Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032353a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633032353a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          gMS4S2vLwW0KFFbKHouzrpOL1/XHIVX8vz2d0bx0M8c=
Subject key identifier:   66:9A:DF:F0:9E:90:92:C3:BD:98:0D:62:E1:B4:E7:06:9E:29:6D:2C
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       7D7DD99D0CF024239BF32A9E0096FF8ACDBED9EB
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032353a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:02 +0000
ROA not before:           Thu 24 Aug 2023 18:48:02 +0000
ROA not after:            Thu 22 Aug 2024 18:53:02 +0000
asID:                     61592
IP address blocks:        2804:4c34:c025::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7d:d9:9d:0c:f0:24:23:9b:f3:2a:9e:00:96:ff:8a:cd:be:d9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:02 2023 GMT
            Not After : Aug 22 18:53:02 2024 GMT
        Subject: CN=669ADFF09E9092C3BD980D62E1B4E7069E296D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3c:21:f1:4b:93:7c:9b:b0:91:44:d1:fb:4b:
                    1d:ab:5f:d6:44:e0:dd:6d:27:b5:ad:68:4a:8f:8e:
                    d7:57:ab:1f:27:ae:41:db:4f:23:f9:ad:af:88:9b:
                    82:e2:86:cf:48:57:8c:7c:48:6b:7a:9a:60:83:1d:
                    66:ca:f2:5e:44:27:8d:50:10:cd:3b:11:92:f1:7d:
                    ae:0f:6a:2e:62:12:59:3c:eb:12:2d:03:dc:43:f9:
                    ba:4b:c5:e0:3a:d3:bc:11:a9:3f:5d:77:70:ab:12:
                    07:f7:2c:79:4d:98:1b:21:e0:75:17:a0:4f:8f:f9:
                    9f:f2:d3:a5:92:4f:6b:08:84:80:50:88:84:aa:c6:
                    88:95:e8:e3:f2:fb:d7:2b:9c:2c:9a:c6:6b:de:c6:
                    06:d2:a7:cd:76:b0:77:8e:28:23:6d:5a:93:13:df:
                    a9:03:ad:f5:89:55:15:df:3b:2a:3f:c5:bf:21:52:
                    86:55:00:37:95:11:b8:a9:2b:5c:e9:d1:92:f7:17:
                    b4:e1:df:0f:59:c5:6d:a9:bb:c4:4e:f7:ec:48:48:
                    01:42:8a:6a:36:ae:98:8f:d8:aa:85:52:74:3c:13:
                    3e:fc:b1:e5:b9:21:af:d8:a3:37:85:16:d3:f4:92:
                    97:cd:d1:64:51:d7:27:27:d8:1d:35:87:c3:b0:2a:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9A:DF:F0:9E:90:92:C3:BD:98:0D:62:E1:B4:E7:06:9E:29:6D:2C
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032353a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c025::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:bd:09:10:9b:3b:66:57:6e:05:d1:33:c5:24:f5:0d:d3:2d:
         1d:29:f0:e2:90:5a:7d:ac:8f:bd:44:30:57:c5:b8:4a:e5:af:
         71:d2:0f:75:af:0d:ac:64:ab:d2:3f:06:42:a0:68:0c:af:17:
         1f:6d:3a:6e:e4:f3:e2:85:27:36:2b:22:db:a9:0a:98:38:f9:
         6e:46:a4:85:20:d5:13:b5:8f:a0:62:43:7b:7b:02:ae:4d:ee:
         21:f4:9a:38:84:78:68:21:f1:42:ab:c6:53:e6:c6:3e:53:80:
         9b:6f:55:23:8a:99:19:99:ca:e4:65:59:f2:0a:09:77:14:f0:
         2d:42:4e:c2:d9:f0:01:c4:fa:e4:ca:2e:da:e1:25:a7:7f:c0:
         b4:7c:9e:e5:e5:7f:df:11:5a:e6:f8:9c:c0:af:94:88:34:18:
         0a:34:43:cc:25:72:d3:2b:84:ba:dd:ef:3e:08:21:a4:e4:cc:
         f0:40:b0:55:80:d3:fb:7e:ff:c7:5b:8c:2a:61:bf:c4:e6:28:
         4c:91:5f:17:b9:5c:8f:1f:41:6d:58:34:ea:c7:73:ad:cc:c9:
         4a:ac:9a:de:b9:86:a3:1b:ab:2c:ce:7e:4c:8e:db:b9:30:79:
         f3:ca:0e:bf:1e:82:6f:10:de:9f:a1:d4:d5:67:9a:46:4f:8b:
         8e:eb:4f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:40:00 2025 by rpki-client