Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/323830343a363639633a3a2f33322d3438203d3e20323639353731.roa
File:                     323830343a363639633a3a2f33322d3438203d3e20323639353731.roa (raw, json)
Hash identifier:          0XnE+itFyuGhR7sOfgTGdqRtryzDECOrZiataoFB9/g=
Subject key identifier:   32:85:EE:65:84:FE:51:72:6B:09:EF:FC:69:E8:64:C0:C2:B0:5C:7F
Certificate issuer:       /CN=7563E358B306B1B656613937C201B91663FEF5F9
Certificate serial:       3B3197F4FB30716F6816E43AA65C49F4B9CA3EED
Authority key identifier: 75:63:E3:58:B3:06:B1:B6:56:61:39:37:C2:01:B9:16:63:FE:F5:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7563E358B306B1B656613937C201B91663FEF5F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/323830343a363639633a3a2f33322d3438203d3e20323639353731.roa
Signing time:             Thu 12 May 2022 21:00:00 +0000
ROA not before:           Thu 12 May 2022 20:55:00 +0000
ROA not after:            Thu 11 May 2023 21:00:00 +0000
asID:                     269571
IP address blocks:        2804:669c::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:31:97:f4:fb:30:71:6f:68:16:e4:3a:a6:5c:49:f4:b9:ca:3e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7563E358B306B1B656613937C201B91663FEF5F9
        Validity
            Not Before: May 12 20:55:00 2022 GMT
            Not After : May 11 21:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e5:ce:90:27:da:73:20:a6:8a:a4:ce:9d:b3:
                    04:a1:c1:19:34:86:1e:46:83:e8:54:00:81:64:5e:
                    f3:a7:1a:b0:a7:c2:13:63:7f:4a:53:91:9d:dc:c3:
                    65:66:e8:61:f9:68:28:51:73:71:8e:6d:53:f9:86:
                    27:ef:aa:4f:42:ea:26:f6:b4:56:05:94:22:2e:a6:
                    7a:a7:43:be:03:4c:b1:b8:24:5d:5d:a7:1f:3e:35:
                    7f:23:5c:01:7f:9d:46:61:71:c2:21:f6:ad:4f:92:
                    43:ea:95:df:42:ba:26:0e:3e:32:6d:c3:63:ae:4e:
                    6e:63:7a:e9:cf:7e:e3:5a:c3:30:2c:55:f0:23:78:
                    ae:96:b4:18:a1:bf:51:38:87:44:64:09:2b:03:f0:
                    4d:c2:71:ff:91:1a:95:3e:5f:93:28:f0:b8:c4:c0:
                    46:6e:cd:fc:dd:09:01:57:2c:93:3a:c0:f1:5c:8a:
                    a1:c6:ff:60:74:e9:12:1e:3e:c2:3f:31:15:89:4a:
                    c7:ac:4e:22:b4:b3:23:fa:72:58:fd:b7:95:9e:a2:
                    b9:28:c8:00:46:e5:b3:54:96:7c:0a:17:f7:e3:5f:
                    37:ca:fc:a0:68:a3:a9:50:1c:48:a0:af:1e:d0:7f:
                    13:25:40:d7:81:3b:c0:89:b0:be:cf:cf:95:b0:82:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:85:EE:65:84:FE:51:72:6B:09:EF:FC:69:E8:64:C0:C2:B0:5C:7F
            X509v3 Authority Key Identifier:
                keyid:75:63:E3:58:B3:06:B1:B6:56:61:39:37:C2:01:B9:16:63:FE:F5:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/7563E358B306B1B656613937C201B91663FEF5F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7563E358B306B1B656613937C201B91663FEF5F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPQYZ4rixwRbnMJ2oGh9PEtZMBXrfGcsJ9nYbr6JCMyo/0/323830343a363639633a3a2f33322d3438203d3e20323639353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:669c::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:57:9c:63:a9:1b:8d:36:c3:c0:d2:e5:b8:7d:06:33:68:08:
         86:08:c3:c3:d3:f8:7d:7d:64:8a:b1:44:48:ab:4b:b8:98:db:
         f4:94:63:06:f7:f5:8c:e1:bc:74:f7:32:59:fb:5c:b8:f5:7d:
         d2:f7:86:39:e9:62:4e:ec:60:2b:54:a6:83:14:86:09:b8:a2:
         72:cc:d8:81:85:85:aa:9b:b4:43:fb:ce:e4:fe:d8:1d:ae:76:
         17:68:0a:d8:3e:91:6e:01:5a:f4:18:dd:1c:da:a5:6b:ce:34:
         31:b0:92:d3:66:7f:fb:5b:62:7e:75:1e:96:c2:54:8c:4d:e7:
         54:b3:88:df:00:11:16:7d:e7:16:88:8e:cd:37:0b:72:79:df:
         8e:71:e7:43:89:d6:66:b6:13:3b:22:20:67:d2:91:ca:0f:70:
         1e:a2:42:7c:15:62:e1:15:e7:5b:bd:d4:4e:96:56:85:53:04:
         86:50:62:fc:03:ae:db:4d:ce:ad:e2:d8:e9:9c:b8:73:fc:80:
         1e:40:d5:6e:0f:ab:f4:2c:0a:43:25:2f:74:4e:05:79:55:04:
         7c:a2:1e:d8:c8:29:a1:9b:a0:90:c7:11:11:83:2c:f5:7b:f2:
         f6:da:30:60:47:78:83:fc:44:1c:7e:30:4e:7f:f8:3c:4f:ca:
         c8:83:91:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:38:05 2025 by rpki-client