Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a363030303a3a2f33352d3335203d3e20323632363037.roa
File:                     323830343a3663633a363030303a3a2f33352d3335203d3e20323632363037.roa (raw, json)
Hash identifier:          AjEAAQrxWs7FTlmNtD8yW8gF/HO/h4vA6WhO2zJp87Y=
Subject key identifier:   A9:8E:B7:04:AE:41:CF:C6:59:BA:30:24:4A:4F:9B:EC:91:A7:8B:4E
Certificate issuer:       /CN=56D9A1201889650DCAB74085B3A0433357A372C2
Certificate serial:       39FC4373273CDF7913730F6E5BF072AFE05850BF
Authority key identifier: 56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a363030303a3a2f33352d3335203d3e20323632363037.roa
Signing time:             Thu 06 Oct 2022 15:16:58 +0000
ROA not before:           Thu 06 Oct 2022 15:11:58 +0000
ROA not after:            Thu 05 Oct 2023 15:16:58 +0000
asID:                     262607
IP address blocks:        2804:6cc:6000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fc:43:73:27:3c:df:79:13:73:0f:6e:5b:f0:72:af:e0:58:50:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Validity
            Not Before: Oct  6 15:11:58 2022 GMT
            Not After : Oct  5 15:16:58 2023 GMT
        Subject: CN=A98EB704AE41CFC659BA30244A4F9BEC91A78B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:a0:61:88:c2:9b:8e:ab:b9:f4:55:62:89:
                    95:4e:00:c2:c0:72:5d:77:b0:ed:9d:93:aa:6e:8f:
                    a6:1e:18:a8:78:ee:d6:46:22:b1:82:42:ed:e8:71:
                    44:4c:42:eb:6f:0c:3f:65:c0:22:d9:fc:1f:11:c7:
                    e5:9d:a8:06:2c:17:06:02:e0:c3:5e:df:5d:96:1b:
                    cd:83:2c:a3:14:85:5a:0a:d3:66:dd:9a:4d:bb:c3:
                    63:ce:51:71:9f:75:c5:f5:17:41:fb:a6:c6:55:2d:
                    06:44:be:02:29:b3:6b:98:38:6e:d5:18:03:b1:12:
                    ac:29:29:aa:46:a0:50:c1:ea:b1:a6:d0:b9:5d:5c:
                    88:1d:4d:92:c9:05:46:3b:d3:05:90:2e:96:31:58:
                    0c:90:02:a9:47:01:c3:02:5b:e1:f1:b2:94:67:83:
                    f7:a8:6d:d8:ea:33:31:2a:4e:14:93:2d:7c:62:74:
                    8e:32:ca:61:cd:e2:ab:b7:5d:80:57:48:e6:a2:73:
                    dd:4b:4e:37:3b:7d:72:04:27:ac:ad:bd:d6:db:44:
                    33:30:b3:df:ff:43:9b:13:fd:18:95:2d:64:df:3c:
                    be:9a:9e:97:07:d8:45:9b:bc:6b:d1:52:99:88:8b:
                    ad:0f:00:0a:8b:c6:16:bb:98:fb:36:4c:1d:8d:15:
                    4b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8E:B7:04:AE:41:CF:C6:59:BA:30:24:4A:4F:9B:EC:91:A7:8B:4E
            X509v3 Authority Key Identifier:
                keyid:56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a363030303a3a2f33352d3335203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cc:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1b:24:0d:af:2e:cb:89:fd:ca:96:9b:3e:0f:9f:76:60:13:1d:
         da:09:90:39:a6:ca:33:29:7d:be:f4:fa:24:ca:9d:f7:fe:52:
         72:5d:55:95:41:f4:27:5d:e0:08:06:6e:68:7a:4d:c3:40:c0:
         fd:a1:d9:e7:19:6c:9a:d4:30:19:c6:59:76:33:f9:0a:dd:51:
         8a:73:b6:34:41:f6:c3:b4:23:a4:53:1c:95:90:dd:e8:e2:83:
         0d:1f:a1:36:aa:22:93:9f:65:19:6e:83:d1:14:8d:73:3c:c8:
         12:79:44:c5:10:54:9f:21:2d:95:e1:ec:92:63:47:8b:8e:4c:
         e5:4d:c4:06:39:31:70:c6:d9:f8:11:4b:d9:b0:e3:fd:a9:e5:
         9f:3a:c3:01:90:7b:42:2f:8e:c9:7d:cd:8e:dc:c4:94:df:ef:
         0c:89:5d:bd:c0:22:75:6e:ca:d5:20:4d:d7:89:d7:5a:62:ab:
         cc:34:91:c3:d4:e7:7e:77:c9:3b:5f:ab:59:9d:58:5f:8d:fc:
         f6:8c:62:32:e4:db:3a:5e:c5:53:14:a6:4a:80:30:1d:2f:f2:
         c2:fd:5f:35:78:dd:e6:2d:83:f8:e7:a3:da:32:27:2a:80:74:
         d9:a0:bc:2c:68:fe:2a:e2:d7:84:e6:ec:ba:ee:c6:ee:00:30:
         c0:6c:95:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:11 2025 by rpki-client