Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a313030303a3a2f34302d3430203d3e20323638313036.roa
File:                     323830343a353831383a313030303a3a2f34302d3430203d3e20323638313036.roa (raw, json)
Hash identifier:          tEdJKZWwxHXTKxIziOyFlD2ggaqm2dwJNOjlEXcVvCE=
Subject key identifier:   F6:3A:74:BB:8E:00:C0:79:F6:7C:81:63:4A:9E:11:6F:34:F8:D4:BA
Certificate issuer:       /CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
Certificate serial:       79FDBDBF16CCC034EB33AB2AA2594A5C53B630CA
Authority key identifier: B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a313030303a3a2f34302d3430203d3e20323638313036.roa
Signing time:             Mon 07 Feb 2022 12:09:16 +0000
ROA not before:           Mon 07 Feb 2022 12:04:16 +0000
ROA not after:            Mon 06 Feb 2023 12:09:16 +0000
asID:                     268106
IP address blocks:        2804:5818:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fd:bd:bf:16:cc:c0:34:eb:33:ab:2a:a2:59:4a:5c:53:b6:30:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
        Validity
            Not Before: Feb  7 12:04:16 2022 GMT
            Not After : Feb  6 12:09:16 2023 GMT
        Subject: CN=F63A74BB8E00C079F67C81634A9E116F34F8D4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:7e:f6:09:eb:ca:76:9c:66:3a:93:68:07:
                    00:55:db:84:32:81:a1:5f:62:c0:84:97:9b:74:b0:
                    53:ca:8e:a7:af:2a:87:bf:ec:a3:6d:ef:f3:39:4e:
                    aa:73:2d:c4:46:4d:07:b7:20:1e:f8:ff:eb:e4:b8:
                    4d:32:04:a0:1e:a2:1e:64:be:54:00:47:50:6a:3b:
                    79:2b:de:e8:ed:23:14:41:5f:2f:09:7e:ad:b8:16:
                    3a:23:f8:e1:e7:79:af:6e:e6:e2:b8:33:24:90:0d:
                    ae:b8:b3:e5:46:95:e1:1b:36:a1:3b:46:4a:d0:8f:
                    59:d4:a5:20:46:0f:6a:a1:5c:d1:5b:06:9e:ed:1d:
                    0e:bb:69:f8:fe:b6:4c:67:1d:03:23:a7:22:41:24:
                    ca:35:af:4d:2a:17:75:58:eb:ed:26:34:11:f8:12:
                    5f:3b:3b:d5:6b:4d:51:73:b1:14:79:c8:cf:72:86:
                    ce:82:da:1f:ee:81:3a:6a:bc:d2:4d:97:8d:6c:1b:
                    a8:db:d6:85:6f:1d:8b:38:77:56:51:04:f4:03:49:
                    f2:e2:39:90:9d:e2:60:8a:dc:34:04:a8:c3:52:15:
                    2b:8e:b0:c4:6e:e8:35:d7:19:4c:52:4a:85:e7:e0:
                    82:e3:e1:66:60:29:9e:97:fe:85:e5:f2:c7:67:78:
                    d6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3A:74:BB:8E:00:C0:79:F6:7C:81:63:4A:9E:11:6F:34:F8:D4:BA
            X509v3 Authority Key Identifier:
                keyid:B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a313030303a3a2f34302d3430203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5818:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:f1:24:28:6c:10:ce:60:4b:33:bd:98:d4:36:9c:33:b1:eb:
         f7:41:a7:9a:4f:42:1a:4c:42:7e:34:61:3a:a0:7a:45:dc:c9:
         ac:08:cb:0e:d2:d0:76:e4:4f:9a:2b:c5:9c:38:55:39:9d:57:
         e2:8e:5c:6c:92:59:29:33:34:92:b1:9e:2c:73:17:52:4c:f8:
         46:7e:33:2f:80:dd:2e:f8:cd:4e:da:b2:ad:df:67:8e:57:fd:
         9d:93:9d:3a:9a:61:72:96:16:4c:92:3c:dd:78:fe:f3:09:5f:
         ad:7f:e9:fc:b6:63:72:16:a2:9c:fd:9d:67:d4:7d:1a:79:c1:
         66:57:e2:60:ac:6d:8b:dc:7b:17:16:7c:ce:17:41:b4:5e:3e:
         42:9c:cf:57:78:71:1f:17:cb:86:ee:c3:73:18:36:e0:84:e2:
         30:45:a4:1d:27:e0:5b:ea:7b:2f:7d:8c:2a:3a:72:a5:ca:8a:
         92:08:d0:f5:4d:f4:d0:23:96:79:f0:03:57:5f:bc:37:d6:76:
         20:09:9e:5b:c7:af:91:87:fa:45:11:3b:ea:74:ea:b5:e0:6f:
         fa:c7:48:72:4b:f4:9d:8e:2b:69:fe:40:a9:2a:04:9d:f5:bd:
         85:29:b0:cb:4f:fc:59:78:09:b7:46:26:ff:28:b3:fd:b3:ff:
         cb:6b:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:31 2025 by rpki-client