Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030323a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633030323a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          eX2ZvFnQatTu/SjGWUBnu9Pa0R/9InI+/fPTbrSHIuw=
Subject key identifier:   33:92:9E:21:DC:F9:3B:AC:EC:C5:40:53:CD:53:23:3A:E6:14:75:85
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       784A76BBE0FBFFAB129A4CFE6A25763F20738E39
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030323a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:57 +0000
ROA not before:           Thu 24 Aug 2023 18:47:57 +0000
ROA not after:            Thu 22 Aug 2024 18:52:57 +0000
asID:                     61592
IP address blocks:        2804:4c34:c002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4a:76:bb:e0:fb:ff:ab:12:9a:4c:fe:6a:25:76:3f:20:73:8e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:57 2023 GMT
            Not After : Aug 22 18:52:57 2024 GMT
        Subject: CN=33929E21DCF93BACECC54053CD53233AE6147585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:8b:38:11:46:58:e8:c5:5f:0c:51:e6:a2:
                    39:b7:fd:9c:01:87:a3:9e:33:1d:f8:7b:84:23:6c:
                    ff:ba:7a:c4:fc:37:38:45:83:bc:99:7e:61:a2:89:
                    5d:4f:9b:d5:c8:a4:f5:c9:7b:d4:cd:8b:db:2d:10:
                    1c:43:8d:d2:a2:b6:76:49:1c:f9:5e:fe:ad:c2:c3:
                    c6:7d:d4:d6:b5:1f:47:5b:cf:e3:8d:8d:2e:ca:9a:
                    84:ed:9e:c3:55:70:70:0e:84:4c:d4:3f:0b:c2:00:
                    72:77:de:c4:4b:a5:11:8b:e8:4f:cc:44:e1:ca:f6:
                    16:78:af:dc:42:5e:d6:b8:23:a3:51:36:bf:f5:d9:
                    42:a6:4f:dd:8c:38:9d:ea:8c:ad:a6:6f:8a:f0:c2:
                    aa:f2:16:94:65:fb:0a:7f:e7:9b:2e:25:25:17:7f:
                    2a:49:e1:66:f4:66:67:88:12:3b:ed:9c:96:5d:93:
                    12:05:04:5e:ed:64:5e:14:47:8d:3f:5e:92:49:1f:
                    ed:19:35:2a:1d:3c:e2:d7:9d:d5:d0:97:9d:c5:02:
                    a4:e4:db:dc:19:cc:39:4e:57:43:ba:71:37:ef:46:
                    10:c3:bc:e0:0e:4e:13:1e:a1:85:bd:c3:61:aa:f7:
                    4a:bb:ed:81:ca:0b:8c:e4:d8:69:16:46:68:8e:5b:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:92:9E:21:DC:F9:3B:AC:EC:C5:40:53:CD:53:23:3A:E6:14:75:85
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030323a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c002::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:2d:1b:c0:33:66:1d:e0:93:51:25:89:2d:46:5f:5b:51:56:
         18:8c:3e:c4:ed:30:26:e5:ae:4a:a4:ae:d3:f3:d2:42:7e:22:
         bf:93:a4:2d:1c:c4:f2:e4:be:67:60:19:c9:25:8a:7a:e9:1a:
         80:fb:53:a8:74:ab:96:1e:b4:f9:ab:84:4a:25:28:b3:a8:12:
         e1:9a:57:ca:46:ac:b0:aa:89:7d:f1:14:84:9c:5f:46:70:f1:
         46:e5:00:c8:fe:07:d2:6f:93:58:19:ff:9f:50:99:ad:34:b3:
         1d:cd:4c:62:40:83:25:4a:c3:13:97:3a:76:2c:80:47:78:dc:
         64:cd:04:e8:a8:be:f3:42:c7:b4:29:15:ec:c7:f0:59:3c:65:
         bc:ef:a5:66:ee:f1:42:35:5b:81:8c:6d:51:91:ed:dd:4a:d4:
         4b:48:21:c5:a2:e2:ad:40:3c:84:aa:fe:ce:f0:1f:99:47:ed:
         2e:97:34:fd:56:cb:8f:f1:7d:10:ef:33:20:f0:23:f9:84:c3:
         f3:2f:37:11:a4:00:ad:be:ea:17:74:db:42:55:bd:aa:ac:ea:
         13:e1:8c:9c:c5:2f:64:20:86:74:9e:67:c4:ce:bb:57:e2:b5:
         69:5e:84:dd:ed:87:86:70:56:f9:6f:23:62:24:a2:ce:f7:7c:
         62:64:a8:d7
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUeEp2u+D7/6sSmkz+aiV2PyBzjjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ3NTdaFw0yNDA4MjIxODUyNTdaMDMxMTAvBgNV
BAMTKDMzOTI5RTIxRENGOTNCQUNFQ0M1NDA1M0NENTMyMzNBRTYxNDc1ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EIs4EUZY6MVfDFHmojm3/ZwB
h6OeMx34e4QjbP+6esT8NzhFg7yZfmGiiV1Pm9XIpPXJe9TNi9stEBxDjdKitnZJ
HPle/q3Cw8Z91Na1H0dbz+ONjS7KmoTtnsNVcHAOhEzUPwvCAHJ33sRLpRGL6E/M
ROHK9hZ4r9xCXta4I6NRNr/12UKmT92MOJ3qjK2mb4rwwqryFpRl+wp/55suJSUX
fypJ4Wb0ZmeIEjvtnJZdkxIFBF7tZF4UR40/XpJJH+0ZNSodPOLXndXQl53FAqTk
29wZzDlOV0O6cTfvRhDDvOAOThMeoYW9w2Gq90q77YHKC4zk2GkWRmiOW+iHAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUM5KeIdz5O6zsxUBTzVMjOuYUdYUwHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2MzMwMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0wAIwDQYJKoZIhvcNAQELBQAD
ggEBAEotG8AzZh3gk1EliS1GX1tRVhiMPsTtMCblrkqkrtPz0kJ+Ir+TpC0cxPLk
vmdgGcklinrpGoD7U6h0q5YetPmrhEolKLOoEuGaV8pGrLCqiX3xFIScX0Zw8Ubl
AMj+B9Jvk1gZ/59Qma00sx3NTGJAgyVKwxOXOnYsgEd43GTNBOiovvNCx7QpFezH
8Fk8ZbzvpWbu8UI1W4GMbVGR7d1K1EtIIcWi4q1APISq/s7wH5lH7S6XNP1Wy4/x
fRDvMyDwI/mEw/MvNxGkAK2+6hd020JVvaqs6hPhjJzFL2QghnSeZ8TOu1fitWle
hN3th4ZwVvlvI2Ikos73fGJkqNc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org