Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030353a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a343030353a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          eIA8iE06k5v2Mvz30Q7qXN1I3lcCjZ28TCF7c29lAB8=
Subject key identifier:   18:74:C7:94:ED:A6:BB:70:CE:1B:2A:8A:C4:A2:D5:9E:09:E5:F0:B8
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       5B854E2A13859A5AF8FFC14C151B535B2629FDE8
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030353a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:00 +0000
ROA not before:           Thu 24 Aug 2023 18:48:00 +0000
ROA not after:            Thu 22 Aug 2024 18:53:00 +0000
asID:                     61592
IP address blocks:        2804:4c34:4005::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:85:4e:2a:13:85:9a:5a:f8:ff:c1:4c:15:1b:53:5b:26:29:fd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:00 2023 GMT
            Not After : Aug 22 18:53:00 2024 GMT
        Subject: CN=1874C794EDA6BB70CE1B2A8AC4A2D59E09E5F0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:17:9d:94:47:a5:0f:d9:fe:d5:18:d1:b1:
                    d7:98:4c:b5:07:9e:d8:53:0c:84:68:73:26:5c:36:
                    e8:32:e8:b0:28:b6:26:13:a9:59:33:9c:4d:70:ca:
                    88:8c:3a:86:63:56:54:89:e8:9e:4c:51:5a:3c:0f:
                    df:ad:c4:ea:14:69:27:7d:64:a9:7e:9c:17:26:b1:
                    06:20:4b:1d:d6:b8:5f:5b:20:e1:f6:a3:87:d4:bd:
                    3c:22:7e:ff:a5:3a:84:2f:0d:b4:d3:49:b8:58:53:
                    3c:df:f6:c6:98:bd:85:09:24:5d:84:ec:34:c9:e6:
                    24:ef:a2:bb:77:73:4f:5c:a5:9c:d0:3f:3a:00:d7:
                    49:93:1a:ef:6a:10:5e:86:21:3e:e6:8f:ce:16:d6:
                    07:a9:f3:03:6a:20:c5:98:df:95:c6:02:74:ab:b7:
                    66:fe:1a:89:d3:7e:0f:d2:a2:7c:da:1a:f6:44:c4:
                    94:a9:86:52:8c:0f:5b:de:9a:e8:2e:9f:9b:ac:66:
                    29:5f:7f:5f:7e:f1:c6:39:89:36:6e:36:ef:f5:61:
                    b2:83:e8:d1:d4:52:6e:65:c3:d5:c2:c8:05:58:f2:
                    7c:ff:b9:06:b4:40:59:ad:f2:2d:21:bd:81:b6:31:
                    17:3a:b2:fb:d2:ee:87:09:c0:0e:81:47:74:f5:54:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:74:C7:94:ED:A6:BB:70:CE:1B:2A:8A:C4:A2:D5:9E:09:E5:F0:B8
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030353a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:4005::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:64:22:84:ef:b0:dd:60:c1:48:6b:ba:82:90:11:28:a1:17:
         b3:6c:e5:71:4e:87:4a:65:75:5e:4b:dc:db:9f:21:2c:0b:d8:
         cb:d1:0c:38:40:e7:53:e8:59:83:90:a8:e2:5c:d0:f6:aa:fb:
         f5:74:67:ed:7d:4a:de:1a:56:5c:f0:5f:0a:7f:17:a9:c4:a6:
         62:cd:00:41:bd:37:1a:1c:fe:b7:39:13:9f:a3:b9:fc:70:33:
         3a:e3:d1:11:a6:8b:0d:01:f6:ba:dc:bf:1e:99:36:09:62:98:
         cb:95:be:af:37:31:de:28:ac:03:f7:05:f4:5d:ec:a9:12:17:
         57:04:77:82:62:86:5f:05:5b:d2:99:ef:1e:93:d7:8a:de:5c:
         8e:84:af:a8:0f:79:ac:a8:be:1c:57:1c:75:3d:ab:a0:b1:17:
         7e:4d:0f:a4:f0:f4:d0:9a:be:8c:60:68:9e:a9:a2:89:11:65:
         2c:2a:fa:14:de:f5:ee:f2:d4:22:4b:59:a1:44:a6:f3:b2:93:
         fc:e0:c2:78:f2:e0:23:a5:06:93:4c:4a:3a:fe:13:a9:2e:ef:
         b0:78:e2:25:26:46:74:96:f6:26:ff:c8:22:e5:4c:b8:57:97:
         f1:ce:78:9b:6f:f6:3b:ec:4c:b9:2d:2e:2c:19:0c:02:50:ac:
         b8:38:00:bb
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUW4VOKhOFmlr4/8FMFRtTWyYp/egwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDBaFw0yNDA4MjIxODUzMDBaMDMxMTAvBgNV
BAMTKDE4NzRDNzk0RURBNkJCNzBDRTFCMkE4QUM0QTJENTlFMDlFNUYwQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG5RedlEelD9n+1RjRsdeYTLUH
nthTDIRocyZcNugy6LAotiYTqVkznE1wyoiMOoZjVlSJ6J5MUVo8D9+txOoUaSd9
ZKl+nBcmsQYgSx3WuF9bIOH2o4fUvTwifv+lOoQvDbTTSbhYUzzf9saYvYUJJF2E
7DTJ5iTvort3c09cpZzQPzoA10mTGu9qEF6GIT7mj84W1gep8wNqIMWY35XGAnSr
t2b+GonTfg/SonzaGvZExJSphlKMD1vemugun5usZilff19+8cY5iTZuNu/1YbKD
6NHUUm5lw9XCyAVY8nz/uQa0QFmt8i0hvYG2MRc6svvS7ocJwA6BR3T1VMxdAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUGHTHlO2mu3DOGyqKxKLVngnl8LgwHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2EzNDMwMzAzNTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0QAUwDQYJKoZIhvcNAQELBQAD
ggEBAIBkIoTvsN1gwUhruoKQESihF7Ns5XFOh0pldV5L3NufISwL2MvRDDhA51Po
WYOQqOJc0Paq+/V0Z+19St4aVlzwXwp/F6nEpmLNAEG9Nxoc/rc5E5+jufxwMzrj
0RGmiw0B9rrcvx6ZNglimMuVvq83Md4orAP3BfRd7KkSF1cEd4Jihl8FW9KZ7x6T
14reXI6Er6gPeayovhxXHHU9q6CxF35ND6Tw9NCavoxgaJ6pookRZSwq+hTe9e7y
1CJLWaFEpvOyk/zgwnjy4COlBpNMSjr+E6ku77B44iUmRnSW9ib/yCLlTLhXl/HO
eJtv9jvsTLktLiwZDAJQrLg4ALs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:35 2025 by rpki-client