Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a383030303a3a2f33342d3334203d3e20323730353834.roa
File:                     323830343a366534303a383030303a3a2f33342d3334203d3e20323730353834.roa (raw, json)
Hash identifier:          vIS3t1XpUujp+rIHjpDHirxoNf8Mjnqz13NpfrGC1nc=
Subject key identifier:   53:7A:1D:DB:D0:07:38:B4:77:63:8E:75:5A:A1:12:CE:CA:FC:A7:19
Certificate issuer:       /CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
Certificate serial:       5A8DD68619C83A0B2B4B54D6C5D5465AD83E71DB
Authority key identifier: 69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a383030303a3a2f33342d3334203d3e20323730353834.roa
Signing time:             Fri 31 Mar 2023 16:33:02 +0000
ROA not before:           Fri 31 Mar 2023 16:28:02 +0000
ROA not after:            Fri 29 Mar 2024 16:33:02 +0000
asID:                     270584
IP address blocks:        2804:6e40:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8d:d6:86:19:c8:3a:0b:2b:4b:54:d6:c5:d5:46:5a:d8:3e:71:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Validity
            Not Before: Mar 31 16:28:02 2023 GMT
            Not After : Mar 29 16:33:02 2024 GMT
        Subject: CN=537A1DDBD00738B477638E755AA112CECAFCA719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e5:7f:77:08:12:cb:57:eb:74:be:9e:2a:b6:
                    06:43:29:71:30:30:57:ba:bc:48:0f:55:99:14:d8:
                    4f:75:33:fc:85:d2:55:a8:0c:50:bc:98:93:4d:6c:
                    48:77:fe:b3:1c:aa:d3:eb:69:e9:11:ee:15:07:2a:
                    b2:29:25:28:ec:dd:62:23:60:c4:39:e0:6d:e4:66:
                    e9:1c:6d:65:0e:91:f0:13:67:6e:1f:05:d5:24:71:
                    32:66:c3:cd:88:78:dd:19:09:1e:5c:41:82:05:2c:
                    89:ae:d3:ae:1e:17:17:18:40:1b:1c:2e:ee:20:cd:
                    40:63:88:6f:15:f9:67:8d:f9:c3:9f:e4:5b:19:08:
                    6b:f4:f0:c0:eb:7e:9c:1d:12:32:08:cd:a8:e9:d3:
                    3f:2f:6f:9d:5b:af:3e:39:63:05:c7:b6:f9:67:27:
                    46:17:18:05:50:35:a4:3c:2c:52:55:c8:57:1e:54:
                    41:47:30:78:01:52:90:27:5a:83:d2:b6:e2:37:62:
                    a3:8c:24:06:bb:4d:fe:2b:4f:a4:a6:c4:71:ae:65:
                    84:5b:ac:03:df:71:14:88:20:05:e3:84:a3:0f:63:
                    13:9a:c4:3e:42:8c:f5:e1:89:b5:f8:00:fa:ad:56:
                    a0:21:6f:11:28:79:1f:80:b5:96:00:fd:ed:05:3f:
                    46:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7A:1D:DB:D0:07:38:B4:77:63:8E:75:5A:A1:12:CE:CA:FC:A7:19
            X509v3 Authority Key Identifier:
                keyid:69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a383030303a3a2f33342d3334203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e40:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ca:38:56:11:18:43:3d:e6:c2:0d:25:53:9b:42:19:9e:a7:d2:
         0f:7c:35:74:92:51:c9:bd:6f:63:e3:b5:e1:50:20:16:e7:7f:
         5d:0c:e0:7c:1b:33:48:35:a9:d8:11:e4:48:39:64:ed:38:e5:
         3c:89:4c:ce:fe:03:17:61:bc:6f:a6:c1:8e:c7:a5:2a:33:d4:
         0f:ec:b6:3a:c8:b2:f0:57:ce:19:fa:59:bf:bc:bd:ce:41:13:
         3b:60:17:ff:01:50:03:d7:1c:56:32:65:63:ea:15:f9:4d:23:
         d2:8b:e9:17:13:73:79:ec:b7:9c:0a:ee:78:e0:93:79:09:2e:
         24:ae:08:0b:2d:62:bd:5a:e0:22:63:80:62:f0:c0:99:41:c8:
         61:cf:5e:fb:59:73:53:4d:95:b9:15:ea:23:4c:b4:3d:82:c3:
         f1:2d:99:20:75:e7:d5:19:23:6b:d0:1d:b6:c7:1c:0a:29:a3:
         65:52:26:da:51:b6:e9:6f:52:67:c8:61:af:e1:b5:9d:2e:8b:
         14:a6:85:94:e2:17:bc:a0:87:ec:96:e6:64:88:ee:76:d3:26:
         a9:57:27:58:d6:e1:ed:9a:86:5d:9b:3c:c2:84:82:1e:75:41:
         51:4e:2c:1b:da:57:a4:22:3c:3d:8a:2b:30:ed:a0:59:96:49:
         ab:57:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:20:50 2025 by rpki-client