Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033643a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633033643a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          TmUkkLDRRfJVaiVl6dabBuPRc1388RcobrU5FgoMEf0=
Subject key identifier:   A5:86:71:DC:3A:ED:EB:B3:87:A1:21:FA:B9:C2:2D:D3:B8:89:72:A6
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       22BB89FA842FD856A085BA5522FEAF24647AAC7D
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033643a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:07 +0000
ROA not before:           Thu 24 Aug 2023 18:48:07 +0000
ROA not after:            Thu 22 Aug 2024 18:53:07 +0000
asID:                     61592
IP address blocks:        2804:4c34:c03d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bb:89:fa:84:2f:d8:56:a0:85:ba:55:22:fe:af:24:64:7a:ac:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:07 2023 GMT
            Not After : Aug 22 18:53:07 2024 GMT
        Subject: CN=A58671DC3AEDEBB387A121FAB9C22DD3B88972A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:59:68:6c:74:80:a8:f4:e2:bf:60:4e:68:
                    7e:69:4f:90:f3:5b:09:0a:04:7b:7e:7d:12:8a:51:
                    9a:fd:62:85:d0:db:43:cb:da:ae:0e:3d:c0:ea:4b:
                    df:40:0e:ee:71:82:eb:a2:e1:2b:10:bb:fc:81:93:
                    6f:24:9c:21:30:00:76:06:8c:5f:be:05:06:a8:98:
                    dd:1d:eb:68:95:f4:90:25:3b:af:4f:7a:9e:0e:80:
                    10:ba:23:5d:1f:98:dc:c8:39:70:e2:05:7a:4a:b6:
                    10:39:d9:6a:ce:3b:cd:f2:98:bb:97:ac:33:69:e9:
                    f9:e7:b1:70:07:74:a1:71:58:fd:81:be:4c:d8:34:
                    a5:aa:25:42:4e:69:ff:33:15:ba:e7:29:b3:da:65:
                    fc:c3:82:1b:92:a1:b7:83:c3:e3:24:4a:f3:08:9e:
                    d9:ac:0e:00:8f:16:4c:cd:e5:ef:e7:f4:48:d0:e8:
                    8a:03:d8:a4:0c:61:e0:8b:bb:b6:c9:75:ec:2c:2b:
                    5f:57:67:82:ff:5d:e4:84:9a:6b:87:d0:0b:0a:57:
                    04:0b:62:dd:1e:17:73:3d:52:79:98:45:8a:69:a2:
                    91:1f:a2:fe:c6:cb:ab:43:83:74:5b:b3:d7:37:fa:
                    91:37:b5:9b:e5:0e:8f:de:44:ea:e1:a6:4e:b4:6a:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:86:71:DC:3A:ED:EB:B3:87:A1:21:FA:B9:C2:2D:D3:B8:89:72:A6
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033643a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c03d::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:a8:4b:0b:06:45:67:e5:a1:cd:30:c3:3e:93:04:51:47:
         6c:a3:cd:36:cf:52:d9:5f:66:a0:ac:33:22:41:fc:43:2c:84:
         e9:9a:38:d3:5a:a2:d1:3f:3f:2e:78:1e:fc:67:db:14:e6:ae:
         88:44:4e:25:7a:1a:17:6e:04:bd:c0:c7:49:f7:5d:c4:9c:b3:
         39:3c:f8:a3:59:47:87:33:d7:9e:7f:ef:ff:af:af:69:bb:c3:
         58:a4:94:e1:34:cc:80:b5:19:55:ad:d8:e7:b9:4d:df:18:5a:
         12:98:8d:dc:40:61:21:2e:a6:99:22:0e:84:a6:c8:d6:aa:1b:
         3b:38:83:10:03:e9:71:43:e9:0f:78:20:c1:f0:44:aa:48:10:
         25:95:08:38:1f:68:62:66:9b:35:09:77:88:40:68:34:8b:f4:
         72:45:38:b6:df:52:2e:56:54:b5:7a:2d:b2:36:05:0e:9b:58:
         6f:00:17:9f:f4:b7:ea:1e:82:8a:cb:71:8d:99:a7:fe:01:2c:
         2a:44:60:88:a0:90:d1:15:86:10:87:6d:98:2c:ae:05:1f:c1:
         cf:fe:70:68:dd:9d:e8:7e:a1:35:e8:55:c6:de:75:9b:ee:32:
         00:b2:25:e9:f7:5e:b5:b8:97:21:ec:ee:57:9b:ff:90:3e:61:
         ff:5b:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:27:58 2025 by rpki-client