Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a313a3a2f34382d3438203d3e20323638353736.roa
File:                     323830343a353335303a313a3a2f34382d3438203d3e20323638353736.roa (raw, json)
Hash identifier:          YDi1jh1+aF8GihnfYSDmB2rqyjjXq9I3fICdgv7NT+s=
Subject key identifier:   57:5F:0B:4C:B5:A1:6E:02:2C:2F:41:BD:35:8A:CE:9A:0F:26:BC:2F
Certificate issuer:       /CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
Certificate serial:       21DE17B350AA4D5B4D6E8925E7104E85F4475121
Authority key identifier: 6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a313a3a2f34382d3438203d3e20323638353736.roa
Signing time:             Fri 28 Apr 2023 15:00:01 +0000
ROA not before:           Fri 28 Apr 2023 14:55:01 +0000
ROA not after:            Fri 26 Apr 2024 15:00:01 +0000
asID:                     268576
IP address blocks:        2804:5350:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:de:17:b3:50:aa:4d:5b:4d:6e:89:25:e7:10:4e:85:f4:47:51:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
        Validity
            Not Before: Apr 28 14:55:01 2023 GMT
            Not After : Apr 26 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d0:34:e4:ee:74:2c:10:d7:b8:80:ca:68:c1:
                    f0:94:70:e6:01:f7:86:00:5e:22:b7:3b:6c:cc:8c:
                    86:8f:f5:bb:36:3f:2a:9e:9a:5f:29:52:ab:a1:37:
                    09:ec:fc:3f:e2:73:10:f6:4e:60:dc:f8:76:99:83:
                    79:a0:1b:f3:f9:4c:62:47:56:98:e6:af:22:95:1c:
                    76:4f:26:63:fa:38:82:ea:a1:15:74:c3:f3:3b:bb:
                    75:cf:e0:52:4e:39:f2:2d:a6:28:ff:d5:21:d7:1c:
                    63:70:8f:95:21:6e:b7:f7:2f:3f:9b:27:1c:bd:35:
                    fe:de:cd:9f:85:fe:1c:74:07:e2:78:55:9d:ed:e5:
                    33:25:66:8c:7e:f5:cf:d5:fc:08:66:cf:65:4b:4c:
                    a1:3d:e5:95:a3:f7:5e:4b:5e:eb:1d:c4:b4:56:b2:
                    a6:83:58:29:cd:04:c3:80:b7:e7:e4:37:c9:71:47:
                    cc:50:05:0d:0d:d9:13:2f:28:bd:cd:5d:53:ec:ee:
                    be:3b:2e:1b:db:ae:d3:20:59:62:c7:30:a7:e3:9a:
                    a0:f1:4a:eb:6e:86:06:e8:9f:3f:3f:98:ce:08:cb:
                    4d:57:63:e2:aa:e5:88:cc:dd:8e:e5:5d:54:88:a9:
                    ae:b2:66:51:77:cc:d2:ba:b1:29:c7:aa:b8:36:a4:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5F:0B:4C:B5:A1:6E:02:2C:2F:41:BD:35:8A:CE:9A:0F:26:BC:2F
            X509v3 Authority Key Identifier:
                keyid:6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a313a3a2f34382d3438203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5350:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:7d:97:24:8d:7f:fd:05:44:fc:34:10:d1:2c:a3:98:02:
         29:9e:70:c4:de:4a:e8:4e:ad:05:4f:ed:e1:ae:2a:16:e2:a4:
         91:31:d9:31:ed:35:72:ba:1d:4f:d1:87:ae:13:1c:39:17:39:
         fb:16:90:f7:81:b3:c0:c7:85:2a:4c:87:0e:b6:fb:1f:a8:c5:
         db:7f:e3:61:8a:8b:e0:da:aa:7d:5e:93:b9:ab:8f:4b:d4:23:
         2b:96:8c:e5:69:df:d9:ff:9b:76:b2:39:ef:bd:6e:0a:4a:a3:
