Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/323830343a323539343a3a2f33322d3332203d3e20323634323839.roa
File:                     323830343a323539343a3a2f33322d3332203d3e20323634323839.roa (raw, json)
Hash identifier:          eLX1k0qR6lh0WkLXBoPSB28KocCP8dQWZnZjMsLYgKQ=
Subject key identifier:   B4:DA:06:BE:F3:BF:5E:11:98:E8:DC:42:17:50:41:D4:D7:D2:68:35
Certificate issuer:       /CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
Certificate serial:       76D06D1EC8B58337576F64A726C2326CABEA1B8B
Authority key identifier: 61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/323830343a323539343a3a2f33322d3332203d3e20323634323839.roa
Signing time:             Wed 12 Jul 2023 09:25:05 +0000
ROA not before:           Wed 12 Jul 2023 09:20:05 +0000
ROA not after:            Wed 10 Jul 2024 09:25:05 +0000
asID:                     264289
IP address blocks:        2804:2594::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d0:6d:1e:c8:b5:83:37:57:6f:64:a7:26:c2:32:6c:ab:ea:1b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
        Validity
            Not Before: Jul 12 09:20:05 2023 GMT
            Not After : Jul 10 09:25:05 2024 GMT
        Subject: CN=B4DA06BEF3BF5E1198E8DC42175041D4D7D26835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:2c:f8:44:09:6d:ff:c8:7f:e1:56:bf:92:
                    81:98:ef:b4:f7:83:03:a2:ce:a8:0b:21:49:cc:76:
                    b4:20:89:7b:0f:1a:20:b4:a9:e8:a2:d1:1c:22:a5:
                    21:89:56:2b:72:6d:93:ad:cd:25:70:09:46:ea:88:
                    0a:a9:fe:3d:e7:38:65:bd:7a:b1:d2:79:51:1c:09:
                    04:84:74:54:da:3c:da:5e:01:f3:66:5f:0b:92:27:
                    12:30:1f:59:f2:63:aa:5c:eb:c0:be:80:8d:ca:a4:
                    5b:f9:90:03:48:14:11:fb:98:dd:63:77:6f:26:69:
                    c4:2f:9a:52:1c:6a:19:50:bd:c9:70:36:1c:7d:df:
                    29:d5:b8:1a:4b:73:96:8a:3e:b8:2e:4f:a0:32:6e:
                    0a:61:a0:8c:73:bf:ea:f7:06:03:ac:4b:9b:e7:f0:
                    9b:ab:7d:d0:93:fe:12:f2:e0:a8:38:8f:7c:b1:9c:
                    69:ca:b9:12:72:91:7b:db:44:11:e5:d9:10:a8:3e:
                    75:45:57:ff:c9:d8:d1:de:16:3f:7f:27:40:c5:4f:
                    2f:fc:10:07:41:b2:f8:d6:c7:45:00:d8:80:f1:41:
                    68:30:38:6d:15:bc:e1:a1:ba:89:f5:8a:2a:e0:d0:
                    14:7b:b6:41:a1:05:9b:09:09:dc:0c:a5:3d:5f:63:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DA:06:BE:F3:BF:5E:11:98:E8:DC:42:17:50:41:D4:D7:D2:68:35
            X509v3 Authority Key Identifier:
                keyid:61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/323830343a323539343a3a2f33322d3332203d3e20323634323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2594::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:06:1c:d7:e4:e9:25:f9:4b:9c:c5:e3:63:99:87:85:bd:4b:
         56:60:2d:a9:4c:50:2d:db:a1:ae:ac:8d:9e:f6:69:e4:8f:12:
         86:5e:67:b0:ee:dd:33:bc:b0:5f:b2:3f:f9:2b:00:f4:14:a9:
         05:a5:20:58:6e:44:f5:69:8f:e3:2f:5c:97:06:ff:b3:e9:ed:
         28:e3:78:d4:4a:a6:6f:1d:6f:b8:a1:cb:d8:de:3e:d2:80:35:
         42:3e:29:39:da:c3:1b:c7:b5:bc:f5:e2:fd:42:84:31:1e:23:
         ea:ee:05:93:fa:05:b1:bd:e0:9a:57:13:ca:87:b3:8a:04:3e:
         39:40:ca:b5:e9:d5:a4:ed:cf:60:04:e4:ec:0c:05:77:9d:75:
         6a:90:83:2b:88:72:bd:55:b2:5f:fa:84:70:3c:37:5a:52:a0:
         46:68:c7:52:7e:1c:d1:ee:97:67:2e:7e:61:6b:f0:7b:c8:0c:
         1d:2f:50:04:1b:78:c8:31:f1:60:95:30:a2:75:0f:88:4d:26:
         75:cc:fd:0e:a9:e3:e5:fc:1e:e5:94:f0:f0:a3:57:87:2f:1b:
         5e:b3:d5:d3:38:3c:48:e3:f0:c3:5a:bd:29:ca:5c:45:c8:76:
         0c:84:4a:10:96:ea:c9:0a:b2:75:65:76:18:a1:59:b7:41:f5:
         d6:61:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:48:28 2025 by rpki-client