Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/323830343a316432303a323030303a3a2f34302d3430203d3e20323634333439.roa
File:                     323830343a316432303a323030303a3a2f34302d3430203d3e20323634333439.roa (raw, json)
Hash identifier:          PJa6jnDMMPggGiQNtNKGao5Q9ySvSjc/yuQHoJ+nntI=
Subject key identifier:   44:E1:B9:BB:F8:F8:EA:CA:45:2F:DA:06:B7:36:A9:F5:F3:3F:3B:49
Certificate issuer:       /CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
Certificate serial:       2093C68A827BD041003534AA93E93B23709E47F0
Authority key identifier: 6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/323830343a316432303a323030303a3a2f34302d3430203d3e20323634333439.roa
Signing time:             Tue 07 Nov 2023 15:19:10 +0000
ROA not before:           Tue 07 Nov 2023 15:14:10 +0000
ROA not after:            Tue 05 Nov 2024 15:19:10 +0000
asID:                     264349
IP address blocks:        2804:1d20:2000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:93:c6:8a:82:7b:d0:41:00:35:34:aa:93:e9:3b:23:70:9e:47:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
        Validity
            Not Before: Nov  7 15:14:10 2023 GMT
            Not After : Nov  5 15:19:10 2024 GMT
        Subject: CN=44E1B9BBF8F8EACA452FDA06B736A9F5F33F3B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:40:11:d4:8b:c1:9f:2a:08:87:85:36:8c:
                    62:a3:21:a7:66:0b:7f:40:42:99:8b:5c:b2:c3:79:
                    43:95:74:b6:3b:ad:b3:16:9b:78:44:e4:19:e5:86:
                    81:7b:86:2e:cb:38:5f:03:eb:33:93:fc:5d:81:c6:
                    e7:be:e9:89:fa:f5:37:2c:be:15:41:15:5d:11:b3:
                    e5:3e:6b:b0:92:34:47:ed:43:bc:1d:8e:34:c5:13:
                    77:90:b5:63:d7:c2:5d:40:93:0a:e0:d0:bd:f4:8d:
                    af:95:e8:12:1b:05:95:00:8b:fe:e9:11:ed:b0:a6:
                    81:d9:ff:2d:0b:c4:c7:f2:92:05:22:5b:f5:e1:c5:
                    4b:c8:12:7a:36:46:ff:b0:a9:8e:7c:b5:25:ac:48:
                    01:2b:29:e8:aa:25:3c:d2:05:ce:f2:a0:7c:74:dc:
                    63:c7:fb:ad:41:e0:fb:27:19:d4:40:8a:14:5d:08:
                    5d:e0:59:00:f7:19:9a:53:d5:ff:25:9e:2a:3f:2d:
                    0a:00:7a:aa:f0:e7:4f:3a:6b:18:3c:15:b1:44:42:
                    e5:0b:4c:39:ff:84:d0:50:e3:a1:9d:f5:f1:76:a3:
                    29:f1:63:8d:6d:ba:20:c6:f0:cd:bc:3d:69:84:2f:
                    7c:ee:ae:7f:05:44:34:b7:01:d4:ce:14:f4:d4:cc:
                    f8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E1:B9:BB:F8:F8:EA:CA:45:2F:DA:06:B7:36:A9:F5:F3:3F:3B:49
            X509v3 Authority Key Identifier:
                keyid:6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/323830343a316432303a323030303a3a2f34302d3430203d3e20323634333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d20:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:44:fd:7c:12:09:81:f7:b0:91:0e:24:f8:47:a3:97:e5:5d:
         f0:26:4d:29:91:23:cb:8b:92:a9:ec:c9:8d:30:6d:83:fe:8d:
         16:c2:68:86:8b:2f:ec:09:7a:e9:ef:84:04:da:06:38:29:69:
         83:5e:af:7d:d6:97:05:92:c9:74:9a:f9:ec:24:8f:fa:37:cf:
         44:e1:87:63:39:8c:88:89:ac:ed:d6:79:f6:c5:29:9c:1b:d5:
         1b:b8:f3:39:85:76:2f:a0:df:06:4b:94:cd:db:e8:ea:38:fe:
         2f:96:67:5e:d2:6c:c2:82:56:8c:b4:12:ce:99:e6:a6:07:a4:
         ff:7a:94:dd:c1:d3:5a:3b:9c:e8:d4:04:71:8f:56:0d:b7:1a:
         74:12:2e:09:1a:a5:41:c1:f2:8b:49:3a:c7:af:9f:ce:1a:88:
         fc:3b:83:aa:dc:53:d4:ac:33:1a:2d:6f:40:06:33:90:23:42:
         26:63:23:16:a9:62:27:94:a2:ca:f8:5c:05:c2:59:b1:3c:5e:
         33:14:46:7f:8c:1d:3d:60:49:74:0f:23:e3:68:b4:3c:98:44:
         8e:cb:da:70:3d:2d:f3:25:43:2e:eb:3a:29:7d:84:57:a2:09:
         f5:5e:0c:2d:e6:88:c0:2f:63:2a:ca:e6:31:58:4f:f2:fa:2c:
         1b:9a:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:39:28 2025 by rpki-client