Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a633030303a3a2f33342d3334203d3e20323638353132.roa
File:                     323830343a363863303a633030303a3a2f33342d3334203d3e20323638353132.roa (raw, json)
Hash identifier:          zEotRLsadWG6ROIA9HOAq0lHBE62hQTynmSXToE0loA=
Subject key identifier:   6A:0A:57:A6:26:6C:D8:93:91:17:0C:78:EF:DD:FD:AA:5F:F2:CA:80
Certificate issuer:       /CN=6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A
Certificate serial:       068EB67323F3589413B63837DEB122E59CF8B12D
Authority key identifier: 6C:1B:CF:E2:17:EE:8D:EA:99:2D:9A:29:67:5B:9B:04:EC:C1:AC:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a633030303a3a2f33342d3334203d3e20323638353132.roa
Signing time:             Wed 08 Nov 2023 18:45:41 +0000
ROA not before:           Wed 08 Nov 2023 18:40:41 +0000
ROA not after:            Wed 06 Nov 2024 18:45:41 +0000
asID:                     268512
IP address blocks:        2804:68c0:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8e:b6:73:23:f3:58:94:13:b6:38:37:de:b1:22:e5:9c:f8:b1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A
        Validity
            Not Before: Nov  8 18:40:41 2023 GMT
            Not After : Nov  6 18:45:41 2024 GMT
        Subject: CN=6A0A57A6266CD89391170C78EFDDFDAA5FF2CA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:56:1c:3e:56:08:e9:f8:e2:d7:3b:17:27:
                    f2:4c:95:d9:7e:03:6d:45:6a:eb:fd:4b:54:ce:bd:
                    a6:40:a2:e5:ce:c0:f9:98:02:7d:9b:2d:c2:a7:00:
                    fb:5e:1a:9b:e0:3d:e2:dd:a8:5d:45:58:44:36:92:
                    ef:1e:10:fe:d9:5b:41:1e:fb:12:ed:d5:c4:d7:c4:
                    bf:f0:02:df:bb:3d:4e:44:a8:84:be:ab:72:34:88:
                    7d:e8:02:19:cd:f6:e2:fa:5a:3d:38:e3:29:af:3b:
                    2c:53:3f:58:28:6c:66:fc:02:63:93:55:94:1e:cb:
                    31:9f:cc:2a:22:8d:b4:92:4e:e1:61:9a:d4:8b:6b:
                    19:4f:dc:9f:a9:45:24:7e:70:55:0b:9f:a0:98:69:
                    e0:ce:61:36:19:03:e4:a9:06:24:51:be:bc:44:dc:
                    ce:53:19:3c:d4:aa:d0:94:13:c0:91:d1:90:a4:10:
                    46:64:f6:4a:59:94:a6:d3:83:9e:a9:0e:77:1f:01:
                    21:85:6a:4e:0f:4c:1a:9d:03:5b:b6:88:fe:e0:3b:
                    cb:9b:5d:f9:c0:ad:70:9b:01:98:a3:a5:61:1f:d2:
                    27:b4:71:ef:b4:14:95:71:ca:05:dd:fa:a9:d6:5a:
                    28:75:74:56:38:94:e9:83:66:12:25:aa:09:df:d8:
                    fe:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0A:57:A6:26:6C:D8:93:91:17:0C:78:EF:DD:FD:AA:5F:F2:CA:80
            X509v3 Authority Key Identifier:
                keyid:6C:1B:CF:E2:17:EE:8D:EA:99:2D:9A:29:67:5B:9B:04:EC:C1:AC:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C1BCFE217EE8DEA992D9A29675B9B04ECC1AC2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a633030303a3a2f33342d3334203d3e20323638353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68c0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ea:fc:93:a4:85:55:6d:a8:b7:0f:72:c4:6c:18:d3:b2:af:e0:
         d2:20:c6:54:c8:73:08:e6:90:0a:a4:44:97:bb:e3:a4:8d:55:
         87:d8:ec:da:b3:71:eb:0c:ab:15:7c:47:ae:0e:24:58:0b:e1:
         ac:33:c0:19:0b:92:57:e1:a4:84:aa:fb:3b:5c:28:e0:9c:45:
         61:9f:50:f6:2b:52:bb:23:0a:59:94:0a:89:74:e6:17:1c:fc:
         d8:13:65:5f:67:a0:fa:7b:f8:2e:ac:7d:12:37:c3:6b:1a:59:
         d1:08:6c:21:93:07:0e:a0:ca:a0:2c:72:66:46:1a:c3:96:54:
         cc:41:29:8a:db:76:f8:e4:8b:68:9a:39:47:0a:3f:72:d6:7b:
         5e:c4:82:0a:f4:c3:6d:91:7d:b2:d3:b2:74:fd:a0:a9:ab:39:
         69:e0:3c:c5:32:df:a9:42:bf:fd:81:f8:b8:c0:7e:0b:e3:1c:
         cf:29:36:5c:c7:4d:5d:66:61:e9:94:d7:5f:b6:b8:e6:45:d0:
         8f:43:be:f5:c1:08:61:9e:08:e0:6e:50:0a:d1:85:81:40:22:
         92:83:b1:76:f6:5d:3d:bb:6d:dc:7d:eb:8a:c8:12:c1:da:2f:
         4c:90:3f:3d:59:44:33:2b:77:5d:89:1b:d3:de:5b:cf:b7:10:
         c6:86:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:34:40 2025 by rpki-client