Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/0/323830343a356564383a3a2f33322d3438203d3e20323639303630.roa
File:                     323830343a356564383a3a2f33322d3438203d3e20323639303630.roa (raw, json)
Hash identifier:          JA1Pow0sctRb3uKet+7hFQ32+kWRiWY0t2uohIB6Sm8=
Subject key identifier:   64:69:AA:8D:E7:65:5E:0B:63:BF:3C:B4:EF:8E:58:14:C9:26:4B:AD
Certificate issuer:       /CN=68EBF9E7509F0C8F461084CC21FC968DD29C8FB2
Certificate serial:       27C6D2E1A72E210B106FE6AFD6F12488B44CACC7
Authority key identifier: 68:EB:F9:E7:50:9F:0C:8F:46:10:84:CC:21:FC:96:8D:D2:9C:8F:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/0/323830343a356564383a3a2f33322d3438203d3e20323639303630.roa
Signing time:             Fri 27 Oct 2023 18:01:19 +0000
ROA not before:           Fri 27 Oct 2023 17:56:19 +0000
ROA not after:            Fri 25 Oct 2024 18:01:19 +0000
asID:                     269060
IP address blocks:        2804:5ed8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c6:d2:e1:a7:2e:21:0b:10:6f:e6:af:d6:f1:24:88:b4:4c:ac:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EBF9E7509F0C8F461084CC21FC968DD29C8FB2
        Validity
            Not Before: Oct 27 17:56:19 2023 GMT
            Not After : Oct 25 18:01:19 2024 GMT
        Subject: CN=6469AA8DE7655E0B63BF3CB4EF8E5814C9264BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:78:74:cf:5a:5a:e1:70:bd:4e:d6:c5:4f:06:
                    57:87:58:dd:64:5f:2c:18:45:2c:b6:78:8b:4b:8c:
                    37:3f:22:7d:b3:5d:b1:88:e2:59:9d:f9:bd:5a:a1:
                    6f:a6:3e:29:c1:cc:80:d0:d9:7c:91:72:63:57:57:
                    cf:b6:f0:5d:aa:32:c8:0b:64:6c:a6:91:5f:27:6f:
                    cc:5b:33:c0:86:0b:ff:06:fa:34:53:70:c3:8e:64:
                    6c:8a:9d:f6:f7:dc:d2:f6:cf:c1:fd:ef:e0:11:49:
                    52:af:4b:7a:cc:37:c0:ad:a1:82:b3:a3:ea:2d:ff:
                    b8:41:9a:d7:04:17:8c:ec:95:00:7b:f6:09:31:18:
                    ae:16:0b:b3:23:5e:c8:d0:24:06:9d:1d:87:ba:22:
                    42:d9:13:c8:e7:3c:19:12:e0:f1:51:ad:df:38:31:
                    ef:fe:0f:43:7b:35:d4:ed:b8:21:aa:44:d2:2d:34:
                    3a:f1:72:35:c4:d9:46:c6:a3:be:7c:d7:f1:bc:dd:
                    ab:d4:c8:94:86:65:93:8a:39:f4:e9:19:3c:29:dc:
                    15:40:1b:d4:b8:e8:8d:5e:54:40:b5:db:ea:c3:4f:
                    1a:ef:dd:07:80:52:e6:24:ce:11:a2:d3:a1:c8:6f:
                    72:74:a8:15:ad:a7:81:04:42:27:43:77:ab:67:87:
                    55:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:69:AA:8D:E7:65:5E:0B:63:BF:3C:B4:EF:8E:58:14:C9:26:4B:AD
            X509v3 Authority Key Identifier:
                keyid:68:EB:F9:E7:50:9F:0C:8F:46:10:84:CC:21:FC:96:8D:D2:9C:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/0/68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68EBF9E7509F0C8F461084CC21FC968DD29C8FB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/0/323830343a356564383a3a2f33322d3438203d3e20323639303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:c0:a3:1c:e5:16:3c:9c:dd:c4:08:ec:ef:e2:cc:c1:b7:d9:
         a9:bc:03:25:8f:80:ff:1d:4b:c3:aa:fc:e3:77:e5:20:a6:c7:
         b5:8e:1e:28:26:4a:dc:7e:4e:d5:a3:1e:08:49:61:d3:6d:cc:
         21:71:a1:7a:9d:69:f4:b8:a7:82:28:74:d6:7c:bd:65:28:3f:
         03:1f:41:b4:e4:fb:54:56:57:5b:ee:5c:25:27:77:2b:1f:43:
         04:10:85:a9:4b:4d:fb:30:b6:eb:34:df:80:90:b0:9a:e4:13:
         76:4e:34:14:12:41:84:62:34:09:02:f8:59:cf:0b:ce:1e:0b:
         f3:db:04:5d:6a:96:31:31:e3:24:ec:fe:1a:7b:00:94:0a:e3:
         56:63:09:d1:47:04:84:6c:f9:79:23:10:f2:1e:92:cb:cd:51:
         36:94:5f:1e:d7:d4:50:29:ca:fc:cb:36:dc:60:fc:6a:32:ad:
         07:3e:29:ed:31:01:bc:f2:18:f6:ac:ab:52:77:b5:63:e0:07:
         b9:4e:44:1a:94:95:fc:1d:fd:be:96:93:8e:12:6b:0a:4c:e0:
         a7:5a:33:7e:63:ea:ed:75:f0:34:01:8c:fc:6e:44:60:76:a5:
         85:e4:43:9c:21:1c:9b:05:6c:62:2c:f1:56:27:fc:04:5c:09:
         3a:a2:0d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:18 2025 by rpki-client