Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031343a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633031343a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          YxX6aghkeDkQ7ne5awPlqVybQwv2oWW2HfLREFLJls0=
Subject key identifier:   AD:55:BE:FB:25:A4:37:72:E3:14:B6:EF:D6:E1:95:0D:FC:AD:95:C4
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       1C563B82A346C26AA7D3BEFE1C9B306F92ED1E47
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031343a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:05 +0000
ROA not before:           Thu 24 Aug 2023 18:48:05 +0000
ROA not after:            Thu 22 Aug 2024 18:53:05 +0000
asID:                     61592
IP address blocks:        2804:4c34:c014::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:56:3b:82:a3:46:c2:6a:a7:d3:be:fe:1c:9b:30:6f:92:ed:1e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:05 2023 GMT
            Not After : Aug 22 18:53:05 2024 GMT
        Subject: CN=AD55BEFB25A43772E314B6EFD6E1950DFCAD95C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:6a:80:54:4b:51:b4:a0:c6:a2:8e:b0:37:
                    a7:f1:40:92:60:f4:19:c5:1a:a4:06:48:0a:65:d1:
                    ed:5b:1f:8f:3c:cf:00:3d:0e:5c:2b:cc:14:1f:dc:
                    bd:7d:14:4e:5c:dc:07:57:86:db:63:12:0b:43:76:
                    97:5d:26:b0:fc:79:82:fd:3a:43:3f:05:e8:39:87:
                    ce:98:db:3a:69:44:fb:70:9c:c7:bf:d4:65:0c:3d:
                    f0:ee:46:2a:d3:82:b5:ba:d8:af:a7:60:fd:f1:d0:
                    15:3f:1b:aa:e7:f9:22:3f:03:c1:97:19:50:60:cc:
                    d2:ae:6b:a5:f5:51:47:46:9c:a4:7c:88:88:4b:2f:
                    a7:ae:34:f8:32:ef:ad:9c:26:7a:23:ff:22:d4:b5:
                    da:e1:79:05:50:b5:35:60:81:79:a2:04:95:2b:2d:
                    9e:da:a8:cd:db:51:40:c9:f7:be:67:cb:87:02:bc:
                    81:c9:5a:75:fc:85:65:fc:a6:94:03:b5:01:65:46:
                    7b:eb:de:92:e4:e0:f3:6a:7a:bd:e8:7c:79:65:59:
                    7a:5b:da:4d:a9:9d:cc:9d:6c:28:8e:6d:98:99:e4:
                    10:7e:c6:2a:7a:6a:ac:3a:ec:6a:9d:e7:df:b4:21:
                    fb:c0:80:64:1f:75:ad:f3:ad:1f:03:d9:fe:32:57:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:55:BE:FB:25:A4:37:72:E3:14:B6:EF:D6:E1:95:0D:FC:AD:95:C4
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031343a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c014::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:07:7c:1b:cf:f4:9b:31:54:5d:89:dc:88:88:a5:1e:d2:7a:
         b2:0c:a2:dc:b6:8a:ac:47:10:85:48:30:a7:e9:fe:80:dc:b3:
         cb:c1:09:da:29:84:25:c8:f7:41:26:ac:5d:b1:ec:7a:59:3e:
         30:ed:c5:fe:15:eb:cc:b6:b4:c9:07:43:32:da:95:da:c1:3e:
         0e:6f:36:93:21:86:f3:e0:c4:91:55:0e:67:aa:a8:9b:4c:b5:
         a0:47:bf:55:8b:50:ad:48:4e:d6:2b:27:6a:07:42:1d:17:97:
         58:28:80:14:21:72:50:b3:dc:52:a4:1c:85:bb:0c:1f:4d:af:
         42:dd:fc:b9:25:7f:ee:ce:cf:b8:98:00:f5:25:32:39:9b:5c:
         74:ee:01:9b:a7:6b:07:44:da:64:da:50:f3:fc:dd:6f:dd:68:
         e6:a7:a9:63:b4:ba:a9:eb:3e:30:c0:84:45:67:40:7d:70:19:
         90:c4:2c:db:28:bc:2e:d8:d6:67:69:39:51:f5:27:6f:40:f0:
         7c:cc:87:93:e4:96:ed:c4:1b:b4:21:a9:1f:5a:6f:00:62:f2:
         9f:7a:d6:06:f6:6f:d2:7d:f4:4e:91:04:c0:7a:31:49:8b:f1:
         2b:18:f2:67:cb:6d:8a:6b:38:83:b0:f0:f9:5c:88:8c:79:b3:
         ca:54:41:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org