Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a323030303a3a2f33352d3335203d3e20323731303432.roa
File:                     323830343a373536303a323030303a3a2f33352d3335203d3e20323731303432.roa (raw, json)
Hash identifier:          QZVYstYnvf3Ts6DLopGZY2QOyThMrGrOlDDbG66IEkM=
Subject key identifier:   6A:B0:6C:F3:4D:7A:64:4F:08:24:BA:4F:0A:08:25:45:C3:70:AC:44
Certificate issuer:       /CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
Certificate serial:       569C184B5C1DB07363D363E215FD05E88DF4F6F8
Authority key identifier: 61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a323030303a3a2f33352d3335203d3e20323731303432.roa
Signing time:             Tue 07 Nov 2023 16:19:18 +0000
ROA not before:           Tue 07 Nov 2023 16:14:18 +0000
ROA not after:            Tue 05 Nov 2024 16:19:18 +0000
asID:                     271042
IP address blocks:        2804:7560:2000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9c:18:4b:5c:1d:b0:73:63:d3:63:e2:15:fd:05:e8:8d:f4:f6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615FAEA4CCDC7F702D4F5FA4C12583956179073A
        Validity
            Not Before: Nov  7 16:14:18 2023 GMT
            Not After : Nov  5 16:19:18 2024 GMT
        Subject: CN=6AB06CF34D7A644F0824BA4F0A082545C370AC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:35:9d:24:99:b2:6a:53:85:53:b8:a1:7b:
                    8c:b3:9a:32:71:1c:80:cd:e8:04:ed:d3:d3:e6:e7:
                    b7:5c:fe:25:a6:68:f5:78:6c:8e:e7:3e:53:d5:cb:
                    cd:b3:cf:38:cd:bb:c8:d7:7b:50:f7:5f:b2:10:8f:
                    6a:fd:83:aa:06:5e:87:0e:cb:44:20:64:12:88:c4:
                    a3:83:4e:bd:b5:69:da:e7:d7:c6:29:26:b9:df:c8:
                    99:de:3f:f3:2a:b0:d9:b5:2d:1a:c0:5b:0b:ec:f8:
                    b2:4b:b8:e6:2c:9e:b2:0d:f6:a4:59:b8:46:40:50:
                    55:3c:e8:05:51:73:a7:55:46:20:fb:cd:e5:65:73:
                    08:e9:3b:ac:d4:de:7d:c8:60:4d:f9:00:3f:6b:a7:
                    8c:80:69:5f:e6:0c:d7:03:59:30:bf:c0:26:08:9f:
                    48:40:fe:6c:d3:1d:bd:ef:2a:b5:6c:04:d4:3c:9b:
                    b7:11:ce:b4:16:a2:31:cc:5f:19:15:b1:ad:66:22:
                    d9:75:8c:83:fb:4c:d9:43:b0:d5:75:36:e0:71:b1:
                    ac:62:c5:76:d9:bf:ad:0a:8e:c1:57:ad:82:95:66:
                    ab:7c:ca:30:fe:ec:98:e0:05:de:eb:6c:c1:6b:03:
                    ac:dc:e2:a8:2c:8a:34:d6:9f:23:05:ff:e0:eb:8e:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B0:6C:F3:4D:7A:64:4F:08:24:BA:4F:0A:08:25:45:C3:70:AC:44
            X509v3 Authority Key Identifier:
                keyid:61:5F:AE:A4:CC:DC:7F:70:2D:4F:5F:A4:C1:25:83:95:61:79:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615FAEA4CCDC7F702D4F5FA4C12583956179073A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a323030303a3a2f33352d3335203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7560:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a1:69:94:b8:f0:d3:e9:fd:55:a8:3c:b1:ed:74:27:34:59:ff:
         f9:8c:8b:48:40:96:1d:3a:d6:e1:3e:96:f8:a1:13:7e:28:3c:
         3c:8b:ca:7d:d0:d6:64:09:fb:d9:7e:61:cd:51:e7:7b:37:51:
         72:f9:74:84:e2:7f:5a:f2:d9:85:3e:f1:aa:26:c0:96:34:6b:
         cb:b4:0a:a4:85:8f:34:9f:00:cc:0a:d4:bc:51:d7:86:c9:35:
         b6:39:3c:d6:bb:5f:91:e2:78:c2:97:00:8f:d7:2b:0c:c3:01:
         ef:e6:16:f1:cb:91:93:45:17:73:75:93:79:bc:da:53:77:9a:
         61:1b:f6:88:ad:b8:e0:d7:01:16:2f:72:28:f4:51:c8:15:0b:
         56:a4:73:e6:49:6d:9c:18:04:b8:4e:28:ba:e2:30:c8:95:ce:
         4e:7a:53:37:31:6e:7a:e1:18:9b:97:fa:b5:56:27:9d:5d:54:
         bc:1c:ef:be:0d:76:b2:d3:c9:8a:a0:fc:be:4f:03:ac:70:8d:
         c9:e8:22:24:e6:7e:3d:e4:33:3d:5b:a6:cf:db:b2:b7:cd:d0:
         99:d0:65:dd:46:fc:c9:9c:51:89:ab:d4:fa:56:c2:16:95:99:
         15:b8:1d:11:f2:d6:b1:39:90:2e:c6:42:1d:dc:db:ed:e0:68:
         52:d0:ca:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:12:57 2025 by rpki-client