Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032383a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633032383a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          X+VZ2orf0yF4WtJMLcS7OjnTFfINsxpF/yzMpIA1pkc=
Subject key identifier:   B8:E9:17:5A:16:F5:BA:56:E3:2A:4F:E3:15:A6:37:EE:EE:DA:43:CC
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       10FCE9019C333D912A80EAA3E78CD9CAFEC4B02A
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032383a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:00 +0000
ROA not before:           Thu 24 Aug 2023 18:48:00 +0000
ROA not after:            Thu 22 Aug 2024 18:53:00 +0000
asID:                     61592
IP address blocks:        2804:4c34:c028::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fc:e9:01:9c:33:3d:91:2a:80:ea:a3:e7:8c:d9:ca:fe:c4:b0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:00 2023 GMT
            Not After : Aug 22 18:53:00 2024 GMT
        Subject: CN=B8E9175A16F5BA56E32A4FE315A637EEEEDA43CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3f:f2:51:51:25:ce:21:ed:10:38:36:f9:9f:
                    46:48:92:f8:4c:2a:3a:e6:c9:ad:e3:fb:1e:a8:ba:
                    fd:11:a5:00:1c:a5:02:75:1a:47:8c:de:a4:db:1b:
                    15:a0:92:f7:f1:a8:50:16:b8:66:dd:9a:42:45:71:
                    69:a1:fd:fc:74:4f:6e:3d:ac:ce:54:65:a3:9d:0d:
                    5e:7b:4e:fe:e5:d2:3a:47:03:2b:1c:60:35:2f:d0:
                    c7:8a:eb:26:06:3d:32:85:45:c8:8c:21:47:7a:23:
                    0a:c9:01:25:28:51:be:30:24:03:42:34:46:77:83:
                    c6:b2:e6:e6:67:4c:6e:a8:88:a3:b9:1c:e0:9e:ea:
                    cd:4b:e5:3b:02:e8:db:d1:57:1f:a1:18:18:ae:9a:
                    d8:eb:72:d3:07:f0:42:52:1b:ec:16:a5:2c:84:a5:
                    1e:ac:59:7e:34:b7:1e:8f:25:a7:4f:9d:81:ca:24:
                    e3:87:89:b4:2e:b9:b4:ca:86:ba:7e:c9:65:2f:a2:
                    1c:fa:17:f4:e4:9e:a5:09:a8:59:fd:71:5a:91:2c:
                    9c:e0:ec:68:9f:69:e3:64:6f:46:ba:64:95:44:59:
                    13:43:67:77:70:ef:56:2a:98:73:3b:0f:74:01:5f:
                    7c:4b:47:66:57:79:33:10:6a:f4:f7:7d:d2:3d:41:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E9:17:5A:16:F5:BA:56:E3:2A:4F:E3:15:A6:37:EE:EE:DA:43:CC
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032383a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c028::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:83:57:9d:3c:e9:1a:f9:ac:3a:3f:e5:b9:cf:d9:1f:cc:c9:
         87:9b:d9:16:37:98:b7:4d:13:aa:a6:31:e7:12:ab:3b:8e:ef:
         93:d1:42:fd:3c:a0:d3:93:68:73:69:df:b5:19:ac:ea:49:c7:
         3d:e4:bf:97:89:34:40:42:0e:e1:99:c1:af:33:12:b9:02:b2:
         b0:cf:40:65:8f:bf:a7:f8:7f:3e:94:a9:95:63:50:ab:aa:b9:
         48:43:33:44:e6:57:63:c4:d6:1d:b5:9e:50:5f:34:7d:8b:09:
         ff:d7:3b:bb:2f:55:65:47:f8:73:7f:a8:9f:b1:c3:e0:f4:1b:
         98:df:1c:f0:0d:4d:b7:f5:64:0f:a7:ed:4d:f8:d8:e9:5c:cf:
         40:9f:9e:5f:79:b7:2a:d3:be:f1:be:15:5b:61:5f:d5:de:8a:
         d9:be:f1:06:39:17:d1:b0:23:6b:56:41:f6:16:e9:da:34:1b:
         77:ef:09:19:44:8e:15:ef:40:5d:23:a0:e8:01:fa:d6:81:58:
         b9:ab:a0:94:7a:08:7f:87:17:fe:32:1e:52:dc:f3:31:5b:47:
         87:d5:45:65:18:ed:26:cd:e1:62:56:19:82:60:b5:56:1f:59:
         04:ec:30:ac:19:7c:a2:58:07:9c:66:b6:01:a9:4d:ac:a6:6c:
         12:3f:38:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:35:03 2025 by rpki-client