Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a383530303a3a2f34302d3430203d3e20323632363037.roa
File:                     323830343a3663633a383530303a3a2f34302d3430203d3e20323632363037.roa (raw, json)
Hash identifier:          C6iZkGYsCx6KLDzOciYoJSAt1HFU8K1fttWRsgiYn7Q=
Subject key identifier:   3F:E0:EC:CF:22:AE:AE:FF:91:90:13:A4:87:99:EE:80:C9:01:01:FE
Certificate issuer:       /CN=56D9A1201889650DCAB74085B3A0433357A372C2
Certificate serial:       5B5F2FD2F0F7A293025EE68629D46D72AB56B1F5
Authority key identifier: 56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a383530303a3a2f34302d3430203d3e20323632363037.roa
Signing time:             Thu 06 Oct 2022 15:16:59 +0000
ROA not before:           Thu 06 Oct 2022 15:11:59 +0000
ROA not after:            Thu 05 Oct 2023 15:16:59 +0000
asID:                     262607
IP address blocks:        2804:6cc:8500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5f:2f:d2:f0:f7:a2:93:02:5e:e6:86:29:d4:6d:72:ab:56:b1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Validity
            Not Before: Oct  6 15:11:59 2022 GMT
            Not After : Oct  5 15:16:59 2023 GMT
        Subject: CN=3FE0ECCF22AEAEFF919013A48799EE80C90101FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:38:fa:cd:cb:a5:00:73:a1:3c:89:ab:0a:
                    97:f4:b1:5f:c7:1a:34:29:0e:40:d4:73:a9:0d:ea:
                    63:34:67:7e:22:17:9a:2a:51:5b:80:51:4b:6a:c5:
                    32:41:d4:9e:2e:1f:8d:9a:b9:cd:f2:9b:26:57:f1:
                    93:bc:fa:28:13:99:67:74:0a:3f:b3:f2:57:c3:36:
                    ff:7b:e2:ba:46:44:31:3a:09:c9:60:49:1e:2f:14:
                    03:4b:0c:e5:28:e0:c8:ac:18:69:00:7a:d4:7c:14:
                    78:a5:45:a5:cf:16:9c:8b:0a:ba:36:f2:d1:ce:24:
                    14:72:ed:ff:f7:84:9d:cd:be:0b:99:68:50:ae:7e:
                    96:58:9a:8d:ce:82:6c:65:4b:6b:0d:de:0f:c2:ce:
                    79:19:28:4c:88:0d:44:8f:f2:eb:6d:e8:17:05:58:
                    dc:92:bd:62:e6:0d:d4:f4:1d:d6:2d:e8:e2:f8:e5:
                    2b:96:48:22:c7:a6:97:1f:8c:54:93:85:da:24:cf:
                    43:ad:fc:a3:49:5a:87:23:e1:62:82:c5:1d:95:80:
                    55:70:14:aa:b8:1f:49:2b:c5:ac:8d:1e:7d:14:da:
                    89:d0:29:b8:36:42:99:3e:d1:71:c7:98:04:a1:20:
                    0d:3b:f5:ce:d1:a2:dd:7f:9f:2a:d2:32:49:93:31:
                    ec:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E0:EC:CF:22:AE:AE:FF:91:90:13:A4:87:99:EE:80:C9:01:01:FE
            X509v3 Authority Key Identifier:
                keyid:56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/323830343a3663633a383530303a3a2f34302d3430203d3e20323632363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cc:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:44:94:db:5b:ab:79:de:71:33:50:7f:35:d1:55:77:c1:
         fc:5b:4d:c6:e3:b9:2a:70:e6:33:f1:32:31:09:06:60:49:0a:
         e8:50:73:b8:29:38:1c:ee:63:1e:0c:17:42:b6:95:6f:96:26:
         01:86:8e:db:ec:e3:8d:27:8b:56:cc:0c:fe:f7:35:3c:e8:0e:
         24:b2:25:ae:8c:e4:be:37:89:22:c5:64:6a:d7:34:20:a8:f8:
         9b:81:30:ba:39:f0:db:68:5a:fa:49:9c:22:4e:dd:26:7b:ff:
         6e:88:5f:76:59:7f:c1:ed:37:51:55:4c:a3:65:49:e2:40:ff:
         18:b0:c4:50:f2:18:eb:5b:4a:0b:ea:a8:66:98:a0:1c:80:75:
         c2:49:0b:26:4d:2c:4e:2b:ae:b0:50:56:1d:11:82:ab:51:32:
         64:da:39:ae:a0:d6:a4:30:f0:8d:09:3b:0f:b6:d9:ca:99:80:
         4b:7a:2b:46:a6:dc:c5:81:83:0d:56:a2:f8:f0:98:f7:3f:11:
         b9:2b:b6:e7:61:7c:eb:6b:7d:ee:e3:e7:68:c2:e1:9e:c4:94:
         a6:59:ba:49:36:0d:fa:82:7d:b5:c5:60:05:cd:35:9f:98:0b:
         61:9f:0c:2b:a4:6c:7c:52:c4:c3:df:3d:8e:d3:20:ba:a0:a4:
         a1:c6:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:07:29 2025 by rpki-client