Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030313a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a343030313a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          f/BOmy6FaJEUMpbTRbIILh0qD7JcWykV3qFSGsnDqHo=
Subject key identifier:   50:B9:A4:70:A1:63:3E:A1:DF:15:8E:4D:B8:D6:C0:42:DE:22:17:7F
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       5589CE429CF7283CF529242640DF92D00C30A3D7
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030313a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:59 +0000
ROA not before:           Thu 24 Aug 2023 18:47:59 +0000
ROA not after:            Thu 22 Aug 2024 18:52:59 +0000
asID:                     61592
IP address blocks:        2804:4c34:4001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:89:ce:42:9c:f7:28:3c:f5:29:24:26:40:df:92:d0:0c:30:a3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:59 2023 GMT
            Not After : Aug 22 18:52:59 2024 GMT
        Subject: CN=50B9A470A1633EA1DF158E4DB8D6C042DE22177F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:d5:53:aa:80:92:f4:f8:55:e9:78:e1:a5:
                    6b:f6:e8:b6:27:fe:40:57:98:44:18:bd:cc:9e:37:
                    ab:31:4e:67:d8:6e:b9:69:b6:f5:f8:e6:84:1f:0d:
                    ae:bc:e8:fc:1d:0a:47:a9:a4:14:29:25:62:a2:b0:
                    e5:0b:25:22:fb:71:6d:2a:40:2e:5e:48:5d:90:90:
                    b4:f6:be:52:8c:aa:41:bc:b5:3f:2a:04:4d:70:a8:
                    e2:4c:d9:38:f2:4d:a8:81:08:7d:a2:15:da:24:2b:
                    2d:06:57:99:6f:ec:ab:18:f8:7c:75:6c:5c:02:25:
                    fd:0f:9e:71:a2:f7:b7:91:ef:f6:ac:bb:95:10:18:
                    88:5f:6c:12:b9:b8:41:70:08:25:e8:a8:7a:65:1d:
                    ab:fd:5a:ba:ad:13:4e:f6:e8:ee:17:52:05:76:c5:
                    37:48:89:6b:4c:ea:f9:df:09:bb:6d:8d:2e:a6:b9:
                    f8:b2:7d:60:25:ce:6f:5b:3c:14:0e:1d:3a:93:9f:
                    f9:1c:97:52:49:41:19:71:b3:d6:9d:4d:44:66:b0:
                    1b:18:1f:79:d3:ef:0c:8b:75:38:32:fb:30:de:9a:
                    e6:5a:6a:87:b1:c7:b9:aa:df:eb:8b:55:0b:ec:42:
                    37:19:e1:76:f2:07:3c:7f:38:37:14:99:57:7e:be:
                    fb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B9:A4:70:A1:63:3E:A1:DF:15:8E:4D:B8:D6:C0:42:DE:22:17:7F
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030313a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:2f:e7:f2:91:af:2f:77:df:b1:1a:64:7e:3b:8e:c8:e9:40:
         06:a0:ff:bd:0d:59:5c:13:aa:e0:bf:ff:a8:8a:37:ed:f8:ff:
         d0:bd:a8:01:08:ca:6f:a9:19:42:f9:a1:84:6e:4f:b4:c1:b7:
         97:50:34:ce:81:7f:c1:b7:b9:4b:53:23:f9:ce:e2:2d:c1:a0:
         61:b3:fb:b6:a3:33:42:63:01:a9:66:70:cc:7f:bf:f8:09:18:
         7e:44:27:27:df:9b:d0:f8:da:ce:19:3b:20:c3:3a:10:53:6e:
         04:51:e0:9a:4e:b6:8d:c0:87:e1:72:86:24:58:80:a8:52:e4:
         00:01:3e:93:15:70:47:a7:04:03:a1:5b:5e:81:7a:3d:dd:5a:
         ff:46:d3:7c:65:4b:9b:8b:e9:3c:b8:ff:89:49:c5:fb:43:af:
         1c:0b:2d:54:fc:06:73:a8:0a:bf:e1:40:74:9d:54:c2:4e:21:
         5d:e1:a2:e5:ad:7a:14:12:61:04:29:0f:68:e7:60:47:bc:ae:
         a9:60:41:41:f7:78:b7:c0:22:3f:24:7f:18:b4:9d:c0:13:8b:
         be:80:42:ce:2e:9f:2b:a4:e8:55:77:ad:e6:3e:31:10:f4:77:
         58:33:d5:56:35:c1:4c:b5:98:12:bb:32:6f:28:a3:0f:55:69:
         3e:6f:d7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org