Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a313a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a313a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          V/+UiGE+K21y+kL0616fBEmcp/ebFHSvUtpuUCG04Sk=
Subject key identifier:   EC:6C:A1:6E:52:BB:6C:0B:AF:2C:29:46:FF:2B:0F:03:50:78:7B:E3
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       2F7D5BDAA0A3644D5C026B53C5D2C19F19BF8380
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a313a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:04 +0000
ROA not before:           Thu 24 Aug 2023 18:48:04 +0000
ROA not after:            Thu 22 Aug 2024 18:53:04 +0000
asID:                     61592
IP address blocks:        2804:4c34:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7d:5b:da:a0:a3:64:4d:5c:02:6b:53:c5:d2:c1:9f:19:bf:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:04 2023 GMT
            Not After : Aug 22 18:53:04 2024 GMT
        Subject: CN=EC6CA16E52BB6C0BAF2C2946FF2B0F0350787BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:a9:85:37:00:ea:7d:c0:43:b9:71:c4:2e:
                    4b:9f:8a:7f:df:0b:c9:1d:3b:06:bf:0f:69:dc:04:
                    62:34:96:ef:56:b5:64:91:3c:fa:de:74:9a:2a:5c:
                    d1:c4:38:95:33:14:d5:6b:a8:e8:d9:49:11:8e:c2:
                    5f:f3:29:77:1e:75:a0:01:a7:8e:58:cc:ae:86:2b:
                    6e:ec:d5:07:c1:88:76:de:cc:0d:f6:55:ff:98:56:
                    af:4b:44:f0:da:da:3e:3b:55:e3:db:b3:97:b4:33:
                    12:77:6f:20:7f:3f:1f:51:57:b6:74:1f:c5:d5:20:
                    74:ab:02:57:43:be:79:17:3a:ea:0c:44:3a:b8:5f:
                    79:ef:40:87:60:4d:cd:00:b5:74:28:a8:cc:0b:cf:
                    c6:93:22:ac:fc:ff:6e:cd:de:68:37:96:2d:d1:c5:
                    d0:cb:eb:4f:5f:90:5a:92:58:42:0a:f7:49:f5:92:
                    b6:fb:6d:d8:eb:5f:f0:64:c8:b7:b5:84:1b:f9:4d:
                    1b:76:bd:d9:88:f6:29:b3:45:9e:26:43:d9:a3:e0:
                    d1:74:71:aa:da:1f:ce:6f:72:b5:a6:58:9d:5c:1a:
                    db:3c:a4:41:ee:56:b3:c4:f5:2c:3d:10:26:5f:e2:
                    c1:13:8c:61:7c:e9:02:09:77:ad:fc:78:19:ec:fc:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6C:A1:6E:52:BB:6C:0B:AF:2C:29:46:FF:2B:0F:03:50:78:7B:E3
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a313a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:d5:39:59:ca:9f:b0:12:c5:42:71:87:8f:8f:f9:3e:40:50:
         5d:0d:3e:37:42:82:e2:b9:82:c8:bd:a2:be:2f:bf:7e:73:80:
         57:44:ee:7a:4c:9a:2b:4f:fb:d8:8d:bb:44:d6:d2:51:b6:dc:
         96:af:ae:76:a8:b3:0a:71:a5:a1:48:15:29:60:c9:c2:f2:09:
         1d:7c:94:f7:e3:3a:81:3e:c6:57:b8:ae:1b:0d:be:88:b5:8a:
         45:cd:fa:04:ba:f0:b7:f7:bb:d6:e4:76:a1:66:4f:e0:5a:65:
         96:c4:27:75:96:d1:19:7f:d7:ca:a3:ef:06:11:5b:15:ce:f5:
         84:c8:a0:95:a6:63:45:74:aa:81:a5:c5:ac:f7:12:99:f2:0a:
         4b:c3:58:66:ec:fa:f1:f0:19:81:8b:b8:20:54:2e:83:07:b3:
         67:19:bf:7b:d2:f7:a4:6e:ae:58:d5:c8:3f:cd:51:95:c8:6b:
         4c:84:eb:42:bb:e1:80:80:0b:58:ca:af:28:b4:7a:21:cb:76:
         b3:77:f8:b2:43:ef:cf:13:a5:20:ca:5d:5d:5c:24:d8:1c:06:
         a4:d9:a6:25:4f:84:4c:4c:bd:a5:fe:00:24:5a:ac:3d:42:5f:
         0d:26:83:5d:2b:87:e8:9a:5a:38:cf:bc:87:5b:1d:9e:4d:48:
         f8:67:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org