Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030323a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a343030323a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          tfB+GodoIxVaACpra7gAQatx2Fuijw57bkUd4sitk64=
Subject key identifier:   A0:DB:57:A8:90:AA:5C:20:5B:6D:F1:CC:B6:14:C9:31:B6:17:AA:9B
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       38B9A1676BABBAD324022FCB8D64DF0EFEC55CFE
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030323a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:05 +0000
ROA not before:           Thu 24 Aug 2023 18:48:05 +0000
ROA not after:            Thu 22 Aug 2024 18:53:05 +0000
asID:                     61592
IP address blocks:        2804:4c34:4002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b9:a1:67:6b:ab:ba:d3:24:02:2f:cb:8d:64:df:0e:fe:c5:5c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:05 2023 GMT
            Not After : Aug 22 18:53:05 2024 GMT
        Subject: CN=A0DB57A890AA5C205B6DF1CCB614C931B617AA9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:85:c4:e6:d4:10:50:11:75:83:10:e4:de:
                    71:71:2a:91:3e:02:10:f9:43:c7:64:03:a3:23:46:
                    b0:9c:a9:d6:e3:9c:30:56:fe:3f:0e:27:98:2b:c3:
                    12:61:ec:25:51:ec:c1:99:8f:83:4e:8a:42:f7:37:
                    30:70:54:51:40:17:bb:88:71:93:f9:b1:89:b0:5a:
                    99:66:8d:de:18:4f:e3:5a:b5:ab:fc:c7:8d:eb:2f:
                    f3:cb:b0:3d:43:6e:54:e4:5c:50:2c:21:38:0f:6d:
                    cf:04:0f:ea:56:23:d0:f0:16:7d:06:4b:bc:32:a0:
                    b5:27:b8:06:0f:ad:3b:4b:ca:e0:74:16:d9:e1:ae:
                    91:80:4d:e3:55:42:c4:be:9e:03:01:c0:79:ac:43:
                    0d:05:e5:0d:b4:1b:06:10:e3:9e:a3:1b:d5:e7:71:
                    ca:0c:0c:04:8b:5d:95:38:ea:8f:a3:36:63:a7:58:
                    eb:e3:d5:b9:b6:20:43:d3:71:cc:d9:d7:de:86:65:
                    4d:38:67:f7:2d:90:e8:90:09:42:f9:3f:6f:1c:f8:
                    1c:5f:9b:36:2c:be:7a:0e:af:b8:a9:29:67:92:e1:
                    6d:49:2e:1f:c0:ab:28:34:3a:3a:e5:c5:8c:45:a4:
                    68:30:23:c2:46:6b:38:91:2e:f1:22:d6:a5:30:04:
                    34:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DB:57:A8:90:AA:5C:20:5B:6D:F1:CC:B6:14:C9:31:B6:17:AA:9B
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030323a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:4002::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:6e:21:54:57:a3:8c:2a:e4:26:4e:74:f6:1e:b7:54:4f:b8:
         57:87:40:50:d7:b1:81:e1:8e:be:e0:c5:2c:a9:34:07:7f:a0:
         b6:41:74:aa:27:1e:8d:1e:9b:99:8c:8f:7f:59:cc:11:32:81:
         84:87:ec:8d:15:3f:f5:51:39:8e:81:62:2f:c0:d5:1e:2a:a2:
         e7:41:ee:ed:b2:58:a8:51:14:05:04:f4:2d:a8:1f:e3:8c:08:
         ac:10:03:47:81:2d:b6:3a:0b:19:cc:48:41:6e:23:02:8a:de:
         c6:d6:7e:23:04:9c:9b:51:0a:02:e6:ea:12:79:ec:52:18:ad:
         0e:c3:3d:f3:34:33:41:de:53:45:0f:6f:6c:6a:5f:24:c5:cc:
         9e:31:c3:e2:f0:ff:a5:1e:e4:2b:95:a9:50:94:d5:c0:2a:83:
         1b:32:f9:5b:f7:47:4e:4a:28:3c:bc:d0:3e:c5:4f:e9:66:68:
         39:eb:df:94:09:ad:e0:ee:3b:07:f1:97:ef:bc:35:ee:f4:73:
         67:4d:fd:25:50:b7:2d:a9:52:36:42:b2:58:6a:b1:a7:9b:5d:
         5d:e1:a6:53:e6:4f:a5:6b:75:f9:b6:04:ba:ff:52:4f:8e:db:
         90:b3:52:7e:bd:8d:16:9c:99:96:af:94:be:14:0b:03:8e:20:
         48:92:97:03
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUOLmhZ2urutMkAi/LjWTfDv7FXP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDVaFw0yNDA4MjIxODUzMDVaMDMxMTAvBgNV
BAMTKEEwREI1N0E4OTBBQTVDMjA1QjZERjFDQ0I2MTRDOTMxQjYxN0FBOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXoXE5tQQUBF1gxDk3nFxKpE+
AhD5Q8dkA6MjRrCcqdbjnDBW/j8OJ5grwxJh7CVR7MGZj4NOikL3NzBwVFFAF7uI
cZP5sYmwWplmjd4YT+Natav8x43rL/PLsD1DblTkXFAsITgPbc8ED+pWI9DwFn0G
S7wyoLUnuAYPrTtLyuB0FtnhrpGATeNVQsS+ngMBwHmsQw0F5Q20GwYQ456jG9Xn
ccoMDASLXZU46o+jNmOnWOvj1bm2IEPTcczZ196GZU04Z/ctkOiQCUL5P28c+Bxf
mzYsvnoOr7ipKWeS4W1JLh/Aqyg0OjrlxYxFpGgwI8JGaziRLvEi1qUwBDSLAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUoNtXqJCqXCBbbfHMthTJMbYXqpswHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2EzNDMwMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0QAIwDQYJKoZIhvcNAQELBQAD
ggEBACFuIVRXo4wq5CZOdPYet1RPuFeHQFDXsYHhjr7gxSypNAd/oLZBdKonHo0e
m5mMj39ZzBEygYSH7I0VP/VROY6BYi/A1R4qoudB7u2yWKhRFAUE9C2oH+OMCKwQ
A0eBLbY6CxnMSEFuIwKK3sbWfiMEnJtRCgLm6hJ57FIYrQ7DPfM0M0HeU0UPb2xq
XyTFzJ4xw+Lw/6Ue5CuVqVCU1cAqgxsy+Vv3R05KKDy80D7FT+lmaDnr35QJreDu
Owfxl++8Ne70c2dN/SVQty2pUjZCslhqsaebXV3hplPmT6Vrdfm2BLr/Uk+O25Cz
Un69jRacmZavlL4UCwOOIEiSlwM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org