Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030373a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633030373a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          MMZ8IIgQI9lydQd55zodpUG8HqdcbNhDH/Qvhezigdw=
Subject key identifier:   C0:C8:00:58:C3:25:6B:53:1B:F0:40:39:E9:0E:6C:EC:85:EC:6E:ED
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       08629629BF4C679C3EDDC8CF48BFC0B6695E48C9
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030373a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:58 +0000
ROA not before:           Thu 24 Aug 2023 18:47:58 +0000
ROA not after:            Thu 22 Aug 2024 18:52:58 +0000
asID:                     61592
IP address blocks:        2804:4c34:c007::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:62:96:29:bf:4c:67:9c:3e:dd:c8:cf:48:bf:c0:b6:69:5e:48:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:58 2023 GMT
            Not After : Aug 22 18:52:58 2024 GMT
        Subject: CN=C0C80058C3256B531BF04039E90E6CEC85EC6EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6f:1a:b6:52:84:0e:5c:e6:c9:cb:bb:9d:6c:
                    ac:ca:a6:48:a5:17:1c:17:33:cd:00:52:dd:c4:02:
                    37:04:f5:40:b3:c2:7d:b4:10:9f:4b:c2:4b:06:2d:
                    3a:b0:de:dd:36:0e:1d:d5:2e:ff:d6:97:ab:ac:0e:
                    72:55:07:66:89:db:8a:68:22:a0:54:9f:e5:e2:19:
                    b3:f2:da:df:75:bc:97:06:30:3a:0d:26:bd:4c:3d:
                    5f:82:1b:8c:7f:81:92:7e:e5:89:0b:fb:26:30:dd:
                    26:60:a9:93:c7:ab:67:50:e7:33:bf:48:72:82:51:
                    31:2b:b3:b7:8b:47:66:09:c3:d6:fa:8d:66:7c:d6:
                    6a:90:78:7d:8f:53:fe:00:fd:8e:38:58:d5:61:e2:
                    79:03:bb:6b:4d:8f:16:5b:5a:81:42:fe:fe:c5:ab:
                    a8:93:bb:39:6c:7c:67:6c:42:ba:8a:fb:7f:4b:11:
                    0e:ff:33:1f:f8:83:7f:b2:31:24:84:02:20:7e:54:
                    35:6b:e8:3e:3d:d4:9e:bc:bd:5e:6d:40:23:a0:7b:
                    c5:68:c4:de:eb:6e:49:37:e5:2d:0c:e0:91:a9:94:
                    5e:34:eb:32:6a:2f:38:4a:ea:54:1d:70:91:fc:14:
                    b5:c8:b5:f4:70:e8:b7:f8:78:1a:62:06:7f:62:fe:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C8:00:58:C3:25:6B:53:1B:F0:40:39:E9:0E:6C:EC:85:EC:6E:ED
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030373a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c007::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:66:34:4b:a3:be:bf:3e:07:6a:9b:b0:52:14:e7:63:f7:
         e9:6c:fe:7b:74:50:4a:12:83:a2:09:6f:35:eb:ea:ab:6e:a0:
         22:5f:63:85:07:65:23:00:bd:ce:55:6c:fc:cd:b9:67:05:be:
         dd:fe:45:55:60:7d:aa:b4:53:81:6d:ba:0a:66:4a:7f:87:a5:
         40:8f:69:0c:ed:cb:d4:9e:ca:db:f6:cd:06:9f:76:4c:69:4c:
         76:b9:5e:cd:c0:f7:c9:6a:2c:0a:2c:cc:cc:10:8b:66:e4:67:
         ee:51:3f:0c:e3:39:91:5a:92:61:9b:a3:84:77:2b:d9:c5:80:
         db:fd:65:52:88:0c:98:e1:44:22:f8:dc:af:af:92:88:40:e2:
         7b:7f:8a:78:d0:49:c5:f5:48:e0:2c:82:42:9d:d7:5e:25:c1:
         12:f0:4b:07:78:ae:03:1c:4a:a2:03:50:8e:30:0c:fc:fc:18:
         3c:e7:97:89:49:33:f1:8c:b6:26:3f:f2:78:dd:9e:fe:a1:63:
         a8:c4:60:0f:16:b9:d6:0d:c3:18:91:74:34:13:cb:7f:69:98:
         15:f0:41:45:34:35:77:c3:92:79:a9:0b:79:67:4b:be:3c:b4:
         59:8d:3b:8c:dc:4a:54:1f:89:63:2d:11:3f:41:d4:60:5b:81:
         6c:19:6f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:30:27 2025 by rpki-client