Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032343a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633032343a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          ORTPQCgIRBgM+lcJ7WPRA2KqMSrOhs3OkP7WUktwFMk=
Subject key identifier:   3D:A5:D7:A3:AB:4A:57:95:60:A0:C7:68:F0:5E:98:5F:C1:A9:36:E0
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       714C73E7E7111D8F81C0F94A552C4B63EAAC7878
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032343a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:02 +0000
ROA not before:           Thu 24 Aug 2023 18:48:02 +0000
ROA not after:            Thu 22 Aug 2024 18:53:02 +0000
asID:                     61592
IP address blocks:        2804:4c34:c024::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4c:73:e7:e7:11:1d:8f:81:c0:f9:4a:55:2c:4b:63:ea:ac:78:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:02 2023 GMT
            Not After : Aug 22 18:53:02 2024 GMT
        Subject: CN=3DA5D7A3AB4A579560A0C768F05E985FC1A936E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2a:e2:a6:fc:b7:61:69:ac:39:64:e4:76:dc:
                    fa:cc:c7:48:7a:b6:d6:d1:5d:26:0e:2e:dd:ae:7e:
                    a0:86:f9:13:c3:61:9e:e9:a2:67:fc:f6:a6:d4:d1:
                    02:5c:af:92:5d:6d:17:62:51:23:27:ae:8a:48:b7:
                    c2:ea:01:0e:1f:c8:eb:ae:c8:7d:2c:53:e2:d9:ad:
                    e9:0c:7f:e5:fb:6a:9d:1f:fd:26:55:95:c8:0b:f0:
                    8e:c4:22:d2:38:4f:59:de:e9:30:48:18:38:ec:70:
                    c6:20:74:9d:37:1a:d2:06:a2:85:78:79:9a:86:01:
                    6e:23:33:d8:92:77:96:05:da:27:2c:0c:d8:77:a4:
                    18:04:84:e1:01:1f:4a:c0:57:ea:6e:61:24:c3:cb:
                    cb:a5:0f:b2:d5:aa:eb:53:b0:da:02:cd:1c:cc:44:
                    be:16:02:25:0f:f6:ad:15:b8:07:28:24:dd:c9:8a:
                    b1:5c:39:fe:ea:89:c6:27:a4:94:ec:40:88:97:22:
                    7d:45:9e:4f:f1:89:54:68:2e:50:16:7f:7c:45:9d:
                    f4:86:87:0f:62:00:b7:4d:48:db:39:40:12:67:34:
                    9d:b6:94:23:bd:96:e8:8e:2f:79:9b:44:db:ca:0b:
                    c4:c6:27:d3:78:29:e5:cd:86:6d:f3:08:84:87:fa:
                    1e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A5:D7:A3:AB:4A:57:95:60:A0:C7:68:F0:5E:98:5F:C1:A9:36:E0
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032343a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c024::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:7b:dc:82:be:af:e1:d0:3a:c8:e9:40:78:e6:54:12:94:88:
         1c:3c:ee:3c:dd:8b:d0:78:6b:0a:c6:d4:58:c4:3a:fc:bc:b3:
         df:49:cc:dd:80:1b:6f:98:e0:42:f1:a8:d2:d0:33:17:b0:73:
         af:37:30:73:fd:a9:97:28:a5:34:4c:b9:07:6c:fc:28:f8:8c:
         b6:3b:bb:28:88:db:a3:62:22:6a:d5:68:a3:cd:a1:3d:67:8c:
         d5:2f:4e:fa:8c:6d:63:16:be:42:7b:cb:20:43:76:3d:a6:24:
         ad:fc:25:51:55:ca:27:54:d3:cc:29:b2:7d:21:bf:df:06:ab:
         de:bd:d3:52:0b:26:30:3c:37:20:f0:81:8b:89:63:fd:75:f0:
         52:04:47:d4:c6:97:2f:25:e4:58:7f:a2:db:55:c7:4c:40:83:
         2a:1c:80:be:6c:e2:f1:54:eb:3b:74:01:e2:d3:e6:54:9e:ec:
         2e:51:f8:f8:74:01:d7:6a:79:cb:ee:42:4b:f8:d6:92:ec:c4:
         ce:67:58:c7:33:c0:15:64:11:a5:94:0d:c4:3c:81:8d:54:41:
         f3:b9:c5:f5:c3:21:f5:ab:e2:25:d3:e3:1a:fa:20:64:f8:9b:
         e9:55:6c:d4:18:d1:af:97:57:b0:09:16:0c:1f:6a:64:dd:f3:
         43:72:26:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:30:28 2025 by rpki-client