Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030303a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633030303a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          n17xE+KCQxAk/8pGs9jVTFnViEC/6/cZ8tGtTEf93MM=
Subject key identifier:   03:F3:A2:9F:05:A1:90:F2:DC:A1:AD:B8:40:95:AA:93:D2:87:B2:A9
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       1AC260747C1BA50974D7A6A9D50BB681FBC0F35C
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030303a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:03 +0000
ROA not before:           Thu 24 Aug 2023 18:48:03 +0000
ROA not after:            Thu 22 Aug 2024 18:53:03 +0000
asID:                     61592
IP address blocks:        2804:4c34:c000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c2:60:74:7c:1b:a5:09:74:d7:a6:a9:d5:0b:b6:81:fb:c0:f3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:03 2023 GMT
            Not After : Aug 22 18:53:03 2024 GMT
        Subject: CN=03F3A29F05A190F2DCA1ADB84095AA93D287B2A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:aa:f9:d2:44:4e:cd:5a:36:9e:dc:1d:42:
                    fd:1b:be:5f:5f:78:f1:19:90:88:f5:df:e9:03:16:
                    1c:a1:25:93:15:d5:7b:97:4e:57:73:7d:94:fb:5b:
                    42:6b:cf:2c:14:cf:ba:e8:4e:d2:3a:3f:6c:e1:b7:
                    97:e9:08:93:55:e2:60:6f:8b:ea:42:cb:9f:4d:89:
                    04:0c:64:77:e3:97:18:b0:59:39:0e:8d:01:c7:5e:
                    5c:f0:06:92:6f:2c:01:35:aa:6a:07:0b:f9:5c:ee:
                    7d:1d:08:72:c5:41:b6:8a:ee:05:07:2e:d4:a4:eb:
                    df:c8:59:cb:f3:df:fa:e0:e2:c5:eb:b6:39:89:67:
                    e5:32:a4:0a:04:d6:02:72:d3:0b:7b:82:8f:0e:c4:
                    26:ce:08:6c:2c:fd:3f:f2:fd:dc:07:65:37:98:20:
                    ad:26:3f:45:3b:fb:d1:f2:f4:14:2f:81:8a:aa:60:
                    78:75:12:e4:a4:f6:4d:1b:c0:d9:20:62:4e:7e:d3:
                    06:bb:25:1a:b5:b9:7c:5c:53:d3:40:6a:3c:19:e9:
                    c2:2d:d9:16:6d:2c:e5:2a:c4:e2:68:b8:8f:87:3e:
                    84:a6:f5:71:8d:ec:9b:4a:d9:bd:c1:dc:73:ee:9b:
                    cd:8c:7e:6b:c5:23:ef:2b:68:fe:f0:44:16:05:43:
                    30:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F3:A2:9F:05:A1:90:F2:DC:A1:AD:B8:40:95:AA:93:D2:87:B2:A9
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030303a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:a6:62:72:4c:25:15:53:61:ba:72:4c:46:cc:f7:6b:a8:f4:
         4c:46:4e:ca:ad:f9:05:f3:f1:10:fe:5b:5d:27:54:27:d9:7b:
         f9:f2:1c:1c:d4:50:98:aa:27:c4:c7:9a:6e:95:f4:d5:f7:7e:
         51:ec:a1:68:e9:33:0b:b9:83:58:27:b8:36:60:66:3f:4c:a1:
         e9:1c:d3:41:0e:dd:e0:eb:d7:6f:1d:81:75:a0:d3:54:21:e4:
         2e:92:42:e1:7d:fc:19:76:02:21:7f:9c:5f:a0:bf:0d:10:a1:
         e4:f6:21:2b:91:65:f2:bd:80:5d:00:5c:b8:87:00:5e:47:25:
         37:59:27:9c:74:10:09:15:73:ce:7e:4a:f2:6c:c2:2e:db:77:
         35:a6:16:6e:4c:1b:a6:a4:0a:ac:2f:87:b1:a0:cc:69:ec:ef:
         1d:7b:08:ab:58:2d:ba:69:c9:e7:ae:2b:97:54:fa:6a:32:4a:
         6b:0a:3a:94:1c:6a:fb:ee:30:e6:a0:c7:4b:74:f1:82:1d:95:
         ae:f2:22:f1:93:14:25:61:bc:e6:35:ba:e7:4a:30:b5:21:86:
         46:dd:ec:13:f3:33:ef:cb:d6:ed:ea:d2:56:58:97:76:87:ff:
         7a:9e:31:30:44:c0:b3:da:16:46:ae:8f:f2:5a:a3:b6:37:94:
         bc:78:b2:7b
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUGsJgdHwbpQl016ap1Qu2gfvA81wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDNaFw0yNDA4MjIxODUzMDNaMDMxMTAvBgNV
BAMTKDAzRjNBMjlGMDVBMTkwRjJEQ0ExQURCODQwOTVBQTkzRDI4N0IyQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrKr50kROzVo2ntwdQv0bvl9f
ePEZkIj13+kDFhyhJZMV1XuXTldzfZT7W0JrzywUz7roTtI6P2zht5fpCJNV4mBv
i+pCy59NiQQMZHfjlxiwWTkOjQHHXlzwBpJvLAE1qmoHC/lc7n0dCHLFQbaK7gUH
LtSk69/IWcvz3/rg4sXrtjmJZ+UypAoE1gJy0wt7go8OxCbOCGws/T/y/dwHZTeY
IK0mP0U7+9Hy9BQvgYqqYHh1EuSk9k0bwNkgYk5+0wa7JRq1uXxcU9NAajwZ6cIt
2RZtLOUqxOJouI+HPoSm9XGN7JtK2b3B3HPum82MfmvFI+8raP7wRBYFQzCjAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUA/OinwWhkPLcoa24QJWqk9KHsqkwHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2MzMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0wAAwDQYJKoZIhvcNAQELBQAD
ggEBAB2mYnJMJRVTYbpyTEbM92uo9ExGTsqt+QXz8RD+W10nVCfZe/nyHBzUUJiq
J8THmm6V9NX3flHsoWjpMwu5g1gnuDZgZj9Moekc00EO3eDr128dgXWg01Qh5C6S
QuF9/Bl2AiF/nF+gvw0QoeT2ISuRZfK9gF0AXLiHAF5HJTdZJ5x0EAkVc85+SvJs
wi7bdzWmFm5MG6akCqwvh7GgzGns7x17CKtYLbppyeeuK5dU+moySmsKOpQcavvu
MOagx0t08YIdla7yIvGTFCVhvOY1uudKMLUhhkbd7BPzM+/L1u3q0lZYl3aH/3qe
MTBEwLPaFkauj/Jao7Y3lLx4sns=
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:48:22 2025 by rpki-client