Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a3a2f33352d3335203d3e20323730353834.roa
File:                     323830343a366534303a3a2f33352d3335203d3e20323730353834.roa (raw, json)
Hash identifier:          V9949dawGnT+DdzwWUCqyK9RIsLxi/Lt64KqhcNmNug=
Subject key identifier:   3C:04:16:11:8F:CC:F5:8A:B8:18:07:7E:76:26:1B:AA:3A:9E:5F:41
Certificate issuer:       /CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
Certificate serial:       2F7D37AF93BC2DAC05DC85E92DE29999E79A5882
Authority key identifier: 69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a3a2f33352d3335203d3e20323730353834.roa
Signing time:             Fri 31 Mar 2023 16:32:42 +0000
ROA not before:           Fri 31 Mar 2023 16:27:42 +0000
ROA not after:            Fri 29 Mar 2024 16:32:42 +0000
asID:                     270584
IP address blocks:        2804:6e40::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7d:37:af:93:bc:2d:ac:05:dc:85:e9:2d:e2:99:99:e7:9a:58:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Validity
            Not Before: Mar 31 16:27:42 2023 GMT
            Not After : Mar 29 16:32:42 2024 GMT
        Subject: CN=3C0416118FCCF58AB818077E76261BAA3A9E5F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:3e:83:5f:cf:17:5d:aa:1c:5e:87:f8:b1:
                    84:4f:49:b1:57:a6:4b:b6:09:db:85:39:7d:4c:62:
                    18:af:17:14:62:d5:8d:81:9a:1c:c2:5d:3b:64:d5:
                    d3:e1:9d:24:f6:87:89:49:f8:f0:7b:37:4a:f4:43:
                    de:8b:46:09:98:72:68:46:a3:8a:8c:11:d9:40:ab:
                    21:ba:58:ec:72:e8:a4:bf:ee:c5:5d:f9:36:0d:74:
                    cd:0c:03:a6:c6:fd:00:05:45:9e:f5:80:a3:a1:d5:
                    bc:90:3b:ea:28:3d:ef:fe:15:b9:4f:ef:cf:8d:fd:
                    ff:f8:c6:d4:4c:1b:dc:e7:f5:41:af:aa:96:80:c4:
                    d2:00:26:ab:bb:04:77:24:53:60:00:03:5c:0b:de:
                    13:5b:f4:e9:3f:70:07:26:75:b4:82:8c:b5:f2:8f:
                    92:e3:ef:16:3d:ca:09:64:85:38:4a:55:f0:03:8b:
                    d2:22:06:54:d8:7a:a6:9f:71:93:c9:f3:6a:3d:82:
                    ae:8b:a9:a7:ec:bb:3c:40:96:ae:8a:c3:ee:59:b9:
                    17:70:40:28:d6:90:75:f9:1f:1f:6e:4e:1f:77:6b:
                    12:9a:ac:b6:b0:17:0a:87:c3:d8:eb:fe:de:5d:63:
                    9f:ad:14:7c:f9:9f:fb:6b:78:e7:8c:d9:68:a2:fe:
                    e9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:04:16:11:8F:CC:F5:8A:B8:18:07:7E:76:26:1B:AA:3A:9E:5F:41
            X509v3 Authority Key Identifier:
                keyid:69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/323830343a366534303a3a2f33352d3335203d3e20323730353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e40::/35

    Signature Algorithm: sha256WithRSAEncryption
         75:94:94:e5:19:03:53:35:fa:e2:b2:16:83:6b:bc:3c:c0:f7:
         f6:a3:a6:e1:ba:20:d4:a9:c3:04:a0:30:e6:04:27:38:77:c2:
         43:c5:a3:45:d5:00:6a:64:e5:d6:ec:b6:39:a2:d6:ca:b9:7f:
         a1:eb:34:9b:bc:5c:4d:e1:b9:ae:0b:2b:7f:e6:be:cb:83:fd:
         93:72:b8:20:60:ec:20:cc:f9:a0:5a:ec:ed:ba:e1:3a:4a:9b:
         8d:16:46:3b:7b:98:44:e3:d5:8d:da:1b:99:29:a9:44:e1:a9:
         eb:d4:21:be:9e:a5:82:c7:c9:cb:e1:21:b4:d6:00:47:08:87:
         e8:db:01:04:7c:a4:16:d2:fd:39:1c:ba:35:bc:89:d6:1e:68:
         28:a1:4b:be:42:5f:e4:96:cc:59:9a:c0:c2:3b:d1:54:f2:99:
         33:b4:d2:57:4d:07:58:42:d0:d3:7e:2b:17:ed:fc:e5:e8:c5:
         2e:16:e1:12:dc:42:8b:f4:b7:b4:75:39:59:3e:5b:2f:d3:1a:
         30:a5:34:af:1c:3e:77:36:b6:b2:57:50:33:9b:03:9d:64:52:
         1c:51:9a:9c:3c:61:3c:a2:bf:f5:b2:fe:cd:94:04:9b:52:46:
         79:f5:1f:f3:a9:50:eb:d6:c1:6d:73:06:67:87:13:d7:50:47:
         67:9f:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:41:05 2025 by rpki-client