Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633035343a3a2f34372d3437203d3e203631353932.roa
File:                     323830343a346333343a633035343a3a2f34372d3437203d3e203631353932.roa (raw, json)
Hash identifier:          zTvExxJVYSGMfW3TJatOanbV/egCP/AATW9HI6WmJNA=
Subject key identifier:   D6:00:28:08:2F:4C:E9:52:1C:7A:91:66:0E:C8:AA:7E:74:A8:56:55
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       2800DC7BFF773C0FCDFD315372CB996E6BA7212E
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633035343a3a2f34372d3437203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:57 +0000
ROA not before:           Thu 24 Aug 2023 18:47:57 +0000
ROA not after:            Thu 22 Aug 2024 18:52:57 +0000
asID:                     61592
IP address blocks:        2804:4c34:c054::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:00:dc:7b:ff:77:3c:0f:cd:fd:31:53:72:cb:99:6e:6b:a7:21:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:57 2023 GMT
            Not After : Aug 22 18:52:57 2024 GMT
        Subject: CN=D60028082F4CE9521C7A91660EC8AA7E74A85655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:52:ea:40:57:44:c5:98:af:5e:08:a3:c1:
                    3c:3e:bf:e9:d6:0d:88:9e:d5:6e:25:5c:d8:b6:6b:
                    d2:d1:d8:fc:e5:f2:4f:bb:29:9f:72:08:d9:35:a2:
                    98:02:0c:fc:79:bb:c0:75:67:96:0a:d1:74:c8:07:
                    24:2e:92:0d:51:a5:e7:6f:32:a1:80:d3:2c:8a:a6:
                    10:eb:e5:09:d4:45:28:ec:42:b8:5a:50:f7:48:48:
                    d2:4e:f3:51:29:12:52:ec:c5:91:ba:65:17:c0:5c:
                    0f:b2:49:fb:df:99:2d:9f:84:3e:2b:01:78:da:e4:
                    bd:87:c3:48:91:e8:3a:9a:eb:d8:93:e2:99:4f:ed:
                    dc:c3:78:3b:92:7d:f1:e5:66:2f:0d:06:17:8c:29:
                    21:33:23:04:f9:bd:6b:ed:b4:a1:f9:e2:41:69:08:
                    b9:03:ac:5b:34:32:8f:69:d7:da:f3:e1:a5:1a:f8:
                    76:f5:4c:51:0a:a1:8c:69:38:79:fc:23:6c:dd:3f:
                    7f:88:93:04:ed:f0:4d:58:a6:d0:ad:85:11:ee:7a:
                    10:4d:44:3d:99:e6:58:01:82:a0:67:8f:82:a0:be:
                    fe:b6:72:f9:96:3c:b2:21:34:b5:34:c8:b6:9d:e9:
                    8d:4a:0c:07:fd:04:52:fa:87:78:bd:d9:2d:0d:72:
                    94:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:00:28:08:2F:4C:E9:52:1C:7A:91:66:0E:C8:AA:7E:74:A8:56:55
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633035343a3a2f34372d3437203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c054::/47

    Signature Algorithm: sha256WithRSAEncryption
         52:2b:0a:22:ff:85:f3:9f:6e:0d:d8:6a:ec:12:b6:f6:23:a4:
         86:4d:84:42:76:fc:5d:21:cd:bd:0e:d9:23:e1:ad:2e:83:03:
         5c:72:e2:0f:85:2d:02:76:4c:75:bf:15:16:87:af:89:25:f6:
         4c:42:91:61:3b:b4:ba:15:68:83:74:e1:ac:7c:d2:d8:54:a3:
         6a:dc:31:ea:ad:14:f6:ca:c2:3e:48:2b:ff:99:30:7b:91:14:
         e9:ea:01:20:93:6a:74:a0:48:f3:11:f9:cb:2e:c3:c4:93:4f:
         69:90:8b:9e:79:36:69:b1:c9:fb:98:12:4a:c6:63:f3:d1:c5:
         65:52:64:f0:31:5f:a6:34:e6:c6:f1:be:b6:f9:47:12:10:2e:
         f8:dc:3e:57:db:87:1a:bc:b1:d2:f2:7e:b0:25:14:27:6c:fd:
         03:ce:c7:d9:e9:82:2f:f3:b0:a0:01:65:7a:1d:63:96:a2:0b:
         05:c5:04:47:a8:14:4e:27:87:74:6f:50:07:95:68:b6:be:cb:
         0b:54:fc:8f:e7:06:27:2b:31:60:59:0c:26:a0:17:a5:ea:d4:
         b8:a7:b4:b5:2b:f1:e7:9f:3c:89:40:24:6e:54:e4:4f:06:e5:
         e9:b9:55:2e:89:b8:37:f0:6a:31:50:9d:50:52:29:b1:61:08:
         52:df:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:30:30 2025 by rpki-client