Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          lA4DZMuLJXK3zuVml3TMk1xe6ALjrrn//DIDEKpJF3w=
Subject key identifier:   41:09:B2:8B:20:5C:90:3E:4A:56:C9:48:FC:1E:AC:0D:8B:C9:62:B0
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       3D47CC01E915B0E13B88BE9945072D5FB52BC730
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a3a2f33362d3336203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:05 +0000
ROA not before:           Thu 24 Aug 2023 18:48:05 +0000
ROA not after:            Thu 22 Aug 2024 18:53:05 +0000
asID:                     61592
IP address blocks:        2804:4c34::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:47:cc:01:e9:15:b0:e1:3b:88:be:99:45:07:2d:5f:b5:2b:c7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:05 2023 GMT
            Not After : Aug 22 18:53:05 2024 GMT
        Subject: CN=4109B28B205C903E4A56C948FC1EAC0D8BC962B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:03:67:ef:93:ab:ab:96:f8:78:4a:87:66:
                    69:a6:09:0a:29:a6:73:ca:9d:85:b6:df:c1:d7:88:
                    fe:44:d4:43:af:31:e5:e0:0d:a6:48:14:9a:29:55:
                    3c:b9:b9:9a:a0:43:bf:ce:d6:02:3c:02:bc:0f:df:
                    18:90:53:80:01:0a:43:cd:29:5a:26:de:7c:23:bc:
                    be:9d:46:65:19:e1:74:af:91:11:c3:94:dc:20:99:
                    da:bf:a0:ca:48:3e:b8:6d:6d:88:1f:e0:5c:02:91:
                    a7:bd:e7:79:28:bd:71:e3:7f:9e:98:71:ac:b7:25:
                    fc:64:36:9e:16:f4:d2:67:a0:28:59:46:3b:f6:f8:
                    ad:36:19:38:d3:d6:0f:f4:71:7d:fa:26:98:43:dc:
                    fd:6e:43:50:45:ba:d2:fd:f7:7f:c0:02:6f:e3:1b:
                    8a:2b:14:1a:20:48:b3:c7:1d:9a:87:90:d7:72:e5:
                    e1:34:9b:4e:f6:50:32:00:54:90:46:46:13:96:cd:
                    35:0b:11:68:28:67:5b:8c:c7:ac:e8:17:37:ca:e1:
                    08:24:6d:8e:7b:7f:87:1e:f6:53:ad:99:1c:d6:0e:
                    e4:94:ae:f2:87:06:31:56:60:0f:36:7e:21:c1:95:
                    c1:2a:15:84:c6:b3:79:f5:50:a3:4d:32:2b:a1:19:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:09:B2:8B:20:5C:90:3E:4A:56:C9:48:FC:1E:AC:0D:8B:C9:62:B0
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34::/36

    Signature Algorithm: sha256WithRSAEncryption
         4e:d2:e0:a9:68:b8:b2:49:79:99:4b:d7:eb:1a:4a:a8:62:23:
         fc:fe:64:5f:cb:6d:32:cf:8e:13:d3:c6:f6:08:e7:38:e7:16:
         89:41:44:77:a8:6e:60:ca:61:59:7f:2d:42:0f:be:c5:d9:d2:
         24:4b:5f:43:79:76:83:6a:e4:22:38:46:41:e6:3b:8f:74:92:
         ca:b8:dd:04:23:35:75:0c:33:8a:a8:80:96:3b:13:c1:d8:6b:
         4d:9b:76:40:4d:6d:7c:c5:66:4f:19:08:83:e6:51:b9:ef:d7:
         2c:ff:ae:1d:ec:16:64:ca:13:68:a7:26:a2:e5:fd:d1:27:0c:
         68:fc:4b:65:9b:ab:7c:87:03:b7:b6:11:45:a9:8b:0f:d7:3b:
         6c:8f:4f:dc:94:48:25:e5:c7:7b:d1:33:5c:f4:b9:ec:a0:93:
         25:27:94:2e:f9:90:50:85:bd:47:fa:37:f9:bc:51:2b:87:3a:
         96:9c:83:f6:b5:80:2d:7b:1a:41:77:02:fc:b4:ff:e8:a9:87:
         a5:40:51:77:bd:a3:2e:a7:b3:95:d1:c1:95:c8:73:f3:6d:eb:
         fd:c7:29:fe:92:83:eb:f0:e2:07:ca:40:5d:9f:f2:fb:d7:22:
         4a:ca:39:59:45:50:54:07:b3:f6:de:1c:05:14:a6:8b:7a:52:
         e9:c5:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org