Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/323830343a356264303a3a2f33322d3334203d3e20323638383730.roa
File:                     323830343a356264303a3a2f33322d3334203d3e20323638383730.roa (raw, json)
Hash identifier:          Od+LlWVeDRttHMHFIhKeY0ESnudsiGdey5JjbiDJe4k=
Subject key identifier:   DE:2E:DD:CD:00:D1:33:AD:58:91:1D:5E:E9:99:3B:AA:91:A7:3D:10
Certificate issuer:       /CN=CA6B34AFB25E47173E38783782E46D43F86C4899
Certificate serial:       060A379A674B7551107C4EDDA7C1C6DBD87ECD95
Authority key identifier: CA:6B:34:AF:B2:5E:47:17:3E:38:78:37:82:E4:6D:43:F8:6C:48:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA6B34AFB25E47173E38783782E46D43F86C4899.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/323830343a356264303a3a2f33322d3334203d3e20323638383730.roa
Signing time:             Wed 27 Dec 2023 05:15:46 +0000
ROA not before:           Wed 27 Dec 2023 05:10:46 +0000
ROA not after:            Wed 25 Dec 2024 05:15:46 +0000
asID:                     268870
IP address blocks:        2804:5bd0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0a:37:9a:67:4b:75:51:10:7c:4e:dd:a7:c1:c6:db:d8:7e:cd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6B34AFB25E47173E38783782E46D43F86C4899
        Validity
            Not Before: Dec 27 05:10:46 2023 GMT
            Not After : Dec 25 05:15:46 2024 GMT
        Subject: CN=DE2EDDCD00D133AD58911D5EE9993BAA91A73D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:d4:6a:ec:28:2a:59:b3:07:20:7e:21:14:
                    bd:e5:f1:8b:70:4b:ff:56:7a:fd:ea:f3:e2:73:59:
                    f8:26:0d:ac:01:1a:5f:43:2e:d3:21:60:92:53:b0:
                    15:6e:89:2d:5b:39:4c:06:67:8f:f0:d6:f9:ec:dd:
                    a9:6a:18:44:6e:02:65:ae:af:86:90:79:a0:a6:31:
                    c6:2d:d1:40:70:c8:f7:53:6f:04:1e:1a:f0:37:8c:
                    f0:7b:3e:a3:16:50:20:f9:05:ff:e5:88:fc:d9:1d:
                    68:04:a6:20:90:8e:da:1b:55:3e:48:77:1d:4f:79:
                    27:08:37:1d:0c:21:5c:8e:b6:f4:91:42:9b:92:4d:
                    3a:91:50:dd:4f:a9:b2:03:ac:c3:b5:05:7f:c6:47:
                    a4:6f:9e:d7:f1:cf:a2:2d:e6:54:27:bf:f6:82:3a:
                    4d:64:bd:82:6f:6c:0e:81:55:dc:43:1a:0e:17:c6:
                    9c:92:67:42:84:4f:30:e6:b1:61:85:81:92:b2:d0:
                    54:ec:9c:ad:68:82:31:04:dd:00:5a:e1:ed:f8:5d:
                    1c:0a:dc:16:69:9e:1c:70:b6:93:28:b7:d3:23:07:
                    c8:bf:a7:28:ba:2a:6d:03:2f:27:20:80:93:db:56:
                    b6:21:54:77:e2:88:90:97:d4:f6:5f:98:f5:5a:81:
                    bc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2E:DD:CD:00:D1:33:AD:58:91:1D:5E:E9:99:3B:AA:91:A7:3D:10
            X509v3 Authority Key Identifier:
                keyid:CA:6B:34:AF:B2:5E:47:17:3E:38:78:37:82:E4:6D:43:F8:6C:48:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/CA6B34AFB25E47173E38783782E46D43F86C4899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA6B34AFB25E47173E38783782E46D43F86C4899.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/323830343a356264303a3a2f33322d3334203d3e20323638383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:e2:40:05:72:0d:2d:39:58:3c:a0:17:d9:dc:6c:45:b7:80:
         2e:f3:a1:18:ca:b1:30:78:7d:f8:b7:b7:72:cb:ab:88:68:70:
         06:1a:52:09:83:ca:26:ae:5a:c6:d8:08:1c:cb:65:c6:0f:dc:
         cb:d7:1e:5c:10:2c:55:e1:ce:7a:0c:01:3b:fd:88:f1:02:c4:
         72:ff:d5:48:28:4f:01:3a:27:78:1d:8e:77:35:10:48:01:b2:
         a3:8d:c5:67:82:c5:84:92:52:cc:b8:ef:83:ef:7e:df:6e:b8:
         55:e7:3a:50:65:00:fd:2b:06:23:ad:a8:71:11:b2:3d:20:5c:
         17:a7:c6:3c:77:94:8b:16:de:7e:66:cc:2e:8b:9f:90:0e:1a:
         4e:82:97:2e:12:dd:b5:44:04:6f:f7:eb:3b:91:d6:01:b8:b2:
         59:c9:38:9b:12:78:5e:f8:36:a4:0b:41:1a:5f:a5:f1:09:2a:
         82:9d:5d:fd:ea:b8:6a:c5:ef:ae:33:f3:2c:c3:74:a4:07:4f:
         34:3c:78:45:15:a0:bf:cf:11:b7:18:94:2c:83:d9:5b:56:f4:
         43:29:ce:3e:24:08:a0:83:94:c9:9f:9e:cf:eb:0b:d0:42:f8:
         dd:4d:19:78:59:22:83:9e:da:35:e2:dc:ee:b8:6b:f2:fa:13:
         15:64:05:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:11 2025 by rpki-client