         8a:8b:92:1b:0b:89:8f:dd:9c:fe:86:cb:15:e8:85:7d:93:c4:
         7c:b5:1c:de:36:49:53:99:9f:5b:e8:4e:f0:9b:34:e7:3f:a1:
         76:75:9f:68:c9:f3:2d:db:dd:f2:e6:52:38:eb:3e:e9:18:96:
         89:bb:ca:6d:5d:60:ff:1c:a3:b5:13:76:15:7f:48:04:97:21:
         4d:c9:a5:a3:9f:a6:3d:a5:aa:bf:21:2f:34:a0:bf:a7:01:01:
         08:b4:5c:d9:68:d2:a9:a4:86:ef:5a:e3:c1:9f:f5:d9:60:17:
         8a:d9:76:86:54:d9:bc:ee:96:bf:8c:58:16:3f:9a:04:db:f6:
         1c:93:92:1c:75:42:f1:8d:83:b0:1e:4d:50:57:eb:b0:de:04:
         10:eb:76:1c
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUId4Xs1CqTVtNbokl5xBOhfRHUSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJENTI1NkUwNjM3M0NGRTAzRDg5RUI3ODY1RkZDRDcw
ODZGNkVCNjAeFw0yMzA0MjgxNDU1MDFaFw0yNDA0MjYxNTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTJEMDM0RTRFRTc0MkMxMEQ3
Qjg4MENBNjhDMUYwOTQ3MEU2MDFGNzg2MDA1RTIyQjczQjZDQ0M4Qzg2OEZGNUJC
MzYzRjJBOUU5QTVGMjk1MkFCQTEzNzA5RUNGQzNGRTI3MzEwRjY0RTYwRENGODc2
OTk4Mzc5QTAxQkYzRjk0QzYyNDc1Njk4RTZBRjIyOTUxQzc2NEYyNjYzRkEzODgy
RUFBMTE1NzRDM0YzM0JCQjc1Q0ZFMDUyNEUzOUYyMkRBNjI4RkZENTIxRDcxQzYz
NzA4Rjk1MjE2RUI3RjcyRjNGOUIyNzFDQkQzNUZFREVDRDlGODVGRTFDNzQwN0Uy
Nzg1NTlERURFNTMzMjU2NjhDN0VGNUNGRDVGQzA4NjZDRjY1NEI0Q0ExM0RFNTk1
QTNGNzVFNEI1RUVCMURDNEI0NTZCMkE2ODM1ODI5Q0QwNEMzODBCN0U3RTQzN0M5
NzE0N0NDNTAwNTBEMEREOTEzMkYyOEJEQ0Q1RDUzRUNFRUJFM0IyRTFCREJBRUQz
MjA1OTYyQzczMEE3RTM5QUEwRjE0QUVCNkU4NjA2RTg5RjNGM0Y5OENFMDhDQjRE
NTc2M0UyQUFFNTg4Q0NERDhFRTU1RDU0ODhBOUFFQjI2NjUxNzdDQ0QyQkFCMTI5
QzdBQUI4MzZBNDcxRkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4tA05O50LBDXuIDKaMHwlHDmAfeGAF4itztszIyGj/W7Nj8qnppf
KVKroTcJ7Pw/4nMQ9k5g3Ph2mYN5oBvz+UxiR1aY5q8ilRx2TyZj+jiC6qEVdMPz
O7t1z+BSTjnyLaYo/9Uh1xxjcI+VIW639y8/myccvTX+3s2fhf4cdAfieFWd7eUz
JWaMfvXP1fwIZs9lS0yhPeWVo/deS17rHcS0VrKmg1gpzQTDgLfn5DfJcUfMUAUN
DdkTLyi9zV1T7O6+Oy4b267TIFlixzCn45qg8UrrboYG6J8/P5jOCMtNV2PiquWI
zN2O5V1UiKmusmZRd8zSurEpx6q4NqRx/wIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FFdfC0y1oW4CLC9BvTWKzpoPJrwvMB8GA1UdIwQYMBaAFGvVJW4GNzz+A9iet4Zf
/NcIb262MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlHSDdMb2duWHd5ZzZn
dkg1QnlHVmNEQjRkRDd4N1h6UlJQaDJQblhFdkVkLzAvNkJENTI1NkUwNjM3M0NG
RTAzRDg5RUI3ODY1RkZDRDcwODZGNkVCNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82QkQ1MjU2RTA2MzczQ0ZFMDNEODlFQjc4NjVGRkNENzA4NkY2
RUI2LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85R0g3TG9nblh3eWc2Z3ZINUJ5
R1ZjREI0ZEQ3eDdYelJSUGgyUG5YRXZFZC8wLzMyMzgzMDM0M2EzNTMzMzUzMDNh
MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzgzNTM3MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAoBFNQAAEwDQYJKoZIhvcNAQELBQADggEBAHuVfZckjX/9BUT8NBDRLKOYAime
cMTeSuhOrQVP7eGuKhbipJEx2THtNXK6HU/Rh64THDkXOfsWkPeBs8DHhSpMhw62
+x+oxdt/42GKi+Daqn1ek7mrj0vUIyuWjOVp39n/m3ayOe+9bgpKo4qLkhsLiY/d
nP6GyxXohX2TxHy1HN42SVOZn1voTvCbNOc/oXZ1n2jJ8y3b3fLmUjjrPukYlom7
ym1dYP8co7UTdhV/SASXIU3JpaOfpj2lqr8hLzSgv6cBAQi0XNlo0qmkhu9a48Gf
9dlgF4rZdoZU2bzulr+MWBY/mgTb9hyTkhx1QvGNg7AeTVBX67DeBBDrdhw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:12:31 2025 by rpki-client