Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a363030303a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a363030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          Xvr38yt7FfZXaov2RcVkXtaV03A9G3cMqiyRc31Kr6s=
Subject key identifier:   8B:85:7E:04:70:9B:B4:E2:06:0E:C2:7C:8A:29:0C:55:9D:D5:B1:A8
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       1CAC5B06D78EBAEF9E1FFF367D092D6DD3FFF535
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a363030303a3a2f33362d3336203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:04 +0000
ROA not before:           Thu 24 Aug 2023 18:48:04 +0000
ROA not after:            Thu 22 Aug 2024 18:53:04 +0000
asID:                     61592
IP address blocks:        2804:4c34:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ac:5b:06:d7:8e:ba:ef:9e:1f:ff:36:7d:09:2d:6d:d3:ff:f5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:04 2023 GMT
            Not After : Aug 22 18:53:04 2024 GMT
        Subject: CN=8B857E04709BB4E2060EC27C8A290C559DD5B1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:ff:9a:21:2c:5a:52:02:9b:2d:a6:88:87:
                    69:f7:c8:90:2f:6a:10:01:aa:ac:0e:ec:34:bc:3f:
                    0f:f2:25:d6:3c:c8:bd:ab:49:4f:7a:34:86:a0:91:
                    ff:04:fe:a5:44:03:bb:f6:e3:4e:e4:fa:71:75:29:
                    e6:95:10:c8:ee:da:9f:d5:df:a1:7b:06:78:83:7b:
                    08:f4:97:94:9a:e7:a6:fa:c1:5e:a4:70:a4:1e:8b:
                    54:5a:34:82:f5:14:f1:a1:5f:f5:68:78:77:d2:14:
                    a5:15:b5:9f:3b:a8:76:db:9f:0f:10:ad:73:7f:87:
                    d6:33:b6:ae:8e:49:aa:62:9f:e6:4c:1f:fe:de:92:
                    25:34:e3:35:37:89:5e:e8:8e:50:ed:12:ec:fc:9f:
                    af:e3:9f:10:a4:1d:e0:94:f7:00:4e:97:80:53:84:
                    6d:24:38:52:af:ed:45:fc:64:69:e6:d4:d2:41:23:
                    1f:d2:58:6c:8f:78:28:a5:ba:3d:a7:c4:98:70:de:
                    9a:35:81:45:66:10:07:fe:83:85:30:1d:c4:ee:96:
                    dc:b8:ad:1b:b0:b9:9a:d7:b8:70:62:67:47:78:af:
                    ac:b0:9b:f8:81:25:f0:ad:87:05:11:09:6b:b6:4c:
                    7e:ca:f9:c4:89:57:ce:03:fb:88:12:e9:f0:c5:28:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:85:7E:04:70:9B:B4:E2:06:0E:C2:7C:8A:29:0C:55:9D:D5:B1:A8
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a363030303a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         93:46:ad:4f:dd:a5:05:a9:13:fd:65:cf:71:28:7e:a6:24:81:
         38:1b:b7:85:0d:96:2b:2d:29:ea:95:dd:7e:99:b1:6c:ee:07:
         ed:35:61:85:49:20:73:34:77:b1:27:a6:f9:67:20:6d:a3:32:
         67:87:6f:0a:10:07:06:03:78:33:87:6c:65:e0:fb:40:23:21:
         36:f1:29:ed:34:aa:4c:bc:ea:4c:8f:aa:9d:32:e4:d1:18:d7:
         e9:13:aa:29:00:ff:61:3a:1a:15:0e:dc:b1:63:29:c8:31:f3:
         15:a9:8c:d4:34:11:9e:55:9d:fd:37:58:02:df:e7:cd:60:9a:
         e7:5f:f8:11:d1:45:cf:44:0f:0b:22:9f:9b:e9:a8:95:95:da:
         65:57:87:d7:f3:ad:96:35:22:d3:0c:2d:5f:94:7a:d8:59:8a:
         7f:0b:4a:05:11:7d:2c:0a:c7:d2:eb:0f:6d:aa:3a:f6:f9:5e:
         dd:b1:02:15:93:8e:77:ee:79:a9:c6:3a:fc:53:f9:ea:05:b2:
         4c:f8:b7:9b:8b:ae:be:58:6f:a6:a4:3e:9a:51:53:7e:a6:f2:
         81:2c:d0:56:47:e4:21:39:d2:4a:42:b2:a1:a4:31:a5:ed:8d:
         eb:14:47:a8:89:98:e0:51:40:bf:ef:30:ce:21:53:ab:ae:bc:
         da:79:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org