Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030383a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a343030383a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          1Fesvq0m6jp7VChbCg0PiX4RXKilBDnZGYQOb+2THZk=
Subject key identifier:   A8:B3:98:0A:7C:19:24:CC:B8:B2:6A:98:8C:C8:D0:13:95:6D:85:62
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       159E1148BD1FBE14EBDA877C8FBC5A7003EE2E93
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030383a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:03 +0000
ROA not before:           Thu 24 Aug 2023 18:48:03 +0000
ROA not after:            Thu 22 Aug 2024 18:53:03 +0000
asID:                     61592
IP address blocks:        2804:4c34:4008::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9e:11:48:bd:1f:be:14:eb:da:87:7c:8f:bc:5a:70:03:ee:2e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:03 2023 GMT
            Not After : Aug 22 18:53:03 2024 GMT
        Subject: CN=A8B3980A7C1924CCB8B26A988CC8D013956D8562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:5b:b3:6e:42:a4:86:44:a3:38:4c:6c:63:
                    73:89:7a:87:6a:73:05:e8:bd:2a:0b:09:43:da:2b:
                    4c:ca:ec:ed:35:84:f4:98:bb:81:a2:71:d2:7c:9d:
                    26:a9:03:b0:8e:6f:e5:4e:76:fb:64:40:ec:92:27:
                    19:86:9c:ed:60:87:ee:92:ce:a9:ae:52:11:83:d0:
                    34:ee:9b:e9:b6:60:4b:11:8f:9a:19:86:fc:e9:a4:
                    f1:1a:02:50:b5:30:52:70:6d:21:37:29:83:74:a1:
                    f4:c1:3e:35:c0:ce:05:a7:7d:60:f2:8b:0d:10:b2:
                    95:4a:d6:a6:21:9f:41:18:0a:25:e4:4a:5b:97:4a:
                    58:de:69:21:a7:d2:e5:c7:69:31:1b:ce:75:4a:ba:
                    b6:6b:9b:48:8d:ca:40:aa:4a:89:d6:58:fe:90:8e:
                    35:a2:2e:9f:da:7c:f6:84:28:83:5f:6a:81:e5:44:
                    72:84:42:5d:f1:23:9b:ef:30:1f:18:0e:36:e1:f9:
                    30:3b:0b:d1:cb:63:4e:f0:fb:d5:54:23:65:9c:dd:
                    9d:d3:fd:46:17:d0:7c:6a:e1:68:5a:89:ab:b3:c8:
                    4f:f3:52:88:31:3e:36:eb:cb:14:51:6c:17:f4:0f:
                    1a:15:03:f1:92:74:b3:5d:59:93:4f:82:f2:f8:81:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B3:98:0A:7C:19:24:CC:B8:B2:6A:98:8C:C8:D0:13:95:6D:85:62
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030383a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:4008::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:49:90:2b:cb:cc:e5:c5:e2:4b:e3:95:88:73:98:c6:30:aa:
         af:af:59:49:58:e8:af:22:c8:c1:af:e5:bd:e5:ca:bd:30:e8:
         7c:b2:df:1d:6d:82:ca:c2:9a:71:4c:19:a5:bc:29:a0:bb:2a:
         c1:bc:6f:00:fa:29:02:bf:a9:91:ec:da:10:93:41:62:8f:02:
         45:09:d2:ee:91:2d:f7:90:50:5e:f8:fb:91:fb:e8:a9:9b:bd:
         55:54:61:04:5a:56:c5:f0:ec:0f:53:c8:5d:48:1a:ba:68:34:
         86:00:e3:1d:fb:69:cb:d5:aa:7f:1d:ae:da:5e:05:1f:c1:91:
         80:c8:c5:a5:5f:52:08:d6:c1:0a:61:05:58:29:42:46:6e:46:
         c5:74:4c:b7:1f:55:d2:33:f6:b7:8d:ef:fc:2c:6f:32:bb:da:
         02:0e:3d:36:80:f3:17:a0:39:ed:22:fb:5b:1c:3d:70:5f:58:
         57:6c:2c:1b:0d:62:20:40:07:58:2f:cc:e2:b9:71:ff:54:49:
         04:e5:99:c9:13:42:dc:17:f1:ba:79:10:f4:29:eb:5c:54:71:
         73:7c:eb:ee:4d:4e:57:07:ed:21:43:89:5e:f0:06:cc:40:65:
         ff:e3:d3:31:e2:f0:65:0e:33:e8:06:42:5b:54:12:aa:d4:c6:
         25:2c:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:33:24 2025 by rpki-client