Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030383a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633030383a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          MohhZ5cuno1kALWy5n0q2Q4E4BwgZYJeSTDHoqMchho=
Subject key identifier:   E3:83:D1:C5:CA:6F:4C:CD:51:F7:6F:49:F7:29:02:1B:2B:62:3C:87
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       21E3BEFD6B85B1283FB1A79D7565F1B568833EE9
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030383a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:57 +0000
ROA not before:           Thu 24 Aug 2023 18:47:57 +0000
ROA not after:            Thu 22 Aug 2024 18:52:57 +0000
asID:                     61592
IP address blocks:        2804:4c34:c008::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e3:be:fd:6b:85:b1:28:3f:b1:a7:9d:75:65:f1:b5:68:83:3e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:57 2023 GMT
            Not After : Aug 22 18:52:57 2024 GMT
        Subject: CN=E383D1C5CA6F4CCD51F76F49F729021B2B623C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:f1:f2:05:70:00:2e:d8:85:72:44:91:22:
                    c2:67:71:93:86:aa:e8:9f:03:af:99:14:58:92:4b:
                    a1:e0:85:68:54:55:30:c5:1b:00:3d:21:60:10:b1:
                    0d:e5:d4:82:85:80:92:12:03:b2:19:b1:5c:37:83:
                    8e:96:d7:4c:a5:3a:55:b0:54:5c:e5:10:0a:5e:96:
                    11:be:cd:e9:ba:fe:09:7e:42:5c:79:38:b3:49:0d:
                    7a:ed:28:22:1e:6f:4a:ae:c7:2c:3a:00:fe:dd:8e:
                    84:91:a3:8d:46:5c:eb:ac:a7:5a:39:a2:5d:d3:29:
                    ac:4a:26:9b:d3:06:e5:69:a2:8b:53:95:9e:dc:2d:
                    2e:bd:11:00:74:ca:d9:69:d8:2e:af:c2:40:a7:96:
                    e2:53:ba:8f:c9:35:9a:c6:a2:0a:f7:98:38:77:8d:
                    9b:73:54:e5:bc:34:1c:bb:2a:7f:0d:a4:05:76:90:
                    63:7a:6f:44:0f:48:9d:3b:39:03:4f:b5:00:3c:f3:
                    e3:33:71:e9:82:07:0b:3e:d1:75:8f:e7:a1:4d:a0:
                    be:a2:5f:5d:de:2a:3c:d2:55:6b:47:15:62:10:ff:
                    e3:c0:d9:69:92:51:0e:68:3e:37:22:cd:04:91:c5:
                    a9:37:7b:2b:d5:32:26:bb:4c:ee:8a:84:ba:e3:3c:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:83:D1:C5:CA:6F:4C:CD:51:F7:6F:49:F7:29:02:1B:2B:62:3C:87
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030383a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c008::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:95:db:6a:00:e5:3f:a4:45:70:32:ba:06:78:02:b7:ea:18:
         7f:e7:52:9b:15:c2:93:87:63:dd:47:c5:01:4e:a4:4f:08:20:
         1d:08:36:b8:5c:a4:34:7f:9c:27:0f:b8:2f:85:e0:e7:1d:ed:
         9c:ec:b5:43:62:5d:fe:ec:3c:97:c8:84:ed:06:de:53:76:d8:
         dc:eb:c5:47:bf:05:ce:76:37:3d:d3:24:b8:b7:95:29:a0:7b:
         07:44:cc:46:cc:8f:ba:e8:3b:e0:67:e7:ef:6f:3e:8c:36:21:
         42:0b:77:91:b2:da:e9:2e:99:47:6d:65:3d:bd:35:55:5d:0a:
         14:c4:0a:d2:d5:e6:af:fd:d1:0e:73:de:8f:f6:73:06:55:44:
         0b:4c:c9:7e:86:d1:4c:9b:4c:cc:f2:8a:4a:04:a0:a6:1e:06:
         63:fb:bd:11:ac:5c:52:ba:dd:85:30:8e:35:6b:79:b2:b4:a2:
         02:f2:e2:51:26:b3:b6:1a:92:bd:05:d6:52:10:17:5b:66:db:
         02:73:69:a6:d9:3b:18:1c:03:b8:39:d0:53:37:e9:e9:26:4c:
         4e:83:0a:f6:c0:17:76:24:ba:c6:f0:20:88:43:10:f4:55:1b:
         27:ae:a7:cd:71:10:b7:3d:6f:c2:b9:62:34:47:8f:91:fb:74:
         98:77:7b:b3
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUIeO+/WuFsSg/saeddWXxtWiDPukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ3NTdaFw0yNDA4MjIxODUyNTdaMDMxMTAvBgNV
BAMTKEUzODNEMUM1Q0E2RjRDQ0Q1MUY3NkY0OUY3MjkwMjFCMkI2MjNDODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cfHyBXAALtiFckSRIsJncZOG
quifA6+ZFFiSS6HghWhUVTDFGwA9IWAQsQ3l1IKFgJISA7IZsVw3g46W10ylOlWw
VFzlEApelhG+zem6/gl+Qlx5OLNJDXrtKCIeb0quxyw6AP7djoSRo41GXOusp1o5
ol3TKaxKJpvTBuVpootTlZ7cLS69EQB0ytlp2C6vwkCnluJTuo/JNZrGogr3mDh3
jZtzVOW8NBy7Kn8NpAV2kGN6b0QPSJ07OQNPtQA88+MzcemCBws+0XWP56FNoL6i
X13eKjzSVWtHFWIQ/+PA2WmSUQ5oPjcizQSRxak3eyvVMia7TO6KhLrjPGL5AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU44PRxcpvTM1R929J9ykCGytiPIcwHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2MzMwMzAzODNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0wAgwDQYJKoZIhvcNAQELBQAD
ggEBAJWV22oA5T+kRXAyugZ4ArfqGH/nUpsVwpOHY91HxQFOpE8IIB0INrhcpDR/
nCcPuC+F4Ocd7ZzstUNiXf7sPJfIhO0G3lN22NzrxUe/Bc52Nz3TJLi3lSmgewdE
zEbMj7roO+Bn5+9vPow2IUILd5Gy2ukumUdtZT29NVVdChTECtLV5q/90Q5z3o/2
cwZVRAtMyX6G0UybTMzyikoEoKYeBmP7vRGsXFK63YUwjjVrebK0ogLy4lEms7Ya
kr0F1lIQF1tm2wJzaabZOxgcA7g50FM36ekmTE6DCvbAF3YkusbwIIhDEPRVGyeu
p81xELc9b8K5YjRHj5H7dJh3e7M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org