Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343031343a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a343031343a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          jskqV47fZ/JX2uAhIZ2WvNi/yfYXicY9BJAz795xo7A=
Subject key identifier:   55:53:EF:91:25:80:87:72:69:1A:9D:0E:88:73:3F:14:73:00:FC:EC
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       43016FDF22A5D26ECCAC56E36F28738D07E6B85C
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343031343a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:08 +0000
ROA not before:           Thu 24 Aug 2023 18:48:08 +0000
ROA not after:            Thu 22 Aug 2024 18:53:08 +0000
asID:                     61592
IP address blocks:        2804:4c34:4014::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:01:6f:df:22:a5:d2:6e:cc:ac:56:e3:6f:28:73:8d:07:e6:b8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:08 2023 GMT
            Not After : Aug 22 18:53:08 2024 GMT
        Subject: CN=5553EF9125808772691A9D0E88733F147300FCEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:05:34:4d:5f:cd:06:17:88:62:f4:0b:75:
                    d2:1e:32:12:2a:de:3f:a6:c0:d9:ee:b4:a9:89:13:
                    1b:8c:e2:13:cb:59:24:f8:8b:01:af:29:8b:9e:c1:
                    40:ff:76:2d:db:c1:d5:18:d5:bb:c7:5c:06:ff:e7:
                    78:f0:bb:1f:32:6d:70:f1:11:0c:4b:8f:40:50:44:
                    2c:97:bb:6d:f9:43:68:31:39:c3:b4:b7:15:51:f2:
                    9e:5e:89:64:0d:a2:4c:f4:09:2f:21:fb:36:66:58:
                    74:4a:e1:20:13:15:f9:55:7a:3e:c8:b6:ad:65:02:
                    17:69:68:54:d5:43:15:14:19:21:86:d9:8d:49:00:
                    a0:64:4a:57:9e:a0:7d:40:c6:ec:42:c2:81:7f:59:
                    c1:1a:4a:7e:bd:13:42:b8:91:55:16:62:b3:27:3e:
                    2d:2c:70:64:d0:79:19:33:f2:a8:0a:e4:a6:9f:41:
                    af:aa:9a:40:13:4e:b2:15:dc:3e:1f:44:e8:a6:e7:
                    0f:51:97:e8:02:b4:56:90:5c:9b:b1:b6:d2:f4:24:
                    b7:a4:41:a2:63:d6:c0:65:4c:98:cd:e9:be:8d:a9:
                    6e:67:e6:26:2a:ae:2d:62:93:97:9d:d0:1c:d3:28:
                    87:c5:a7:43:c0:d7:a3:0c:f4:d3:c1:0e:68:44:b1:
                    35:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:53:EF:91:25:80:87:72:69:1A:9D:0E:88:73:3F:14:73:00:FC:EC
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343031343a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:4014::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:dc:ab:c4:26:4f:c8:ce:a4:e1:81:fd:d8:b0:20:07:a9:1e:
         7b:d4:70:05:fd:ab:8d:35:9b:1f:a9:0c:cc:d7:0e:26:25:f6:
         c6:11:75:bc:d7:1a:50:32:34:bc:79:b1:7a:d0:a6:9f:77:c2:
         d5:da:f4:00:a8:41:79:4b:b8:44:86:05:6b:e1:c4:c8:5d:a2:
         ac:bc:05:46:8f:8b:51:ef:77:e9:10:95:cf:bc:b9:ef:36:2e:
         75:a0:91:ed:be:30:64:10:65:ee:ac:79:26:02:d4:ee:82:13:
         83:f5:33:9c:b1:a3:6b:7f:1d:17:85:06:b7:7b:9e:0a:f5:ac:
         51:53:53:53:7b:c7:04:e7:3f:15:c6:e5:60:b9:4b:4a:dc:bf:
         5e:54:11:fd:f4:26:e3:44:47:ab:39:3e:8e:19:6c:59:54:18:
         4b:33:14:70:f1:e5:b6:a8:03:d5:8e:a2:86:24:26:1d:10:51:
         f3:1c:38:2c:bc:78:4e:ac:b1:db:d3:7d:ef:2a:ea:6e:ef:7d:
         f8:e9:59:db:8b:fe:2a:67:f2:d7:cf:dc:23:9d:eb:39:ce:f1:
         cd:72:f1:1e:59:63:70:42:c0:10:7e:24:80:e1:0b:53:86:a6:
         d5:57:5e:bf:97:1a:65:55:72:3e:b7:33:b0:5c:75:c2:ee:01:
         64:58:55:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:32 2025 by rpki-client