Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030613a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633030613a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          XxTwS9tObcfQZYKIx3pwO19X+mORTTCnzygxgN9wDKc=
Subject key identifier:   E0:FB:BD:38:B5:88:BA:D0:69:E5:CB:5C:2D:AA:2C:6B:3A:7E:03:F9
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       5CCE4297046ECB1047460B8686EAFC05C1E047E3
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030613a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:57 +0000
ROA not before:           Thu 24 Aug 2023 18:47:57 +0000
ROA not after:            Thu 22 Aug 2024 18:52:57 +0000
asID:                     61592
IP address blocks:        2804:4c34:c00a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ce:42:97:04:6e:cb:10:47:46:0b:86:86:ea:fc:05:c1:e0:47:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:57 2023 GMT
            Not After : Aug 22 18:52:57 2024 GMT
        Subject: CN=E0FBBD38B588BAD069E5CB5C2DAA2C6B3A7E03F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:84:96:e9:31:14:b2:ea:c4:bb:5f:fd:12:
                    3b:11:5d:ac:bb:6f:b1:25:f4:a9:ec:9a:c6:c3:b7:
                    69:16:ca:23:0c:45:d5:a9:51:d2:b3:22:77:e7:32:
                    e0:f0:7e:d5:05:d0:23:47:07:41:ee:4d:b6:6d:42:
                    e7:d6:81:1d:3c:bd:26:62:de:a5:8b:f8:0d:53:b1:
                    fe:b9:7a:c3:d0:7b:6d:6c:55:fb:f2:fc:6f:ef:02:
                    f2:cc:70:6e:4e:0a:df:e8:d6:d1:52:d7:3f:26:9e:
                    8a:53:c7:19:25:6e:f2:de:ac:7b:0e:de:c2:73:28:
                    9b:45:9e:04:e1:6f:75:e8:94:8e:9a:72:71:2b:12:
                    8d:8b:a9:e0:ee:fb:82:a9:2a:38:5d:2a:59:46:81:
                    34:c3:dd:a3:3d:c7:d0:28:d0:04:fc:30:b8:c6:5a:
                    2f:ec:8c:62:25:e6:4f:d6:af:0f:27:f6:01:32:1c:
                    ca:27:15:fb:85:50:c2:59:85:ad:2a:56:6f:d7:11:
                    36:a9:cb:b6:d4:3f:0e:df:ca:ad:92:6b:a5:cc:9e:
                    7e:44:d1:ef:ee:a4:66:e0:aa:35:40:25:11:29:62:
                    99:6d:c5:06:74:70:92:d6:69:fc:fb:cd:87:6c:98:
                    fb:34:1e:f1:1b:25:c7:d7:a5:bd:85:ea:52:de:c4:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FB:BD:38:B5:88:BA:D0:69:E5:CB:5C:2D:AA:2C:6B:3A:7E:03:F9
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030613a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c00a::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:a5:69:6f:d0:97:72:06:bc:f1:01:74:8c:ef:81:84:90:fe:
         59:a2:66:2b:90:97:a9:c2:01:a8:e7:40:7e:3a:22:80:f8:6b:
         2c:c1:f0:14:1d:39:6e:84:45:13:e2:a3:a5:b0:a7:20:9b:9c:
         0d:0c:2a:fa:8a:ed:7d:dc:a7:70:07:11:ff:55:1b:4d:79:a6:
         13:6f:26:77:58:c2:cc:e2:ec:de:51:c5:fe:c4:cd:d6:69:8b:
         78:ec:b9:ca:18:fc:45:71:b1:72:1b:63:c1:bc:a2:8b:bc:fb:
         62:52:63:5f:fd:06:57:74:3e:d6:8b:7b:fd:e6:a2:42:36:bd:
         02:5a:43:f7:e5:3e:5c:38:87:62:36:0e:87:d4:ad:32:97:3f:
         ab:0a:50:af:da:18:d4:0e:81:62:5f:9e:9e:51:43:68:13:a7:
         ad:2a:92:b7:69:0c:95:7e:88:04:88:8d:b9:42:af:c3:f5:8f:
         40:a2:af:b2:0e:9e:6e:55:fb:a4:ab:d8:e4:7d:ef:18:2b:36:
         a4:89:f2:93:fc:39:8a:18:a2:a8:1d:84:d5:2e:dd:d3:94:57:
         25:94:b9:85:d5:66:82:c1:1d:ce:25:6c:92:83:f8:b7:c1:95:
         8f:d3:82:63:93:99:52:7f:b9:1e:32:31:75:f8:fa:a6:e9:82:
         ba:34:74:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org