Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030303a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a343030303a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          1wzBZxtHw9tSx4hnxRjlzSWfJ00hRGpLhGIfYriW7OY=
Subject key identifier:   DA:C5:FE:A3:E5:0A:5F:A3:11:81:D5:96:5F:5C:57:CF:B4:4D:4B:38
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       1CF6CC0B9D310F51D57B7681996F6CC5FCE5E75F
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030303a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:57 +0000
ROA not before:           Thu 24 Aug 2023 18:47:57 +0000
ROA not after:            Thu 22 Aug 2024 18:52:57 +0000
asID:                     61592
IP address blocks:        2804:4c34:4000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f6:cc:0b:9d:31:0f:51:d5:7b:76:81:99:6f:6c:c5:fc:e5:e7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:57 2023 GMT
            Not After : Aug 22 18:52:57 2024 GMT
        Subject: CN=DAC5FEA3E50A5FA31181D5965F5C57CFB44D4B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:da:73:29:a0:ef:c7:4c:79:ef:f3:48:29:7c:
                    f3:ae:60:1c:f5:05:a7:3d:59:09:26:35:69:1a:1a:
                    5d:ac:2d:0a:4e:b8:84:42:fd:09:68:8b:58:97:90:
                    87:02:d4:81:78:a7:1a:33:31:b3:42:c2:0c:49:b3:
                    25:a7:4d:29:ee:d1:92:e1:9a:13:4e:69:3c:f9:b6:
                    8d:50:a7:72:ac:c6:41:66:f1:e8:68:34:10:dc:9e:
                    c2:9c:4b:e6:37:f8:e8:42:0c:1b:4b:cf:58:9e:69:
                    5b:87:6d:82:f3:05:79:f0:fd:0c:17:0c:29:f2:99:
                    d0:40:9c:a6:00:ed:44:fd:27:e6:c2:28:ec:9f:00:
                    3a:18:eb:56:12:32:a9:01:9f:5f:c5:30:e2:40:fb:
                    17:e6:07:8d:f9:09:52:87:4b:fc:a4:b6:20:05:9f:
                    55:5b:78:7a:f1:da:a2:65:e4:fa:50:4f:5a:c3:36:
                    a3:62:22:12:26:af:f7:40:40:96:63:93:25:17:05:
                    f5:0f:bb:7c:f0:94:fb:77:4f:dd:fd:fb:b5:18:c9:
                    10:33:72:6c:7f:8e:e4:8e:b4:4c:aa:fe:c2:a5:fd:
                    11:7e:93:e3:6d:22:3e:a3:15:7c:89:8a:37:62:17:
                    60:9c:00:e6:54:b9:6d:93:e0:54:60:ab:94:d6:a8:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C5:FE:A3:E5:0A:5F:A3:11:81:D5:96:5F:5C:57:CF:B4:4D:4B:38
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030303a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:60:1e:6f:df:dc:52:7e:3b:6b:1f:3d:c8:1e:40:5e:7a:3e:
         7a:ab:6e:7d:51:f8:0d:54:da:cd:6c:8c:f4:c2:19:e0:c6:76:
         70:53:b7:e7:fe:d5:fb:5e:7d:96:92:47:fd:d7:39:11:a1:c7:
         bc:36:0e:bd:8f:06:ba:54:f3:75:3e:fc:61:6c:cf:a0:17:25:
         87:fa:00:92:d5:cf:ee:7d:03:0c:13:a1:1e:46:36:15:0e:1c:
         46:84:cb:54:99:33:28:0b:16:1d:98:11:29:81:49:ab:2e:e1:
         30:17:ba:45:d1:82:8d:28:a8:f7:95:81:1c:7c:04:46:34:bc:
         ae:bb:c7:72:47:3f:6b:6f:5d:26:e3:5f:fb:16:0e:7e:fb:a3:
         99:12:40:04:a6:e6:9f:c4:2c:3d:52:1c:d4:67:40:5e:82:b1:
         bd:33:8d:5b:6a:ab:82:52:e7:d4:a8:27:2f:4b:f6:a6:19:0c:
         ee:c8:33:08:f1:29:68:8e:cc:29:e8:36:87:aa:65:cd:80:d5:
         7f:07:c3:2d:77:2f:a3:51:fe:2f:b8:02:c4:7f:1b:ea:0c:47:
         0f:1e:6e:e1:df:d0:1d:00:4f:f0:cf:ec:1c:9e:6c:3b:40:fd:
         a3:ae:c4:7d:41:5d:c0:5a:1d:80:24:4c:6e:b7:fa:86:e0:8f:
         18:35:c0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:50 2025 by rpki-client