Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/323830343a6665633a633734383a3a2f34382d3438203d3e20323632343933.roa
File:                     323830343a6665633a633734383a3a2f34382d3438203d3e20323632343933.roa (raw, json)
Hash identifier:          989pq8X1ik7oCe+s26qK+ojXez9vufFjAiRKy+gqMog=
Subject key identifier:   68:2B:30:4D:1E:30:EF:E5:F7:AA:25:94:D8:AC:8F:3D:E7:E7:E3:F8
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       0C5EAD881A72E6F46815E7F43977DE8DEB3BA575
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/323830343a6665633a633734383a3a2f34382d3438203d3e20323632343933.roa
Signing time:             Sun 14 Apr 2024 02:05:39 +0000
ROA not before:           Sun 14 Apr 2024 02:00:39 +0000
ROA not after:            Sun 13 Apr 2025 02:05:39 +0000
asID:                     262493
IP address blocks:        2804:fec:c748::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5e:ad:88:1a:72:e6:f4:68:15:e7:f4:39:77:de:8d:eb:3b:a5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr 14 02:00:39 2024 GMT
            Not After : Apr 13 02:05:39 2025 GMT
        Subject: CN=682B304D1E30EFE5F7AA2594D8AC8F3DE7E7E3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:d5:3c:c8:f7:24:a0:9f:ca:92:86:12:f4:
                    86:11:12:b9:b2:24:19:a7:ed:7a:f5:2c:65:11:e7:
                    62:56:35:43:72:f0:6d:a4:f9:60:92:66:7d:f3:ab:
                    9b:58:6d:c8:f5:5f:ee:0c:84:63:7b:21:f1:29:ae:
                    c9:01:45:50:ea:83:64:c0:0d:ce:a0:ce:51:71:f6:
                    e5:6a:51:58:fb:b8:20:cf:3c:53:6e:8d:63:02:33:
                    01:93:d2:b4:c5:5b:f5:cf:71:79:e8:fb:bc:8e:3e:
                    48:7a:0f:c2:9c:dc:e0:ef:d1:15:76:e7:74:ef:c5:
                    90:41:4a:16:54:70:17:7f:16:73:27:b1:fb:19:da:
                    70:85:67:8b:de:87:5f:ce:ab:90:fb:a2:da:d7:bc:
                    bb:48:6d:42:51:23:e6:5d:5c:5c:e7:cc:61:a2:13:
                    2a:7e:4f:20:b8:d3:70:84:cd:a4:09:a7:88:32:77:
                    5a:c1:9b:50:d8:93:87:cd:f0:e0:64:0c:ab:57:65:
                    6e:6c:59:29:9c:21:8e:e4:7f:45:d5:1d:df:19:1b:
                    81:c3:27:59:10:a1:61:64:ef:19:c0:5e:33:ef:0a:
                    c5:1d:45:dd:ac:51:39:e6:b9:8b:11:d9:ea:98:14:
                    37:7f:bd:9e:60:f7:46:e7:a0:0f:63:b5:c3:ee:65:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2B:30:4D:1E:30:EF:E5:F7:AA:25:94:D8:AC:8F:3D:E7:E7:E3:F8
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/323830343a6665633a633734383a3a2f34382d3438203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:c748::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:c5:ca:f7:5d:6f:25:1a:d5:e2:c1:1e:cd:d4:da:89:6f:1b:
         9b:b8:87:33:f1:5c:1c:16:95:d8:95:55:69:b0:a1:ec:06:09:
         34:5a:38:ec:27:59:b0:fe:a4:d1:2e:07:43:d7:67:d6:c8:75:
         bb:01:26:58:4b:5f:ec:c5:4a:bb:80:cb:55:fb:bc:69:b0:ef:
         f2:c3:0e:db:b5:68:0c:63:28:8b:20:0e:75:08:28:be:bc:6f:
         12:98:1b:72:8e:b8:d8:7a:69:85:a7:13:75:34:f1:68:a7:85:
         a0:34:d3:18:09:2f:1c:c0:4a:43:10:bc:07:6b:9b:b1:29:ec:
         7d:b8:1c:f7:63:7d:26:19:66:b0:72:0d:a1:9c:92:a5:d5:c6:
         f2:fb:4a:4e:93:1d:3e:d5:51:db:a4:ed:a5:b8:98:85:a3:1b:
         e8:71:ac:15:ac:a0:80:12:24:3d:5b:ab:68:a9:37:a0:95:45:
         38:6f:f9:44:ad:4c:fc:71:d4:4d:29:54:d4:fd:0d:cd:c2:c1:
         4c:b2:88:d4:ce:c1:d2:52:dc:a2:78:10:d9:0b:16:e2:c2:9c:
         8a:fc:ec:f2:50:43:ec:dd:7d:ec:9d:be:84:86:4d:b9:2e:7c:
         65:eb:67:50:4c:08:86:3a:25:df:2d:b1:d0:e0:8b:a8:4e:68:
         5c:6c:5a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:14 2025 by rpki-client