Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a643a3a2f34382d3438203d3e20323638353736.roa
File:                     323830343a353335303a643a3a2f34382d3438203d3e20323638353736.roa (raw, json)
Hash identifier:          YSNzCEejfprMPIygHLRoLwwhjZ6FuneC6LnuGQreeT0=
Subject key identifier:   16:1B:BA:3B:C4:7E:C5:39:2E:7E:80:D1:C9:25:31:FA:86:A9:EF:85
Certificate issuer:       /CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
Certificate serial:       4BFEAE06ACF9A7B3A864A86E0861C67E3DDB43E4
Authority key identifier: 6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a643a3a2f34382d3438203d3e20323638353736.roa
Signing time:             Fri 28 Apr 2023 15:00:02 +0000
ROA not before:           Fri 28 Apr 2023 14:55:02 +0000
ROA not after:            Fri 26 Apr 2024 15:00:02 +0000
asID:                     268576
IP address blocks:        2804:5350:d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fe:ae:06:ac:f9:a7:b3:a8:64:a8:6e:08:61:c6:7e:3d:db:43:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD5256E06373CFE03D89EB7865FFCD7086F6EB6
        Validity
            Not Before: Apr 28 14:55:02 2023 GMT
            Not After : Apr 26 15:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:ef:f4:67:38:eb:57:25:25:d3:38:fd:bd:
                    87:19:a2:62:64:73:18:8e:b7:d4:f3:94:3f:15:e4:
                    e3:04:c2:3d:5a:dc:c4:9e:dd:74:0e:4f:c3:3f:1e:
                    b6:c0:e7:7f:0a:3c:86:55:e9:67:fd:69:c0:df:c8:
                    04:3a:b1:5c:c3:b4:a1:a9:bf:91:80:03:9f:df:52:
                    75:36:35:6d:15:61:ca:65:35:de:56:9d:24:4e:31:
                    83:f1:61:fb:3d:8d:a6:7b:e3:69:3c:32:38:75:e9:
                    08:2f:27:d2:3d:d8:ce:d5:f7:96:c2:5d:85:14:18:
                    e9:13:2e:eb:86:b5:ff:56:a5:1b:7f:28:6b:e5:c8:
                    b6:c4:6e:bf:4d:f2:4c:ad:33:03:0e:77:32:04:97:
                    47:c8:82:05:2c:38:10:5d:56:eb:7a:a3:55:0c:6f:
                    7e:21:8a:62:15:aa:76:d9:05:70:7a:e4:50:e6:3b:
                    1f:a3:72:2e:3c:c2:64:0e:98:2b:43:97:f8:83:09:
                    30:d7:b5:0e:1b:ec:ea:43:a9:2a:20:f5:bd:66:81:
                    da:c4:83:c9:c7:49:fe:fc:a8:2e:5f:40:f2:a2:a7:
                    7e:13:68:ed:21:d7:72:40:b4:13:4d:8b:a3:b0:a8:
                    38:86:63:66:eb:0e:de:8a:55:bd:39:c0:09:ab:e9:
                    f0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1B:BA:3B:C4:7E:C5:39:2E:7E:80:D1:C9:25:31:FA:86:A9:EF:85
            X509v3 Authority Key Identifier:
                keyid:6B:D5:25:6E:06:37:3C:FE:03:D8:9E:B7:86:5F:FC:D7:08:6F:6E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BD5256E06373CFE03D89EB7865FFCD7086F6EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GH7LognXwyg6gvH5ByGVcDB4dD7x7XzRRPh2PnXEvEd/0/323830343a353335303a643a3a2f34382d3438203d3e20323638353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5350:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:6e:df:1b:7c:2a:10:41:cd:99:d4:0a:67:23:ea:0a:bc:3c:
         de:bf:cb:9f:d7:85:91:5a:1a:ed:2a:0f:23:41:90:58:57:16:
         80:c3:18:21:2e:f8:ea:7c:03:13:40:94:a1:02:ab:7e:d6:21:
         fa:d1:d0:ca:e8:63:32:79:fd:ce:75:8c:1b:1a:7b:fd:a2:b7:
         71:0f:ab:a9:18:a6:b2:a4:aa:d2:76:e9:84:9b:e2:88:ff:44:
         09:96:53:ee:02:80:b2:96:af:b2:bf:8f:b1:a9:af:1e:26:39:
         75:72:35:b4:ea:fe:84:82:30:34:3a:b6:60:98:be:4d:8c:d4:
         51:68:90:d0:30:e6:3a:85:7c:ef:0a:d2:e3:97:91:bc:bb:8b:
         fc:ab:8a:8d:e1:55:2c:fc:73:41:ac:d2:ff:a5:cc:7d:8e:55:
         c9:21:b5:fa:1b:ab:8d:e4:9b:10:19:99:75:50:00:92:e8:c7:
         e3:d1:42:78:5e:43:d1:09:17:21:d0:44:d9:7b:b3:a6:52:b7:
         8d:5b:0a:8d:2c:32:2e:80:fd:b1:e2:06:17:4d:1d:3b:11:50:
         43:ca:7e:ea:c1:17:80:26:3f:63:8e:6a:57:bb:89:a1:77:01:
         9e:9f:c4:b2:8f:e6:2d:23:1e:7d:7b:f2:2c:9a:5c:cf:ab:62:
         5c:28:7a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:17 2025 by rpki-client