Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633035323a3a2f34372d3437203d3e203631353932.roa
File:                     323830343a346333343a633035323a3a2f34372d3437203d3e203631353932.roa (raw, json)
Hash identifier:          ZWitfExHhzzH8s2ooYkjieoNwgtk4wW77FVeHOYEkM0=
Subject key identifier:   4D:7E:29:95:2A:7F:F9:D0:E1:C5:B5:F2:D5:DD:AF:40:5F:35:9E:65
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       54F4FFF7F9C0829F2781E7E8F911B494ED8B7769
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633035323a3a2f34372d3437203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:05 +0000
ROA not before:           Thu 24 Aug 2023 18:48:05 +0000
ROA not after:            Thu 22 Aug 2024 18:53:05 +0000
asID:                     61592
IP address blocks:        2804:4c34:c052::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f4:ff:f7:f9:c0:82:9f:27:81:e7:e8:f9:11:b4:94:ed:8b:77:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:05 2023 GMT
            Not After : Aug 22 18:53:05 2024 GMT
        Subject: CN=4D7E29952A7FF9D0E1C5B5F2D5DDAF405F359E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:9a:08:db:14:a0:c0:e6:9c:89:43:e9:96:
                    8d:bf:39:13:24:68:39:5a:02:d0:82:0f:7c:e1:df:
                    db:79:c4:56:73:1d:32:73:bd:a5:18:56:35:84:b4:
                    b4:f7:9c:79:55:af:dd:30:d6:3b:bb:e8:5e:ec:72:
                    0e:cf:e6:64:21:4e:f2:e4:45:6b:7a:54:51:9e:e2:
                    7c:b1:84:8d:c4:a9:24:74:f1:b1:68:43:6d:c9:76:
                    d8:d6:0c:de:77:9b:f8:78:48:b1:1b:5d:e7:27:f5:
                    71:00:a5:d2:29:2c:f0:ae:63:25:76:23:0d:cf:91:
                    fb:ef:33:e0:a5:a5:cf:63:93:68:1c:f1:47:8a:11:
                    43:9f:b3:3c:42:20:7c:ca:0e:2f:a1:d0:59:85:66:
                    41:ef:58:ac:63:4f:aa:6d:e0:ce:00:57:93:00:81:
                    10:cd:bf:43:c2:e3:16:9c:85:3a:b0:26:5e:c6:0c:
                    c5:5a:0c:8b:14:fd:4b:43:18:24:21:b4:e8:95:fe:
                    f5:cf:f6:ec:fa:04:60:bc:2f:6f:ea:21:cc:79:ae:
                    9b:64:75:1e:66:a2:8a:6c:73:52:07:93:6a:84:f8:
                    ed:a7:20:8d:0d:8b:32:f4:a6:bd:12:43:c5:be:d1:
                    05:c6:c2:36:f8:e6:a2:78:90:77:64:02:a4:79:23:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7E:29:95:2A:7F:F9:D0:E1:C5:B5:F2:D5:DD:AF:40:5F:35:9E:65
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633035323a3a2f34372d3437203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c052::/47

    Signature Algorithm: sha256WithRSAEncryption
         49:cb:23:e0:3a:cd:a5:99:17:87:a0:aa:52:e5:7d:9e:9f:08:
         b0:50:c0:71:31:61:e9:f0:83:7e:da:8f:74:2f:9b:da:85:c2:
         3e:26:4d:4b:e8:7d:22:a4:17:b3:37:be:bc:75:e8:7c:e3:b9:
         36:a7:32:aa:a4:66:44:05:5b:13:7f:01:ef:5f:e0:f0:8c:a9:
         6a:db:ed:0f:50:6f:75:1e:62:ea:66:10:25:47:14:85:20:c4:
         52:5f:46:cb:96:05:68:d3:62:77:24:a4:5c:61:a6:33:6d:63:
         dd:1a:47:9e:a9:53:88:c6:09:32:f3:6a:7a:8f:e3:99:f8:4c:
         61:b8:84:b4:ca:64:8a:d5:8d:e8:70:1a:d3:fe:5b:b1:78:d3:
         94:c6:1e:3d:7a:6c:e9:70:4a:4d:54:a1:ba:63:86:99:ca:d1:
         ca:3c:dc:c0:e7:fb:0e:93:e4:b4:40:b0:39:07:72:a3:8e:77:
         4b:39:de:04:0a:85:11:b6:13:3e:26:aa:f6:f0:c6:2e:8c:cb:
         38:cc:9b:97:d5:39:fd:31:6f:29:c6:af:2b:1e:fc:48:1e:be:
         bf:30:25:90:9b:79:19:c6:57:70:1d:90:7a:30:3b:51:9b:5c:
         37:88:72:77:3f:67:2d:21:18:75:bb:9a:03:5b:55:94:4c:42:
         ca:f8:ca:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:29 2025 by rpki-client