Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030623a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a343030623a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          OhKAee1MniiqINaVqbV+kH/bB7i4AqxwRFfH6YSqH/8=
Subject key identifier:   48:32:78:76:EA:07:4D:32:41:F1:3D:B3:BA:50:F3:95:BA:13:A8:DF
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       62F248FB27EE8CBAEFF8A9DAE080382F007F1F78
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030623a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:06 +0000
ROA not before:           Thu 24 Aug 2023 18:48:06 +0000
ROA not after:            Thu 22 Aug 2024 18:53:06 +0000
asID:                     61592
IP address blocks:        2804:4c34:400b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f2:48:fb:27:ee:8c:ba:ef:f8:a9:da:e0:80:38:2f:00:7f:1f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:06 2023 GMT
            Not After : Aug 22 18:53:06 2024 GMT
        Subject: CN=48327876EA074D3241F13DB3BA50F395BA13A8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:a5:0f:90:cc:b1:94:53:de:05:4d:d9:67:
                    9a:77:13:63:aa:ac:d0:78:4d:06:c6:d0:8f:8c:51:
                    ac:91:70:d1:27:45:74:1c:3b:4b:ba:8b:5a:08:32:
                    44:b2:57:2d:6d:fd:8b:da:b0:71:0b:01:0b:c9:04:
                    e9:af:79:ad:e7:9b:ca:ed:d3:cf:c6:1f:87:5a:b3:
                    50:3d:5d:7d:ee:86:81:ce:80:72:9b:b8:d0:f2:ee:
                    0d:c1:d0:fc:fa:e2:18:21:7c:32:0c:3d:8e:02:00:
                    45:05:57:3b:af:cb:bb:9f:3b:e7:b6:df:3e:4f:fd:
                    65:e8:05:02:10:8f:8a:c1:cd:52:3d:85:e5:67:e7:
                    8f:35:9d:66:eb:2a:00:5c:17:7b:8c:96:70:38:3d:
                    23:b0:03:07:9c:d0:e3:30:31:33:d6:08:ad:f4:c3:
                    ec:2e:b7:63:11:43:39:09:1f:a7:bd:90:12:87:21:
                    49:82:df:30:6b:82:61:fb:d5:7a:7e:91:19:85:ef:
                    6f:17:a9:24:08:38:db:b5:3a:fc:3e:b6:78:2d:b4:
                    be:f8:e7:4e:82:f7:de:18:34:f0:54:6b:7a:9d:b4:
                    5b:6e:ff:4d:b9:c6:15:85:e0:95:a7:d5:27:dc:c9:
                    0d:92:e7:f6:5a:de:e1:65:32:dd:8c:8a:a0:e3:47:
                    fa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:32:78:76:EA:07:4D:32:41:F1:3D:B3:BA:50:F3:95:BA:13:A8:DF
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030623a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:400b::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:37:f7:ee:3c:30:5d:2a:ff:c3:bf:05:dd:d0:6e:a2:77:79:
         41:69:24:ca:2a:58:48:59:3f:cf:cc:65:ea:d5:f6:7a:ab:6d:
         6f:48:13:fe:65:9e:72:01:27:0c:37:af:f5:f0:09:88:8c:60:
         55:11:ac:05:02:02:72:2e:3e:41:59:bc:47:47:e2:89:f8:1f:
         f7:c8:6e:b5:e0:94:a7:c7:b9:f2:90:69:f3:84:f7:f1:ae:21:
         db:15:6a:35:3f:72:01:78:8b:be:c0:19:eb:db:76:44:01:5c:
         6d:e6:81:f8:37:f2:7f:8d:f0:c4:4e:61:f5:83:6f:ee:31:d9:
         c9:5a:2a:80:7a:ba:30:a2:0e:c7:f3:1d:6f:c9:e9:9c:63:9e:
         38:90:e1:60:25:2d:4c:f8:16:bd:46:8c:6f:51:0a:92:0b:7a:
         32:ef:65:64:20:9c:6c:7f:18:31:27:62:1a:e3:9d:06:d4:e4:
         07:ae:62:29:70:b1:fa:5f:56:db:48:a2:7a:d2:c4:22:6e:99:
         bf:66:40:1b:a5:1c:dd:16:ab:88:06:4b:d5:5b:7d:1e:d4:fc:
         5d:51:8d:ca:b0:89:f3:65:ed:b7:73:09:2d:f1:0b:74:d2:c8:
         f9:02:e7:41:56:d7:b0:02:cd:c9:24:91:da:54:7b:d4:3e:ac:
         96:0c:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:47 2025 by rpki-client