Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030363a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a343030363a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          rTLOWkGkXy2yWPtVlvOjjVzJyBNKkHqMVPsf+RTHYWc=
Subject key identifier:   0F:43:88:CB:35:CF:12:34:9E:15:D8:8B:58:2C:39:59:EB:DE:FB:0C
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       0F6DCDF87C132D6271CE64C904DFD0DAABC2FBCB
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030363a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:58 +0000
ROA not before:           Thu 24 Aug 2023 18:47:58 +0000
ROA not after:            Thu 22 Aug 2024 18:52:58 +0000
asID:                     61592
IP address blocks:        2804:4c34:4006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6d:cd:f8:7c:13:2d:62:71:ce:64:c9:04:df:d0:da:ab:c2:fb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:58 2023 GMT
            Not After : Aug 22 18:52:58 2024 GMT
        Subject: CN=0F4388CB35CF12349E15D88B582C3959EBDEFB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:14:ff:03:07:e7:20:c2:49:f3:5e:7e:22:
                    7d:e7:54:f0:b8:66:c4:46:25:93:7c:a1:c5:42:51:
                    b2:fa:d7:ef:d5:bb:e7:0b:70:8d:35:51:18:ae:83:
                    94:7a:93:a8:78:f4:51:9d:bd:d7:71:e6:5f:3c:dc:
                    d5:d2:70:83:f6:58:3d:be:52:16:94:8e:fa:c1:15:
                    dc:96:e4:19:76:c5:94:75:1d:37:47:02:03:10:ae:
                    30:49:4a:42:d7:01:4e:db:52:3a:b2:5c:7d:2d:96:
                    0d:c5:11:e9:a2:2d:01:05:d5:85:79:92:ce:be:de:
                    f6:78:0a:a6:6d:56:3a:9b:18:16:6f:50:8d:d5:ae:
                    5e:c0:e3:8a:b7:6d:52:f3:4b:ba:75:c1:fd:e1:e3:
                    5b:3e:ce:58:67:f2:de:cf:b0:48:1b:dd:c1:1f:83:
                    0c:a3:ab:27:76:e8:0e:60:62:f1:56:e6:ec:4d:37:
                    b0:01:41:65:a3:1a:40:6d:ea:73:84:d4:4a:4a:3d:
                    c6:ba:bc:9d:2f:78:a4:30:c1:b8:ec:bf:ae:23:00:
                    c0:4b:0d:4c:e5:b6:1e:77:98:2c:c9:78:60:1f:9f:
                    51:4f:be:73:f9:47:da:ce:5f:ee:55:c1:af:4a:2a:
                    2f:4e:88:66:15:60:fd:19:56:8a:f9:86:51:aa:ac:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:43:88:CB:35:CF:12:34:9E:15:D8:8B:58:2C:39:59:EB:DE:FB:0C
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030363a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:4006::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:dd:03:67:67:f7:61:20:e1:12:2e:ae:88:d5:f0:1e:f6:f5:
         1c:ef:2d:d8:b6:48:8e:3c:86:0b:da:65:25:12:8e:43:9e:6e:
         09:79:f2:86:0d:88:38:45:05:a2:e8:54:80:4c:d0:bb:54:0b:
         15:2b:31:5e:1a:9f:19:91:d8:35:3e:df:07:72:c7:e1:f2:67:
         a7:ba:d6:99:82:7b:3e:97:2d:0d:cc:46:0c:bf:bd:f7:72:fd:
         8a:75:31:d6:20:44:23:16:f6:a3:cc:d8:b4:7e:5f:67:49:e5:
         72:3b:3b:03:77:c4:9d:68:6f:27:28:38:49:1f:fc:ad:73:43:
         9f:5e:16:ba:bf:a4:3e:11:99:87:69:fd:79:f2:6d:0b:b8:a0:
         ee:d6:4c:0a:80:92:a2:90:4f:6f:64:5e:b1:8f:9d:1d:e4:bf:
         22:50:f2:9e:59:8b:69:28:a0:07:82:34:a8:f2:52:f9:ed:b0:
         e7:a4:dc:e4:c1:52:d6:e2:05:7f:9f:30:b9:ab:0f:b2:25:cf:
         fb:56:f9:d3:0f:83:a1:8e:e7:9c:b4:56:e2:68:f4:04:81:d4:
         a1:97:85:23:cb:96:06:0e:07:cf:ff:86:80:03:c0:84:42:38:
         22:cd:48:bc:10:84:ae:69:0b:1f:0e:7c:21:86:ca:53:94:11:
         4e:39:a6:8a
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUD23N+HwTLWJxzmTJBN/Q2qvC+8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ3NThaFw0yNDA4MjIxODUyNThaMDMxMTAvBgNV
BAMTKDBGNDM4OENCMzVDRjEyMzQ5RTE1RDg4QjU4MkMzOTU5RUJERUZCMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBhxT/AwfnIMJJ815+In3nVPC4
ZsRGJZN8ocVCUbL61+/Vu+cLcI01URiug5R6k6h49FGdvddx5l883NXScIP2WD2+
UhaUjvrBFdyW5Bl2xZR1HTdHAgMQrjBJSkLXAU7bUjqyXH0tlg3FEemiLQEF1YV5
ks6+3vZ4CqZtVjqbGBZvUI3Vrl7A44q3bVLzS7p1wf3h41s+zlhn8t7PsEgb3cEf
gwyjqyd26A5gYvFW5uxNN7ABQWWjGkBt6nOE1EpKPca6vJ0veKQwwbjsv64jAMBL
DUzlth53mCzJeGAfn1FPvnP5R9rOX+5Vwa9KKi9OiGYVYP0ZVor5hlGqrGqVAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUD0OIyzXPEjSeFdiLWCw5Weve+wwwHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2EzNDMwMzAzNjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0QAYwDQYJKoZIhvcNAQELBQAD
ggEBADjdA2dn92Eg4RIurojV8B729RzvLdi2SI48hgvaZSUSjkOebgl58oYNiDhF
BaLoVIBM0LtUCxUrMV4anxmR2DU+3wdyx+HyZ6e61pmCez6XLQ3MRgy/vfdy/Yp1
MdYgRCMW9qPM2LR+X2dJ5XI7OwN3xJ1obycoOEkf/K1zQ59eFrq/pD4RmYdp/Xny
bQu4oO7WTAqAkqKQT29kXrGPnR3kvyJQ8p5Zi2kooAeCNKjyUvntsOek3OTBUtbi
BX+fMLmrD7Ilz/tW+dMPg6GO55y0VuJo9ASB1KGXhSPLlgYOB8//hoADwIRCOCLN
SLwQhK5pCx8OfCGGylOUEU45poo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:04 2025 by rpki-client