Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030303a3a2f33342d3334203d3e203631353932.roa
File:                     323830343a346333343a633030303a3a2f33342d3334203d3e203631353932.roa (raw, json)
Hash identifier:          Lfwa+EJ+8cW2iafvcnz1YNC2De/bfI2/JOMoC1YQvgM=
Subject key identifier:   C8:03:9D:C0:42:01:B8:6A:2C:01:88:E5:59:B8:41:10:43:43:31:21
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       77F627A414D3B87AFDCFE707926D0F3617AC1F58
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030303a3a2f33342d3334203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:04 +0000
ROA not before:           Thu 24 Aug 2023 18:48:04 +0000
ROA not after:            Thu 22 Aug 2024 18:53:04 +0000
asID:                     61592
IP address blocks:        2804:4c34:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f6:27:a4:14:d3:b8:7a:fd:cf:e7:07:92:6d:0f:36:17:ac:1f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:04 2023 GMT
            Not After : Aug 22 18:53:04 2024 GMT
        Subject: CN=C8039DC04201B86A2C0188E559B8411043433121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:e1:94:4d:07:e7:02:ca:c2:9f:9c:36:b9:
                    cf:1d:be:85:62:58:1f:bf:23:42:b3:76:e0:0d:01:
                    03:8d:4d:d8:1d:32:be:42:1b:53:07:5b:41:cb:e3:
                    86:f0:28:74:2a:0e:8f:d7:04:28:92:c1:33:35:0a:
                    e4:01:24:2a:66:68:a5:26:aa:19:7b:83:96:ab:3a:
                    33:6d:66:59:40:ba:0d:c9:fd:ac:bf:01:9b:a2:fc:
                    80:08:d4:61:8c:ca:ed:e2:f2:c3:a5:a7:c2:a2:2a:
                    70:e4:35:a8:55:8b:b0:00:c5:3a:42:27:ef:af:51:
                    a3:11:05:0a:92:9f:52:de:1d:ef:3d:dc:cd:36:78:
                    8d:7f:62:44:a9:d2:64:e8:e0:01:6f:46:3b:a0:18:
                    17:00:f5:c8:58:b3:ad:06:70:0c:d8:c1:a7:bf:5e:
                    73:2b:d6:6d:01:14:a6:73:df:c2:08:aa:4f:55:43:
                    6a:8d:3f:30:cf:f5:b9:b5:60:00:74:64:7c:01:bc:
                    0a:2a:f3:b8:03:14:5a:58:d0:d7:a6:b9:3b:62:8e:
                    2d:38:55:20:f4:2c:1e:64:53:52:eb:a6:0d:5b:4e:
                    cd:7b:36:50:c7:df:09:0a:15:ea:30:7a:5b:af:38:
                    77:ac:0a:40:4a:1b:d7:7f:2b:d5:c7:13:bf:f8:ff:
                    0f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:03:9D:C0:42:01:B8:6A:2C:01:88:E5:59:B8:41:10:43:43:31:21
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030303a3a2f33342d3334203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         49:19:39:46:90:13:6f:b2:f4:35:b7:35:dd:6b:c2:7a:de:01:
         84:7a:8f:62:30:ec:42:5a:dd:3f:06:5d:33:69:98:51:e1:e5:
         f2:a1:7f:0e:da:b4:b3:ef:2c:c6:64:2e:fa:9d:4c:9f:ad:35:
         76:44:2d:be:a3:60:32:34:0e:bb:1b:df:77:3c:b4:2c:45:e7:
         8b:84:22:ad:15:ba:38:a6:e2:75:e3:d4:2e:a5:b2:a1:c4:c2:
         67:ea:ab:f2:f4:e8:37:8e:bd:8c:1a:9b:30:72:d6:8b:71:e2:
         c4:3b:e7:3d:fa:60:c0:6c:56:97:83:79:82:77:7c:a3:4f:10:
         e3:6e:03:a9:a9:a0:8c:82:d8:8f:89:73:4f:c1:47:a9:bf:4f:
         63:f7:17:fb:ad:7e:36:d8:19:28:62:6f:ec:39:67:f8:6b:79:
         8b:44:d2:6c:af:29:8a:24:92:83:30:71:09:ce:46:3a:8e:2c:
         74:c9:20:6d:86:9b:6a:72:32:47:8b:28:0b:51:9b:1d:91:08:
         41:bc:b7:61:9e:b9:99:95:c5:7e:db:38:86:ef:6f:20:9a:70:
         da:26:1f:a8:b9:a2:75:28:75:e1:63:89:69:8c:72:88:08:7b:
         d6:3b:e3:0f:90:aa:5c:d2:5c:a8:c5:87:a4:9a:39:fc:78:9c:
         ea:14:4a:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd/YnpBTTuHr9z+cHkm0PNhesH1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDRaFw0yNDA4MjIxODUzMDRaMDMxMTAvBgNV
BAMTKEM4MDM5REMwNDIwMUI4NkEyQzAxODhFNTU5Qjg0MTEwNDM0MzMxMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqOGUTQfnAsrCn5w2uc8dvoVi
WB+/I0KzduANAQONTdgdMr5CG1MHW0HL44bwKHQqDo/XBCiSwTM1CuQBJCpmaKUm
qhl7g5arOjNtZllAug3J/ay/AZui/IAI1GGMyu3i8sOlp8KiKnDkNahVi7AAxTpC
J++vUaMRBQqSn1LeHe893M02eI1/YkSp0mTo4AFvRjugGBcA9chYs60GcAzYwae/
XnMr1m0BFKZz38IIqk9VQ2qNPzDP9bm1YAB0ZHwBvAoq87gDFFpY0NemuTtiji04
VSD0LB5kU1Lrpg1bTs17NlDH3wkKFeoweluvOHesCkBKG9d/K9XHE7/4/w+rAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyAOdwEIBuGosAYjlWbhBEENDMSEwHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBEw0wDANBgkqhkiG9w0BAQsFAAOC
AQEASRk5RpATb7L0Nbc13WvCet4BhHqPYjDsQlrdPwZdM2mYUeHl8qF/Dtq0s+8s
xmQu+p1Mn601dkQtvqNgMjQOuxvfdzy0LEXni4QirRW6OKbidePULqWyocTCZ+qr
8vToN469jBqbMHLWi3HixDvnPfpgwGxWl4N5gnd8o08Q424DqamgjILYj4lzT8FH
qb9PY/cX+61+NtgZKGJv7Dln+Gt5i0TSbK8piiSSgzBxCc5GOo4sdMkgbYabanIy
R4soC1GbHZEIQby3YZ65mZXFfts4hu9vIJpw2iYfqLmidSh14WOJaYxyiAh71jvj
D5CqXNJcqMWHpJo5/Hic6hRKMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org