Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030303a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a343030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          YyYIhLQk08Wa/4Apu6qmzP9ZC1wE8DZ19A8WEceF0ac=
Subject key identifier:   EB:0C:05:8D:C0:97:09:ED:A8:4D:89:6F:2C:50:2B:3F:38:00:42:5C
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       7710EFFE7B6EA6FC19CD8C9D687DA28907F15FFF
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030303a3a2f33362d3336203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:07 +0000
ROA not before:           Thu 24 Aug 2023 18:48:07 +0000
ROA not after:            Thu 22 Aug 2024 18:53:07 +0000
asID:                     61592
IP address blocks:        2804:4c34:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:10:ef:fe:7b:6e:a6:fc:19:cd:8c:9d:68:7d:a2:89:07:f1:5f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:07 2023 GMT
            Not After : Aug 22 18:53:07 2024 GMT
        Subject: CN=EB0C058DC09709EDA84D896F2C502B3F3800425C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:b8:ac:65:c1:d7:4c:08:c2:b6:e2:b8:f8:
                    ac:12:ca:bf:08:44:e5:7e:1d:2e:65:9f:ea:90:7f:
                    2a:57:d4:cf:64:1f:16:f3:69:0f:29:95:94:62:78:
                    10:c9:0c:f0:35:f2:de:ef:72:4c:c9:be:38:1d:2f:
                    33:ae:5e:66:43:05:1a:66:02:13:df:3d:ad:68:8f:
                    9a:bc:70:92:f5:12:70:74:47:93:31:d5:d8:b1:b0:
                    ae:2e:22:b2:03:37:37:56:84:02:85:20:9b:5b:34:
                    d1:9a:30:9c:48:6d:64:61:2b:c3:5e:d2:0f:97:39:
                    bf:dd:42:95:0f:ff:f7:9e:04:04:35:5d:1c:b2:e7:
                    8b:d2:d9:d3:cd:5e:f7:02:48:1f:be:35:dc:6b:1e:
                    63:47:0f:ba:c8:cf:60:eb:22:10:5f:cc:1b:e1:3c:
                    5d:3f:a3:0e:45:c7:17:8f:87:9e:b5:93:2d:8c:36:
                    b0:06:c6:a7:b0:d8:23:69:f5:1a:85:64:88:ce:48:
                    12:36:51:ee:5c:3a:42:5e:d6:44:2a:b3:9d:f3:aa:
                    57:bb:c5:36:f7:e3:81:94:17:d7:c7:ff:42:bb:5a:
                    9f:2d:29:f0:61:67:77:76:7d:7d:a8:39:ea:f2:76:
                    f0:85:95:3d:1e:9b:f1:11:cc:a5:9d:f4:db:83:9f:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0C:05:8D:C0:97:09:ED:A8:4D:89:6F:2C:50:2B:3F:38:00:42:5C
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030303a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         32:84:e3:cc:ae:35:ff:4b:32:2e:67:f0:b8:b0:d3:50:41:6b:
         aa:cd:82:dd:7e:7a:57:0b:61:7a:b7:56:ae:b4:4b:38:f8:06:
         86:11:79:1b:17:92:f0:c4:1a:25:24:e9:98:5b:39:4b:a2:79:
         61:b4:79:92:3d:80:80:da:ac:4f:44:c4:49:c9:8b:7d:dc:e0:
         fc:8e:d0:51:1f:80:a9:1e:31:65:7e:01:25:f4:52:c7:64:e5:
         10:08:8e:03:38:f8:91:4e:17:c8:ba:96:25:f2:d7:21:4f:3a:
         1a:79:76:64:3b:da:95:6d:c3:6d:13:8d:13:04:78:ee:df:4f:
         19:9e:83:41:e7:8e:db:ff:1f:8d:c7:bf:f6:90:c6:06:61:30:
         1e:4d:42:09:8a:88:08:44:19:f3:c7:76:9e:db:6e:5a:a4:47:
         e0:3f:8b:8a:ef:ae:13:65:99:7b:0e:1a:53:b6:63:8d:9d:da:
         f3:70:5b:ec:07:98:ad:8c:cf:31:cc:22:15:e0:75:c8:3e:b7:
         eb:39:ce:41:46:cf:16:77:ef:54:88:72:49:7d:c5:55:0c:51:
         cf:3b:d4:ca:d8:08:d4:44:c3:8b:b4:0f:22:36:b6:29:53:4a:
         0d:61:9e:e7:02:10:38:67:1a:bd:f2:23:34:5a:a1:a3:ab:40:
         fa:9f:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org