Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032313a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633032313a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          yEU00/M8xe75LKvp6LKq6r9L82GEZn6wEc8uyewxI20=
Subject key identifier:   60:64:77:5D:98:7F:BA:DC:26:E7:E2:65:47:AB:EC:8D:8D:2D:B1:23
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       6A6F7AD12D4DB41F08DE24CF6805883178ED2409
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032313a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:07 +0000
ROA not before:           Thu 24 Aug 2023 18:48:07 +0000
ROA not after:            Thu 22 Aug 2024 18:53:07 +0000
asID:                     61592
IP address blocks:        2804:4c34:c021::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6f:7a:d1:2d:4d:b4:1f:08:de:24:cf:68:05:88:31:78:ed:24:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:07 2023 GMT
            Not After : Aug 22 18:53:07 2024 GMT
        Subject: CN=6064775D987FBADC26E7E26547ABEC8D8D2DB123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:f6:f1:58:83:d2:0e:1a:de:63:60:f6:2e:
                    58:61:35:fb:18:1a:8f:9a:88:c5:20:19:91:7c:40:
                    5e:1c:12:ad:48:ce:7e:89:c7:ce:ba:e9:cb:5e:63:
                    05:c7:fe:a2:93:e4:a9:fc:97:c7:8d:c5:97:f9:86:
                    4d:b3:7a:f5:67:4d:b6:ea:eb:9e:86:0d:56:18:00:
                    fb:b2:51:a0:dc:0a:11:bb:30:ad:43:31:6d:16:72:
                    65:bc:0d:f5:c7:f9:16:6b:f5:95:5f:dc:df:76:56:
                    a0:bb:e0:b7:65:61:77:d7:ac:9d:b4:14:e2:db:1d:
                    a3:81:9c:e1:d6:00:9b:a8:32:f2:6b:0f:8c:7a:40:
                    20:7f:21:6d:2c:fb:cd:aa:7a:65:a0:bb:05:63:c9:
                    97:e1:b0:74:c4:61:09:81:28:8c:6d:30:32:15:c8:
                    1c:51:94:b3:08:0a:fe:90:1e:5f:10:23:6b:c4:0e:
                    6c:8b:a7:20:0d:6c:3f:c6:65:1f:99:f8:3b:de:ab:
                    f5:2f:92:96:ee:b1:2d:cc:dd:27:f1:16:eb:3f:2f:
                    9d:39:3e:5e:19:6b:66:9b:96:78:e1:0d:5f:bd:f0:
                    61:d5:4e:b2:e1:3c:50:3d:e4:7c:c6:8d:3f:f5:0a:
                    41:d2:58:dd:a4:bc:1f:1c:04:a1:ab:89:89:b1:3d:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:64:77:5D:98:7F:BA:DC:26:E7:E2:65:47:AB:EC:8D:8D:2D:B1:23
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032313a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c021::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:53:af:13:dc:f6:50:e7:47:9a:ee:e0:5a:8b:31:c7:a6:8d:
         11:96:97:a8:c1:91:13:5c:7b:0b:c4:0c:cd:04:70:d4:0c:97:
         c1:2c:27:a0:92:0e:79:2e:1f:e1:1e:a6:fd:73:01:50:2b:30:
         18:72:af:aa:9c:d4:bc:cb:0c:e8:b2:bc:89:ec:19:40:65:08:
         4a:56:4b:ac:c8:9d:c9:7c:a8:f4:a1:fc:d9:20:e3:bb:8e:e9:
         9f:51:af:8f:07:62:c4:20:5f:62:d3:b2:bb:f4:51:da:0f:4d:
         ab:ed:16:18:da:df:33:6b:40:9a:6d:a2:13:60:20:4c:1a:11:
         f3:f8:3d:66:da:4d:48:1a:6b:56:20:04:c8:3e:01:20:e8:e8:
         0e:e3:33:f3:81:f2:8a:ec:d7:fa:31:63:ae:b4:39:24:3c:69:
         1e:1f:1a:0e:a0:a2:4e:7f:96:f1:ee:60:4d:e9:76:33:c7:b3:
         5a:38:d6:8d:8f:ed:49:6c:ce:75:84:f0:95:fc:63:84:11:84:
         a8:0a:49:ce:94:9a:66:65:5e:47:6f:74:5d:a7:51:82:d5:13:
         07:ac:57:c1:6a:d4:de:11:0b:0b:f2:96:23:8e:54:6b:4c:b6:
         16:90:9b:f6:b7:56:e0:d3:ef:ba:f0:d3:0b:64:55:20:6b:12:
         02:8e:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:25:36 2025 by rpki-client