Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633034303a3a2f34342d3434203d3e203631353932.roa
File:                     323830343a346333343a633034303a3a2f34342d3434203d3e203631353932.roa (raw, json)
Hash identifier:          XjBv8bpnVpnD5e6Y6ok1J84GQ1GswZT2jLdM2TGnSi4=
Subject key identifier:   C5:55:5A:BC:8E:B6:CD:C1:D6:9A:F2:D7:B9:AD:71:0E:79:6F:07:78
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       4F43B729077C41093E42F7FFB3161C7807C55B10
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633034303a3a2f34342d3434203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:59 +0000
ROA not before:           Thu 24 Aug 2023 18:47:59 +0000
ROA not after:            Thu 22 Aug 2024 18:52:59 +0000
asID:                     61592
IP address blocks:        2804:4c34:c040::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:43:b7:29:07:7c:41:09:3e:42:f7:ff:b3:16:1c:78:07:c5:5b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:59 2023 GMT
            Not After : Aug 22 18:52:59 2024 GMT
        Subject: CN=C5555ABC8EB6CDC1D69AF2D7B9AD710E796F0778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:07:5d:5e:7f:bc:0e:4e:99:18:7e:db:e7:
                    fd:21:1f:a8:46:74:91:3d:67:3e:dd:39:39:5e:4e:
                    2c:ad:3e:20:29:56:7b:7a:48:37:8e:88:a6:18:d6:
                    c2:09:be:42:79:14:6e:aa:bf:63:2d:6d:01:13:dd:
                    e4:c6:d9:f3:9e:ac:ce:2b:b0:27:4c:dd:1d:24:1e:
                    51:f9:1a:8d:0c:d6:89:3b:7e:19:92:bc:c1:ca:f8:
                    c2:a2:2e:a6:f6:c8:4b:3b:5b:a0:91:a5:90:ac:b3:
                    aa:ef:3e:0f:0c:34:8c:42:bb:cc:e5:c1:d4:4d:5c:
                    6b:36:5c:18:ce:3d:7c:17:8d:b2:b8:92:57:f2:db:
                    8a:f5:b9:7b:bf:97:84:dc:11:5f:66:39:53:ff:d1:
                    38:0e:a4:ad:f2:aa:89:bf:b7:88:e7:d3:6d:ca:be:
                    85:1b:88:b4:ad:ac:34:a7:76:b9:cd:44:61:d8:fe:
                    8c:57:63:ef:07:26:34:4d:c4:a1:57:62:1d:da:04:
                    60:a1:b6:33:2c:b1:95:a8:cc:26:a7:59:86:92:a4:
                    d8:f0:09:74:08:05:42:b1:8b:21:b6:0f:7b:89:cd:
                    9f:72:05:ef:71:35:97:dd:d8:e7:21:c7:a9:64:01:
                    7c:0c:b2:6b:c8:48:32:87:7f:ec:c8:ef:98:f1:62:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:55:5A:BC:8E:B6:CD:C1:D6:9A:F2:D7:B9:AD:71:0E:79:6F:07:78
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633034303a3a2f34342d3434203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c040::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:7c:ea:16:f0:c7:35:08:aa:a5:90:1b:25:5e:dc:b7:77:41:
         7c:fd:b6:62:63:53:41:6b:95:39:19:23:f9:86:b0:d0:9a:72:
         1c:be:d3:42:43:07:f4:76:22:bd:ab:e6:72:30:a3:a9:d2:25:
         2d:09:06:f6:ea:1d:0c:6d:16:c4:d1:d6:bd:c1:be:ab:1c:86:
         d8:ef:5c:d4:13:16:e6:6a:e0:02:a3:a9:31:07:49:33:a8:d8:
         f6:65:0a:ff:31:56:11:a6:83:48:e8:40:78:4b:8f:c3:c6:f5:
         04:3d:a1:98:95:d9:68:bd:fd:bb:47:7d:39:61:6d:9c:f5:76:
         e8:70:e8:95:ac:27:81:2c:b6:06:81:6d:5a:88:85:a6:4e:37:
         72:f1:e6:e9:86:da:88:ff:59:19:f1:d1:e2:8b:57:1b:2b:bd:
         bc:b3:ef:c5:fc:f1:77:56:dc:2a:1d:6b:5d:f7:d6:d5:66:5c:
         87:fe:b9:1e:da:66:88:c2:60:81:c5:4e:3a:ec:78:b1:32:be:
         7b:fd:64:b2:3f:f5:c6:85:b5:df:96:5e:1c:6e:f4:23:92:11:
         5d:87:e1:0d:aa:13:11:0c:0a:f8:75:19:90:39:bf:c1:6b:8d:
         74:a7:0a:20:b5:7d:48:42:88:8c:a6:70:3d:3e:69:2a:f3:69:
         d2:f7:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:30:27 2025 by rpki-client