Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033623a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633033623a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          VDgXkoisSlmBUcLoAEj76hsDMy6B2Gc175nnS/tVYWE=
Subject key identifier:   22:4E:E0:76:4D:24:E1:BD:57:54:CD:B2:53:1C:83:D6:37:64:CA:E3
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       0BA94F91CFA4EB3029BF5BB7326B725531B9A5BE
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033623a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:02 +0000
ROA not before:           Thu 24 Aug 2023 18:48:02 +0000
ROA not after:            Thu 22 Aug 2024 18:53:02 +0000
asID:                     61592
IP address blocks:        2804:4c34:c03b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a9:4f:91:cf:a4:eb:30:29:bf:5b:b7:32:6b:72:55:31:b9:a5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:02 2023 GMT
            Not After : Aug 22 18:53:02 2024 GMT
        Subject: CN=224EE0764D24E1BD5754CDB2531C83D63764CAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:35:17:f2:bb:9e:08:0b:34:0e:5b:4b:32:
                    0d:21:22:dc:31:30:f4:83:72:40:0a:0b:a6:21:ea:
                    34:ec:47:b3:40:d5:b9:3c:ba:c1:42:bb:1a:c5:75:
                    56:b6:dd:45:35:d7:f3:0c:75:22:1b:46:10:84:e5:
                    16:8f:92:73:c5:19:ce:f3:39:5f:18:cd:79:2d:08:
                    cf:05:8c:df:3a:88:16:96:9b:08:1b:22:28:a6:41:
                    d5:ec:2d:7e:13:02:e6:ca:ca:bd:cc:02:d9:c7:59:
                    3a:61:2f:f4:0a:b3:f9:90:54:5d:bd:ae:1e:f8:83:
                    43:01:10:77:16:18:bb:ff:57:8f:30:c3:8b:5d:2b:
                    b0:8a:53:f7:38:13:2e:b4:86:85:70:61:16:36:a1:
                    fd:f7:55:a3:d2:1c:5c:f0:1f:af:c1:97:e1:bf:88:
                    48:5e:7a:d6:93:62:e1:ae:93:1c:17:0c:e2:ed:ee:
                    d8:4b:7c:fb:3f:80:c8:b8:df:a4:e0:1a:d9:cb:fb:
                    ac:49:8d:aa:5f:c0:f3:e3:07:43:fc:d5:ca:da:0e:
                    72:91:74:b1:40:6a:dd:fe:cc:68:fe:ba:c8:a3:09:
                    0f:43:22:83:bb:d5:a1:47:6c:d8:8f:2c:b7:a8:6f:
                    db:e7:80:80:ea:b4:c8:54:d0:31:89:b9:82:ad:11:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4E:E0:76:4D:24:E1:BD:57:54:CD:B2:53:1C:83:D6:37:64:CA:E3
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033623a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c03b::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:35:29:02:c3:83:ca:ea:37:cf:82:fe:11:79:1e:9c:a7:8c:
         c7:2b:30:5a:62:2c:ff:ae:95:d2:30:bb:fb:36:23:0d:1c:79:
         2f:06:da:08:cd:65:a1:9a:a2:36:df:ce:5a:e8:99:d2:e8:c1:
         e3:2f:bf:52:9d:ae:ab:57:a5:d2:c7:24:37:08:16:fe:7a:3f:
         75:01:81:66:96:2f:55:68:e2:61:2e:0a:5e:96:25:75:45:9a:
         18:45:10:b5:09:73:d8:70:a1:62:d3:44:0a:cf:56:a0:8c:1e:
         d5:e4:ac:12:ec:4b:e0:ab:3b:75:42:ff:40:73:9d:0a:c8:d1:
         59:af:35:70:6d:66:95:65:29:66:20:e1:b7:b9:4d:c5:e0:6a:
         b0:63:04:1a:50:f4:7d:e0:f3:c0:52:28:b0:9e:10:92:45:19:
         55:75:51:a3:f2:bf:61:fc:cb:cd:91:35:ce:a4:8d:42:bb:21:
         cb:67:f2:84:10:c7:08:f1:8e:95:26:84:19:be:b6:d7:94:b9:
         0a:6e:2a:1a:23:57:8b:71:e3:dc:1f:e7:48:b8:a6:df:a2:0b:
         1b:31:c5:a4:7c:0c:04:cc:11:e1:7d:07:c1:95:47:c2:4d:6e:
         b9:0a:82:b4:92:e1:0d:58:b7:56:4a:05:b8:2b:5f:cb:63:dc:
         b5:34:2a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:24 2025 by rpki-client