Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030393a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a343030393a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          3MzAUH7wgMO99qgdn19kZSHXYeJxMW9836l5OECNgN0=
Subject key identifier:   52:52:21:9B:0F:2A:5A:88:E6:C0:36:D5:A2:1D:E2:43:B6:BD:4F:0C
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       4C1B3F3C71A65878D2986E626F78CDB72EE1D3C7
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030393a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:58 +0000
ROA not before:           Thu 24 Aug 2023 18:47:58 +0000
ROA not after:            Thu 22 Aug 2024 18:52:58 +0000
asID:                     61592
IP address blocks:        2804:4c34:4009::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1b:3f:3c:71:a6:58:78:d2:98:6e:62:6f:78:cd:b7:2e:e1:d3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:58 2023 GMT
            Not After : Aug 22 18:52:58 2024 GMT
        Subject: CN=5252219B0F2A5A88E6C036D5A21DE243B6BD4F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:8a:69:aa:39:7f:30:25:a5:66:44:33:67:
                    05:6e:c4:78:1e:f8:30:92:ee:a8:b0:a0:66:7e:be:
                    61:e9:93:28:fd:48:b2:a1:04:77:1c:51:9a:08:cb:
                    c0:dc:53:69:30:14:1d:42:f7:c2:c3:aa:b0:3e:4f:
                    e7:dc:4a:e1:89:cf:51:0f:3f:d4:c7:f3:bc:41:dc:
                    76:f3:06:c8:4b:62:57:41:7d:b0:84:21:0c:c9:c4:
                    76:a6:60:0f:9b:b8:b5:d1:71:b3:c2:d4:3a:16:21:
                    1e:d8:31:a2:b4:a2:da:a2:5a:7d:b1:4e:df:04:fc:
                    38:93:6c:ed:07:b4:2b:3f:cf:49:e9:68:6a:b5:f3:
                    1a:b7:9d:e0:27:1b:0e:e2:f2:25:ff:65:ee:7e:1f:
                    45:52:16:39:8e:4e:5a:34:8a:78:b2:2f:a9:d0:38:
                    68:62:ca:74:d5:0f:40:4d:7c:96:df:16:af:c5:0f:
                    b9:e3:ea:e3:64:31:a0:5e:94:28:eb:60:19:64:fe:
                    eb:c1:a5:17:c9:fd:bc:7a:38:44:ed:3e:27:cf:3e:
                    28:b3:86:c3:05:e8:5a:1a:71:1b:ae:16:23:b2:07:
                    5f:07:62:08:15:fc:fe:ba:8a:e3:2d:3f:19:6b:5e:
                    a3:04:1b:9a:7b:e3:5b:a4:eb:71:9c:31:21:61:8b:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:52:21:9B:0F:2A:5A:88:E6:C0:36:D5:A2:1D:E2:43:B6:BD:4F:0C
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030393a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:4009::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:1d:d1:f5:54:45:4d:c0:df:a6:89:12:d4:72:30:07:04:e8:
         c9:66:54:d6:3e:2c:ef:66:4b:9b:01:39:d0:2c:d1:0e:36:8c:
         f8:7d:76:e0:e1:6c:05:df:8e:1d:53:28:3b:b7:63:25:8a:36:
         f9:e3:1c:f9:3a:50:64:bc:c5:79:c6:98:a7:a2:f7:a7:24:32:
         ab:79:f0:40:3b:b3:63:12:fa:8b:30:bb:9a:c6:ec:88:b9:18:
         a9:b0:4d:4b:36:ac:24:47:ff:31:e2:4c:fb:dd:91:1d:3b:64:
         47:7e:51:f8:45:89:3d:42:b7:db:2f:06:a6:52:e0:bd:75:8a:
         e6:f0:0c:ea:85:ca:cd:a3:bc:d3:5a:05:0a:50:35:ec:05:d1:
         75:ab:45:97:bf:b4:95:3b:c2:fd:eb:e1:4f:81:85:53:ff:d5:
         f9:a2:45:b5:46:5f:91:7f:06:e5:d6:aa:5a:9e:3c:d5:15:33:
         77:2f:bd:65:06:db:46:61:74:5e:e9:7a:39:27:46:6c:72:a4:
         29:0b:ab:10:b4:3c:70:70:e4:df:33:2f:e0:c5:e2:d6:92:d6:
         9f:68:68:92:2e:15:cd:cf:1d:ba:7d:be:5f:29:07:bb:7b:9f:
         ec:ac:97:c6:33:96:70:3d:72:79:5f:2a:e5:68:89:a8:8f:64:
         9d:97:3c:c7
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUTBs/PHGmWHjSmG5ib3jNty7h08cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ3NThaFw0yNDA4MjIxODUyNThaMDMxMTAvBgNV
BAMTKDUyNTIyMTlCMEYyQTVBODhFNkMwMzZENUEyMURFMjQzQjZCRDRGMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72oppqjl/MCWlZkQzZwVuxHge
+DCS7qiwoGZ+vmHpkyj9SLKhBHccUZoIy8DcU2kwFB1C98LDqrA+T+fcSuGJz1EP
P9TH87xB3HbzBshLYldBfbCEIQzJxHamYA+buLXRcbPC1DoWIR7YMaK0otqiWn2x
Tt8E/DiTbO0HtCs/z0npaGq18xq3neAnGw7i8iX/Ze5+H0VSFjmOTlo0iniyL6nQ
OGhiynTVD0BNfJbfFq/FD7nj6uNkMaBelCjrYBlk/uvBpRfJ/bx6OETtPifPPiiz
hsMF6FoacRuuFiOyB18HYggV/P66iuMtPxlrXqMEG5p741uk63GcMSFhi/WDAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUUlIhmw8qWojmwDbVoh3iQ7a9TwwwHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2EzNDMwMzAzOTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0QAkwDQYJKoZIhvcNAQELBQAD
ggEBAG8d0fVURU3A36aJEtRyMAcE6MlmVNY+LO9mS5sBOdAs0Q42jPh9duDhbAXf
jh1TKDu3YyWKNvnjHPk6UGS8xXnGmKei96ckMqt58EA7s2MS+oswu5rG7Ii5GKmw
TUs2rCRH/zHiTPvdkR07ZEd+UfhFiT1Ct9svBqZS4L11iubwDOqFys2jvNNaBQpQ
NewF0XWrRZe/tJU7wv3r4U+BhVP/1fmiRbVGX5F/BuXWqlqePNUVM3cvvWUG20Zh
dF7pejknRmxypCkLqxC0PHBw5N8zL+DF4taS1p9oaJIuFc3PHbp9vl8pB7t7n+ys
l8YzlnA9cnlfKuVoiaiPZJ2XPMc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org