Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030343a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a343030343a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          /MKrcwRTsvogFYRPF5evfLvxQ0/3dpLywwIoCJHzBSM=
Subject key identifier:   EE:97:EA:A5:76:A7:10:3A:15:43:A0:F1:93:7F:BA:0B:08:E5:06:E3
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       31B05C62AC122CC2708C0822110488A1FF9A90AF
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030343a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:02 +0000
ROA not before:           Thu 24 Aug 2023 18:48:02 +0000
ROA not after:            Thu 22 Aug 2024 18:53:02 +0000
asID:                     61592
IP address blocks:        2804:4c34:4004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b0:5c:62:ac:12:2c:c2:70:8c:08:22:11:04:88:a1:ff:9a:90:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:02 2023 GMT
            Not After : Aug 22 18:53:02 2024 GMT
        Subject: CN=EE97EAA576A7103A1543A0F1937FBA0B08E506E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:b0:6a:32:41:80:c3:82:97:12:4d:21:4b:
                    c3:cf:36:c3:b6:8f:c2:87:ed:d4:be:59:d8:48:aa:
                    c5:18:fd:7b:ff:3f:77:4c:80:25:f2:a9:cb:64:77:
                    28:98:c2:72:11:e6:de:af:91:57:e9:e2:fb:cf:42:
                    06:d9:be:8a:be:a7:ca:74:05:53:57:30:90:25:d0:
                    0c:5a:2e:d8:85:ea:bd:e9:f8:e2:ff:51:39:93:f1:
                    6b:9f:26:d4:19:4d:f3:d6:c5:6e:d8:ca:ab:fc:4f:
                    ff:ce:c4:9b:61:f9:f1:12:62:45:62:9f:46:0c:50:
                    c4:63:ef:37:a3:25:dc:9c:37:f2:04:99:f0:07:9e:
                    fb:7e:9b:c9:ad:59:12:32:ea:f8:af:0a:5a:9e:c7:
                    2e:15:05:6d:1b:bb:4e:86:b0:6a:cb:55:63:50:55:
                    bc:e1:37:40:01:e8:ab:4e:86:18:fc:e2:e0:ca:9c:
                    ad:43:b7:f0:53:b9:b5:3e:14:21:cb:5c:47:8b:4d:
                    b8:5c:c3:df:71:da:83:4d:14:36:97:08:80:17:ed:
                    c8:bf:77:87:b0:b4:00:13:33:ab:95:f7:6c:61:84:
                    07:77:e3:a2:39:d8:f9:cb:2c:0a:1b:c8:d0:0d:6d:
                    62:35:c8:74:b6:24:44:f3:c7:e0:72:5b:a7:3a:9e:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:97:EA:A5:76:A7:10:3A:15:43:A0:F1:93:7F:BA:0B:08:E5:06:E3
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030343a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:4004::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:3d:7a:d0:22:16:8f:b5:36:c0:b2:3b:2c:fd:80:69:0f:
         15:5b:54:c6:6a:f2:4e:46:a5:03:49:16:f8:37:a7:c0:1f:92:
         68:74:aa:ef:16:a4:95:17:87:2f:79:22:73:b9:b1:d2:ae:d5:
         c4:f1:a1:bb:b9:ca:f4:ec:c7:2b:2b:cc:fc:ae:bb:49:9a:b3:
         41:41:09:f0:dc:2e:a4:4f:8d:a8:98:e2:05:eb:b4:81:fa:7b:
         51:20:cc:f9:7c:f7:6f:e1:6f:02:89:66:47:d6:af:8e:6a:c2:
         0d:41:12:f9:a1:34:c6:bb:ad:41:51:a6:fc:56:83:86:ec:e5:
         12:7e:f2:7f:f7:22:5d:e0:4c:13:72:3f:5b:52:ac:57:1a:86:
         e1:7e:74:b1:01:22:32:cb:44:59:63:ee:60:c6:ab:d7:4c:16:
         cc:eb:11:e6:2d:42:9f:30:8a:75:19:45:6d:a0:71:33:c3:94:
         67:56:c5:98:7a:4e:63:96:45:70:c3:e1:a0:c0:ab:4e:95:3e:
         5c:b1:9b:02:18:5d:c9:7d:6d:11:34:82:e8:71:eb:03:cc:7f:
         84:08:de:f2:22:d9:16:dc:c2:c2:e3:35:59:8c:b6:2f:7b:9e:
         52:19:cf:d6:58:60:a1:ba:06:47:eb:49:20:82:45:91:00:f1:
         b3:98:ae:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org