:2f:
         49:5a:c1:25:a8:34:9b:04:9f:e6:5f:d8:7d:80:9d:7a:2f:76:
         03:80:6b:cc:fa:30:94:e2:8c:b0:78:80:16:08:08:53:36:10:
         3b:8c:e1:01:fc:01:39:7f:cc:28:b4:35:88:0b:e8:18:02:51:
         b8:0c:18:9d:c1:db:10:8f:b8:d1:b3:d5:69:87:7c:6b:64:f0:
         ae:e8:af:f3:9b:01:b2:5a:3b:28:83:c0:90:6f:ce:0f:49:aa:
         40:c7:f1:48:1e:0b:0f:bf:3b:b2:51:5a:cc:81:e7:fa:eb:ea:
         0d:1f:08:cc:18:05:d5:73:18:a7:b8:b5:12:90:db:f9:8b:ce:
         b4:47:4b:78:82:68:46:eb:63:a5:58:9e:c6:30:e9:3b:14:3c:
         3d:f1:40:79:41:e3:be:cd:c0:9f:04:1f:85:3a:c9:b6:b8:f3:
         41:58:63:f4:e7:18:fb:8d:fa:43:ff:de:e8:b9:73:33:35:92:
         7c:32:48:10:aa:53:02:39:22:d0:f7:a9:d6:b0:10:2e:75:f0:
         21:81:2d:cd:65:8c:48:6e:c9:64:1e:31:0c:dc:ed:dd:fd:15:
         48:67:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:37:59 2025 by rpki-client