Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a383030303a3a2f33342d3334203d3e203631353932.roa
File:                     323830343a346333343a383030303a3a2f33342d3334203d3e203631353932.roa (raw, json)
Hash identifier:          yHkgp2t5XfPYaFYWnhAqp8Z9wG0F8GmVRpkS+rgqxP0=
Subject key identifier:   8E:DA:0A:37:31:16:AA:56:4D:99:3F:8E:D3:F1:F3:32:EC:50:FF:50
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       2101BDF143BE344D661C06E32A7389A61A9B3FCF
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a383030303a3a2f33342d3334203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:07 +0000
ROA not before:           Thu 24 Aug 2023 18:48:07 +0000
ROA not after:            Thu 22 Aug 2024 18:53:07 +0000
asID:                     61592
IP address blocks:        2804:4c34:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:01:bd:f1:43:be:34:4d:66:1c:06:e3:2a:73:89:a6:1a:9b:3f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:07 2023 GMT
            Not After : Aug 22 18:53:07 2024 GMT
        Subject: CN=8EDA0A373116AA564D993F8ED3F1F332EC50FF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:9d:cc:e1:1b:cf:d2:9c:d9:f3:b7:fc:50:63:
                    82:71:15:f0:c5:56:47:d1:e7:c9:c6:c0:be:8c:29:
                    df:79:f1:62:da:be:4b:30:64:58:7a:47:a2:b8:5c:
                    be:5a:f4:b4:39:29:fc:81:b8:7c:16:c0:ba:20:e1:
                    00:76:0f:fc:17:80:cf:9b:47:b1:31:6c:fd:e3:04:
                    e2:2c:00:d5:bb:dd:bd:5e:7b:d9:69:57:0f:01:44:
                    5b:20:7e:e4:64:53:9f:33:1b:d4:4c:83:1c:6b:73:
                    42:e6:8e:67:79:3e:e4:91:17:26:0f:24:f9:a1:49:
                    f8:70:ef:44:ec:84:1c:f7:40:0c:0a:66:42:05:81:
                    b5:db:26:e4:b5:96:bd:07:b7:d8:fa:cf:3b:2a:3b:
                    4a:34:a8:88:f7:77:83:75:74:00:b0:ef:5a:43:b5:
                    ad:51:de:fe:9c:56:1e:b6:9b:82:2e:81:b0:c5:c4:
                    08:14:0f:47:e4:a4:64:df:aa:d4:83:ed:cf:80:38:
                    0f:21:d7:5f:56:40:8a:41:12:4e:62:b2:93:86:9d:
                    a2:ff:00:12:e2:ad:c8:d3:ea:da:b8:70:08:cc:95:
                    78:20:61:92:fb:c6:55:45:07:83:2c:ed:fb:ed:cb:
                    1e:21:cd:a9:11:82:1a:51:50:57:dc:0e:b7:f8:16:
                    e4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DA:0A:37:31:16:AA:56:4D:99:3F:8E:D3:F1:F3:32:EC:50:FF:50
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a383030303a3a2f33342d3334203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:83:14:9e:db:eb:ab:39:ba:4a:87:24:d1:40:42:73:ec:a2:
         35:6a:fa:15:fd:51:8b:f8:e9:35:13:66:83:42:45:7d:73:fe:
         f1:cf:a4:4d:3e:d8:36:54:e7:a8:11:1c:4b:ed:0c:07:5d:6c:
         98:20:3f:3a:2d:b1:05:18:f5:11:84:a7:8f:00:92:97:22:b4:
         d1:df:50:8e:d4:c4:6d:8c:c2:57:5d:38:37:6c:4d:18:18:bb:
         ce:08:05:0f:4a:4f:2f:2c:8e:99:b8:a1:f0:ca:f2:54:03:a9:
         fa:e4:70:15:9d:65:6a:fa:54:61:7c:9d:23:0e:68:0d:b7:3c:
         c7:07:93:ac:bc:60:4e:48:64:0a:d6:f5:61:06:f0:0a:d6:b0:
         04:42:39:99:e0:37:c2:e9:59:51:38:ff:99:4a:d1:6c:d3:4f:
         b3:60:60:ba:f6:f0:5f:73:27:2e:5e:60:b5:c2:18:10:aa:b1:
         d6:0a:47:6d:67:9e:ee:a9:ca:cb:6b:03:45:4d:35:70:c6:12:
         1e:d1:2e:fb:65:8d:8d:8f:d7:ea:0b:6f:4f:2b:ed:38:14:12:
         7e:58:e9:a9:6c:cb:b7:99:4b:47:a1:4a:6b:a4:bc:70:40:c3:
         ca:d0:aa:41:24:9a:77:91:77:bc:4e:9a:e6:d6:f1:18:54:21:
         97:a3:4e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org