Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a613030303a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a613030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          wt6qJ7X/OgWrP8S7zghC+84BWqpAgn0iAHgmPqnMgaA=
Subject key identifier:   B4:D5:A4:52:25:8A:1C:37:A1:6A:FD:FE:30:DB:19:4A:63:57:32:E8
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       172D3E2C79427CEEF4AC48E96803FA3B2E2D5C51
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a613030303a3a2f33362d3336203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:04 +0000
ROA not before:           Thu 24 Aug 2023 18:48:04 +0000
ROA not after:            Thu 22 Aug 2024 18:53:04 +0000
asID:                     61592
IP address blocks:        2804:4c34:a000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2d:3e:2c:79:42:7c:ee:f4:ac:48:e9:68:03:fa:3b:2e:2d:5c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:04 2023 GMT
            Not After : Aug 22 18:53:04 2024 GMT
        Subject: CN=B4D5A452258A1C37A16AFDFE30DB194A635732E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:38:d2:f1:ea:42:e0:42:6e:5c:df:12:75:b4:
                    50:79:bf:05:90:d8:67:51:29:18:ee:7b:7f:0b:32:
                    01:a5:e0:3b:fe:68:b5:e3:45:a1:5f:11:73:3e:44:
                    d3:67:01:ac:35:b5:97:6b:55:1d:bf:61:6f:0f:7f:
                    c8:bd:a5:bc:dd:13:92:77:74:6b:aa:23:5c:d9:16:
                    cb:f8:5c:af:55:2b:72:dc:13:df:92:b1:6b:c0:d0:
                    67:d6:46:98:e2:92:c8:27:2a:29:d7:c5:01:d8:ef:
                    11:c3:a2:de:48:51:07:2c:f3:e8:df:20:91:19:f3:
                    97:f1:c6:f7:e6:84:79:d8:12:ca:cc:38:14:df:3e:
                    85:34:5c:41:18:40:56:7d:76:14:53:a2:ed:96:70:
                    46:f6:bf:9f:a4:75:4e:f1:e8:c5:8c:4d:05:52:ec:
                    93:02:d0:fd:79:fe:c0:98:3b:43:53:d8:66:8e:31:
                    66:34:9f:3d:e9:a8:71:59:87:54:8d:61:6c:ca:14:
                    d5:3d:15:dc:77:8d:7f:2a:9b:b2:ae:46:da:dc:9c:
                    59:cf:0a:bf:2d:dc:a3:04:b4:c6:55:c4:85:27:85:
                    02:f3:55:c5:a3:db:7c:52:22:ba:4b:aa:8f:0c:fc:
                    dd:47:3b:2a:57:4e:41:2d:a0:23:5b:3e:9f:a7:1c:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D5:A4:52:25:8A:1C:37:A1:6A:FD:FE:30:DB:19:4A:63:57:32:E8
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a613030303a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:39:52:22:97:7e:3d:47:23:03:89:f7:2a:b4:fb:47:54:
         b9:f7:70:8a:60:5d:ba:4e:23:e3:f1:81:4c:f3:60:e5:b5:0b:
         0f:1d:eb:d3:6f:40:91:49:04:26:fa:f2:1b:dd:89:b3:59:17:
         3f:42:e9:81:66:c1:50:2c:87:bf:a5:17:a6:71:ed:00:5d:68:
         db:d1:71:8c:92:e8:5b:3c:1b:9c:ca:51:1a:fe:38:3f:45:6d:
         68:63:7c:77:c5:8e:f0:0d:18:eb:9e:ef:6f:b0:59:10:88:6f:
         4f:f9:7b:e4:82:15:3f:64:b1:c7:61:c5:83:b1:9d:ac:e2:3a:
         58:93:2b:18:d4:93:52:a7:2e:b5:01:f7:12:38:59:18:85:de:
         a7:b4:2a:f7:4d:43:28:15:ab:18:f3:01:40:2c:52:ed:b7:56:
         b4:85:75:60:b1:84:ad:f4:ef:ee:54:f4:0b:e6:80:49:c8:a2:
         4f:b3:cd:80:76:1d:a2:96:c9:95:72:fb:19:2a:09:5f:92:70:
         00:e1:c5:bb:af:89:c7:88:7e:0d:24:12:7f:be:84:95:94:d1:
         56:37:cb:a5:3b:66:f7:ab:45:eb:3e:1f:11:b2:a4:d1:bc:fc:
         55:e9:fb:49:82:21:30:7c:17:1c:7e:f8:5b:18:79:3a:85:9c:
         96:38:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org