Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a3a2f33322d3332203d3e20323730323536.roa
File:                     323830343a363933383a3a2f33322d3332203d3e20323730323536.roa (raw, json)
Hash identifier:          65idRHJ3iB1c2lbdb3SLfvw0/ftiPgf9fdzPNbqzdRA=
Subject key identifier:   69:4F:64:CB:F5:D6:E4:42:30:A8:E7:5E:C9:C5:DE:81:ED:20:15:AB
Certificate issuer:       /CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
Certificate serial:       0A0C8A6B793E22056A7B033BEBAD89AF9EF14CEB
Authority key identifier: E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a3a2f33322d3332203d3e20323730323536.roa
Signing time:             Mon 30 Jan 2023 18:09:02 +0000
ROA not before:           Mon 30 Jan 2023 18:04:02 +0000
ROA not after:            Mon 29 Jan 2024 18:09:02 +0000
asID:                     270256
IP address blocks:        2804:6938::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0c:8a:6b:79:3e:22:05:6a:7b:03:3b:eb:ad:89:af:9e:f1:4c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E495F195BFCE596CFDC075C41F0F79ED3D520D88
        Validity
            Not Before: Jan 30 18:04:02 2023 GMT
            Not After : Jan 29 18:09:02 2024 GMT
        Subject: CN=694F64CBF5D6E44230A8E75EC9C5DE81ED2015AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:22:a0:50:4c:69:bc:cb:eb:05:9d:ea:20:e4:
                    04:ef:73:4e:47:eb:e3:ec:c2:f7:a1:90:b8:c7:1d:
                    05:4d:b9:14:8b:4e:f1:d1:b7:26:15:42:9f:95:04:
                    b7:fc:1c:f5:5b:52:c8:32:cb:a8:16:07:5a:79:20:
                    89:41:0b:87:84:95:e8:db:fb:ef:30:af:33:9e:2f:
                    13:bd:a0:af:07:69:c7:83:72:cb:53:54:f6:c7:00:
                    e9:c1:45:30:0a:b8:12:cb:c3:0e:68:dc:1c:3e:2d:
                    d2:00:40:c9:85:aa:b8:20:8c:5b:a0:bf:05:9d:70:
                    a3:79:7f:75:c1:f9:78:b4:69:69:78:95:d4:43:c6:
                    09:39:b8:e3:d5:f5:e8:65:cb:0c:21:e3:fa:54:5a:
                    41:01:b0:a0:2c:92:d6:21:93:86:c9:d5:40:ec:2a:
                    67:b5:10:4a:61:ad:2f:ce:cd:48:01:08:84:3a:71:
                    f8:55:c0:48:55:58:5d:c2:5a:23:66:63:10:8a:da:
                    35:fa:3a:97:f1:d4:df:8e:f3:03:69:3a:9d:36:6e:
                    cb:a8:c9:79:c7:12:8f:4b:dd:d5:a6:80:c0:3a:23:
                    9c:81:5f:63:a5:5b:65:cf:d8:40:27:a6:e2:0c:b3:
                    c2:ac:a8:6d:47:e8:4b:6a:bd:c7:b3:37:3c:b4:cb:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4F:64:CB:F5:D6:E4:42:30:A8:E7:5E:C9:C5:DE:81:ED:20:15:AB
            X509v3 Authority Key Identifier:
                keyid:E4:95:F1:95:BF:CE:59:6C:FD:C0:75:C4:1F:0F:79:ED:3D:52:0D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E495F195BFCE596CFDC075C41F0F79ED3D520D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/323830343a363933383a3a2f33322d3332203d3e20323730323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6938::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:63:0b:30:37:23:b5:14:09:3a:c8:8b:14:67:94:d2:6a:49:
         04:fa:fb:b3:58:f5:2b:37:77:d6:5d:f4:21:e5:49:c1:f4:56:
         1e:23:13:21:fc:ab:53:43:2d:97:0d:a7:4f:da:e0:64:60:03:
         fe:c5:f3:dd:61:a1:bf:1c:33:a5:c8:ae:45:23:7e:78:51:c8:
         22:18:76:d0:75:6c:97:50:0b:69:cd:09:82:e8:e7:5d:e1:c4:
         81:eb:58:90:0e:c6:db:6b:79:f9:08:46:57:7a:ef:fc:f5:3f:
         98:4a:f4:2b:a2:96:19:54:07:26:a1:01:2e:48:cd:68:9e:fd:
         be:e1:90:34:a8:94:7f:ef:c7:85:8c:d2:7e:76:44:fd:72:4f:
         00:c2:1f:3f:3c:f3:cb:a1:3a:e9:a6:6b:20:f1:b2:b5:3a:3b:
         b2:9b:72:14:00:4d:42:8c:f8:40:02:0f:0f:65:a9:3a:c9:15:
         7d:75:58:0c:9a:d0:53:38:43:bf:85:65:3b:40:4e:35:55:4a:
         1f:23:55:2d:d7:37:ce:48:99:da:aa:f3:60:13:eb:29:32:f3:
         2e:c6:14:04:23:ca:c3:7e:84:27:fa:06:5e:d9:23:c2:60:3a:
         aa:22:58:0c:9a:7d:5f:31:57:66:2e:bc:58:ff:36:95:0e:ee:
         24:e5:6f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:31:48 2025 by rpki-client