Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a383030303a3a2f33332d3333203d3e20323636353530.roa
File:                     323830343a336462633a383030303a3a2f33332d3333203d3e20323636353530.roa (raw, json)
Hash identifier:          cKLWr/fkjCnwpunfiQgYvAJY7a+KuVq0aNTdNkJ1tZQ=
Subject key identifier:   00:EE:4B:BE:DA:63:99:EC:37:AF:6A:94:B0:B3:82:70:52:08:48:13
Certificate issuer:       /CN=6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30
Certificate serial:       50186A0A89EF30D875ABAC2353A804BC869EDDF5
Authority key identifier: 6E:A9:F6:7C:0E:EB:67:E4:E0:B2:9F:78:F1:1A:B5:CB:1D:DB:4A:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a383030303a3a2f33332d3333203d3e20323636353530.roa
Signing time:             Wed 14 Jul 2021 18:07:04 +0000
ROA not before:           Wed 14 Jul 2021 18:02:04 +0000
ROA not after:            Wed 13 Jul 2022 18:07:04 +0000
asID:                     266550
IP address blocks:        2804:3dbc:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:18:6a:0a:89:ef:30:d8:75:ab:ac:23:53:a8:04:bc:86:9e:dd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30
        Validity
            Not Before: Jul 14 18:02:04 2021 GMT
            Not After : Jul 13 18:07:04 2022 GMT
        Subject: CN=3082010A0282010100D99E3F3B39A1D0761233B2BDA3FF6158053718F3D93CA9E1B3CF529DA106C9EA651A49702C235BAC80CD8A12A2306C56786E614B8CF0804CF20571D46D6A075DC05B5CFD78E28EF45397205115D3DB33511857805C99BA7F03339277F0CDF80826A3C7660777BC2D5685A5ECD16F24FDF18F44A24E126F48BE9BCD023E9232C70EF47F409D7EC4CA314646C472D91B1B235983139CDEE96027B7F690AB3808428F22E91F2638EA6EF94727B17CE85C82389765673EB26EE687A72D0246A41E205EFD7A3D7F39F4827402E7436EA2F8642834FA64659A823A65B619003D893D632EEA4C042620F0246D6B3387E2E1CDD25D489883DE129883CCF8C660BC2AA6090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:3f:3b:39:a1:d0:76:12:33:b2:bd:a3:ff:
                    61:58:05:37:18:f3:d9:3c:a9:e1:b3:cf:52:9d:a1:
                    06:c9:ea:65:1a:49:70:2c:23:5b:ac:80:cd:8a:12:
                    a2:30:6c:56:78:6e:61:4b:8c:f0:80:4c:f2:05:71:
                    d4:6d:6a:07:5d:c0:5b:5c:fd:78:e2:8e:f4:53:97:
                    20:51:15:d3:db:33:51:18:57:80:5c:99:ba:7f:03:
                    33:92:77:f0:cd:f8:08:26:a3:c7:66:07:77:bc:2d:
                    56:85:a5:ec:d1:6f:24:fd:f1:8f:44:a2:4e:12:6f:
                    48:be:9b:cd:02:3e:92:32:c7:0e:f4:7f:40:9d:7e:
                    c4:ca:31:46:46:c4:72:d9:1b:1b:23:59:83:13:9c:
                    de:e9:60:27:b7:f6:90:ab:38:08:42:8f:22:e9:1f:
                    26:38:ea:6e:f9:47:27:b1:7c:e8:5c:82:38:97:65:
                    67:3e:b2:6e:e6:87:a7:2d:02:46:a4:1e:20:5e:fd:
                    7a:3d:7f:39:f4:82:74:02:e7:43:6e:a2:f8:64:28:
                    34:fa:64:65:9a:82:3a:65:b6:19:00:3d:89:3d:63:
                    2e:ea:4c:04:26:20:f0:24:6d:6b:33:87:e2:e1:cd:
                    d2:5d:48:98:83:de:12:98:83:cc:f8:c6:60:bc:2a:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EE:4B:BE:DA:63:99:EC:37:AF:6A:94:B0:B3:82:70:52:08:48:13
            X509v3 Authority Key Identifier:
                keyid:6E:A9:F6:7C:0E:EB:67:E4:E0:B2:9F:78:F1:1A:B5:CB:1D:DB:4A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6EA9F67C0EEB67E4E0B29F78F11AB5CB1DDB4A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/323830343a336462633a383030303a3a2f33332d3333203d3e20323636353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dbc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9f:02:ef:a2:d2:9a:a4:71:b5:4c:9b:11:57:3f:0e:c6:76:1d:
         04:f0:1f:5e:c2:c4:f2:34:00:d2:de:06:91:c0:9d:61:02:f1:
         6a:31:82:e5:fc:20:05:8a:09:ce:fa:bd:0e:fe:59:3b:7a:64:
         41:0e:a1:a5:95:e8:8a:d7:f3:f1:a4:fd:d7:49:71:0a:7a:44:
         e8:62:f5:65:a1:00:f5:c3:4d:d9:a2:8a:4f:86:84:19:bf:5a:
         fd:0e:f0:9a:e7:4b:3b:4f:94:d8:55:20:66:16:a4:8f:5e:d1:
         07:8c:fb:9b:da:b8:fe:34:dd:44:8e:a8:9b:ed:eb:37:20:68:
         de:b6:29:42:8d:37:36:d6:13:ce:f2:0c:30:59:64:df:c3:b6:
         3a:c4:70:75:52:61:91:8f:2b:17:ec:7c:88:e8:8b:cf:4c:53:
         05:c2:c4:dd:12:fa:59:1f:cf:ba:b0:7a:11:79:b3:15:53:b3:
         2c:7d:24:33:9e:cb:40:6d:48:a5:c1:49:8f:07:e5:a8:18:f4:
         32:2a:14:19:66:6c:d5:d4:ad:92:a7:8d:be:ae:82:87:ae:65:
         7e:c5:f1:b0:6b:c0:42:be:47:95:2d:d1:d5:e7:1b:fb:06:d9:
         4b:20:27:24:d3:6e:dc:33:a6:be:b5:5e:e9:2b:c2:a5:36:32:
         09:c3:ac:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:16 2025 by rpki-client