Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a3a2f33322d3332203d3e20323636333538.roa
File:                     323830343a333639383a3a2f33322d3332203d3e20323636333538.roa (raw, json)
Hash identifier:          SH0iDRpytoPjTXEzDmD4WiljIVc2FpuhPzvgU1Y9Th4=
Subject key identifier:   CE:F9:BF:AD:29:E8:5B:E1:F8:AB:C3:DC:4C:85:D6:3F:37:8F:6D:D1
Certificate issuer:       /CN=689A0904150851FE4D3E06A04569C2EE6143E398
Certificate serial:       6B2F0A9D30411952B2EB43DA897D3B3FCA7E0254
Authority key identifier: 68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a3a2f33322d3332203d3e20323636333538.roa
Signing time:             Tue 28 Mar 2023 18:48:05 +0000
ROA not before:           Tue 28 Mar 2023 18:43:05 +0000
ROA not after:            Tue 26 Mar 2024 18:48:05 +0000
asID:                     266358
IP address blocks:        2804:3698::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2f:0a:9d:30:41:19:52:b2:eb:43:da:89:7d:3b:3f:ca:7e:02:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=689A0904150851FE4D3E06A04569C2EE6143E398
        Validity
            Not Before: Mar 28 18:43:05 2023 GMT
            Not After : Mar 26 18:48:05 2024 GMT
        Subject: CN=CEF9BFAD29E85BE1F8ABC3DC4C85D63F378F6DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:7a:4b:55:b1:24:02:ea:24:ff:96:7c:ed:
                    a1:d3:bf:0b:a0:43:df:1a:02:24:b5:cf:a2:4e:9f:
                    06:25:8a:82:a9:73:11:11:ee:46:35:50:5f:c6:f0:
                    71:9b:e1:d6:1d:5c:f2:e6:26:8d:a9:52:b0:fd:5c:
                    63:a1:6d:b3:c9:d5:83:61:ac:d8:b4:ad:89:86:3b:
                    79:c6:fe:7d:c8:3a:11:7a:cf:98:94:b5:0a:12:93:
                    b5:94:1a:0b:7c:9a:ca:d2:8d:b0:51:c3:f6:ee:c1:
                    66:23:7b:c6:6f:d4:70:34:ce:de:36:f2:a3:5d:36:
                    a8:05:83:30:d9:1d:c0:97:5d:bf:25:4b:d0:20:ae:
                    60:d9:8d:c4:a4:35:1e:87:3e:94:3a:d5:93:22:01:
                    d3:dc:60:8e:d2:7d:79:ce:ef:47:b9:1e:8d:45:95:
                    8f:64:b0:be:69:0d:96:f3:67:2f:1f:ab:97:3d:39:
                    82:70:0e:6c:38:a7:83:dd:14:e0:79:bb:86:b5:bd:
                    b7:04:ea:28:e1:ab:aa:c9:70:f0:ca:7d:cf:a4:90:
                    fe:e6:99:fc:f2:3f:21:52:2f:6c:98:b2:72:29:52:
                    55:63:fc:14:f8:9a:2a:53:db:b2:38:ed:1e:93:50:
                    ee:8a:56:8a:1a:85:da:bf:21:3b:c1:59:48:05:a2:
                    4c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F9:BF:AD:29:E8:5B:E1:F8:AB:C3:DC:4C:85:D6:3F:37:8F:6D:D1
            X509v3 Authority Key Identifier:
                keyid:68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/689A0904150851FE4D3E06A04569C2EE6143E398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/323830343a333639383a3a2f33322d3332203d3e20323636333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3698::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:29:6b:2b:59:59:13:07:bd:de:d6:58:6a:0e:e8:3b:f5:4e:
         a9:f1:90:05:c2:cb:e9:cd:aa:47:c0:5e:8d:8b:1e:c2:13:45:
         dd:90:6f:52:4b:1a:5d:57:8a:fa:f8:10:a7:20:b9:f2:77:bc:
         36:06:dc:21:ca:6d:90:fe:c5:ff:a1:af:61:6e:4b:7f:db:95:
         72:50:31:3c:0e:6e:55:c4:69:ff:67:d7:34:2b:9e:18:68:0c:
         fa:1e:16:05:cc:fa:63:03:bd:24:f8:22:25:2f:fe:9b:bb:bd:
         db:0b:06:a2:1c:c8:67:38:86:4c:ec:60:fb:9d:a9:5b:57:43:
         c7:e7:04:b0:f1:a6:df:be:1f:95:5a:9a:0c:71:1f:94:fb:aa:
         be:ce:4b:6f:bd:42:98:2e:78:e8:d7:40:17:89:93:2d:fd:33:
         98:60:bf:e6:b7:58:db:0f:e4:a3:50:28:a0:aa:1c:f1:1e:95:
         db:b5:fa:ba:2a:09:1f:6f:48:e0:f1:cf:2d:3d:7e:4d:5d:c8:
         2b:db:aa:31:0b:36:69:75:c4:3d:cc:ba:4a:96:52:59:d3:42:
         f5:41:25:4a:1b:59:99:54:14:83:2d:6b:58:14:cf:e0:72:7a:
         d1:a4:ea:ae:c7:84:8f:f3:31:3c:38:64:5a:1c:5e:45:d3:7b:
         85:53:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:33 2025 by rpki-client