Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a633030303a3a2f33342d3334203d3e20323730323735.roa
File:                     323830343a363938343a633030303a3a2f33342d3334203d3e20323730323735.roa (raw, json)
Hash identifier:          rbzi+eeffZfsZfGcx5QEASbaxS9Kzc+DcgPqBiLvR1w=
Subject key identifier:   8C:5F:DC:79:C9:96:1B:83:E5:08:DA:87:28:B1:04:EB:42:DB:95:00
Certificate issuer:       /CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
Certificate serial:       6D8DD9D370FB76FD90A6E3B2DD912A90BDD41A5C
Authority key identifier: AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a633030303a3a2f33342d3334203d3e20323730323735.roa
Signing time:             Mon 26 Jun 2023 16:16:01 +0000
ROA not before:           Mon 26 Jun 2023 16:11:01 +0000
ROA not after:            Mon 24 Jun 2024 16:16:01 +0000
asID:                     270275
IP address blocks:        2804:6984:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8d:d9:d3:70:fb:76:fd:90:a6:e3:b2:dd:91:2a:90:bd:d4:1a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
        Validity
            Not Before: Jun 26 16:11:01 2023 GMT
            Not After : Jun 24 16:16:01 2024 GMT
        Subject: CN=8C5FDC79C9961B83E508DA8728B104EB42DB9500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cb:3b:78:5e:ea:71:7a:b9:94:a0:f1:4b:4f:
                    01:99:37:a1:77:e0:47:1d:4c:d0:bc:89:fb:58:96:
                    ac:d1:3d:d2:58:1b:4b:cb:cf:46:41:9e:aa:14:a6:
                    3b:af:ca:28:c5:82:c4:f0:f0:38:49:f7:9d:e9:71:
                    c2:ee:b6:76:f1:3d:ba:7f:27:a0:7c:65:49:9d:7c:
                    e0:ba:45:e3:e6:e0:43:82:ee:75:e6:a6:db:aa:e8:
                    62:2e:47:ef:c7:9b:a0:91:1f:d9:c2:e0:72:cc:92:
                    d8:93:cc:9c:53:cd:47:a3:79:56:58:3f:b3:18:bd:
                    3d:3d:93:bd:67:d3:75:21:24:91:d6:32:5e:c6:e9:
                    0a:29:fe:c7:53:c6:8d:72:df:dd:39:c1:eb:c0:05:
                    29:64:e8:82:66:76:d0:87:1f:d0:55:d1:f2:50:ca:
                    aa:3c:1c:4f:4e:97:04:9d:2f:80:df:92:c8:ed:44:
                    ab:56:ae:74:67:fb:98:ed:ee:b4:03:34:ca:22:84:
                    32:3e:f6:82:9d:1f:88:02:72:0f:cc:6d:a2:9c:93:
                    bd:da:55:66:2a:a3:f7:18:cf:ba:33:87:31:9a:d6:
                    ab:47:53:a7:b2:4e:e3:0a:6e:0b:6e:95:41:83:92:
                    da:f5:fb:63:c7:08:1e:ee:bd:49:a2:5d:3c:b7:d8:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5F:DC:79:C9:96:1B:83:E5:08:DA:87:28:B1:04:EB:42:DB:95:00
            X509v3 Authority Key Identifier:
                keyid:AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/323830343a363938343a633030303a3a2f33342d3334203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d6:91:d3:37:67:63:ea:eb:0e:a6:10:ec:65:81:ea:31:b5:0d:
         ff:3e:16:73:f6:a8:67:e4:de:46:b5:16:d6:57:b8:ec:af:2c:
         cc:10:34:96:41:cc:2d:2b:55:22:f8:78:ac:c5:2a:bd:7b:ff:
         a5:b2:85:4e:88:a7:53:a5:3b:0a:34:33:50:fe:ed:95:74:b7:
         d3:4d:4b:c7:25:c6:4e:af:f6:91:12:95:15:34:b5:45:1e:45:
         f2:b3:e7:59:a2:32:9e:57:2b:93:fb:5e:28:ba:2c:cb:31:24:
         74:a3:29:e1:cb:9c:3f:82:2c:d7:99:61:70:d5:3a:d7:85:b6:
         0e:5c:1c:3e:4d:af:bb:10:da:19:22:dd:d6:c3:73:b7:d4:7d:
         02:c5:cb:7a:62:ab:b0:22:3d:08:1a:0e:12:0d:bc:2a:ac:53:
         55:b3:73:da:4c:ce:5e:48:b2:5c:59:fd:98:79:cd:31:8f:53:
         7e:c7:fd:77:5d:1d:31:64:de:c6:2e:4a:d4:ca:66:b9:79:fe:
         87:eb:fb:01:02:c3:f1:dc:e3:bf:cb:5a:26:a5:70:11:f1:a3:
         8b:d8:96:3f:c0:1a:04:75:30:6a:c6:10:fe:c6:d1:55:99:58:
         22:0f:8a:bd:76:c0:68:c6:7f:dd:64:06:8c:98:dd:a4:80:79:
         af:58:7a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:11:44 2025 by rpki-client