Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031613a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633031613a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          6CJ4d/YzaY9IzGRGftXBKF+VLrnbaG8wv7oYgcyHg50=
Subject key identifier:   35:8D:CA:87:D8:0A:E9:BE:8D:62:2D:EA:14:F3:BE:7B:F3:69:35:BF
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       312BF649B05BEE0D0F515AF14EA475E40BA2E77F
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031613a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:57 +0000
ROA not before:           Thu 24 Aug 2023 18:47:57 +0000
ROA not after:            Thu 22 Aug 2024 18:52:57 +0000
asID:                     61592
IP address blocks:        2804:4c34:c01a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2b:f6:49:b0:5b:ee:0d:0f:51:5a:f1:4e:a4:75:e4:0b:a2:e7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:57 2023 GMT
            Not After : Aug 22 18:52:57 2024 GMT
        Subject: CN=358DCA87D80AE9BE8D622DEA14F3BE7BF36935BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ad:20:0d:26:7a:12:fd:db:8b:b6:2c:66:d2:
                    98:3a:0f:a3:49:e8:2d:0a:d2:e0:6c:e4:03:ff:f9:
                    22:ed:40:5b:35:13:a3:04:28:8f:f3:2e:5a:bb:c1:
                    11:da:d6:1e:2e:1e:5f:f0:b9:8d:a1:a4:26:c7:70:
                    3e:a5:44:51:0c:38:3d:12:0b:a1:9e:d1:8a:50:9a:
                    d1:2a:7e:78:c4:a7:cf:2c:63:f1:91:f8:a5:9e:9d:
                    83:7b:3b:a6:f8:83:78:ea:f5:b4:92:dd:f2:88:f5:
                    00:8c:81:9e:f8:e4:31:6c:0c:f9:b0:ca:0d:9b:ce:
                    8b:3a:22:44:8b:5f:1b:e3:34:3a:89:05:f3:1c:b2:
                    67:e0:2f:d4:8c:cd:22:0b:1d:6a:b6:0a:a8:ea:2a:
                    da:35:94:4a:95:07:bf:59:4d:c6:77:a1:82:87:bb:
                    95:94:22:11:9d:e3:4a:ee:fc:87:eb:87:9a:fb:de:
                    09:5f:ff:49:99:72:e3:35:d1:11:d6:42:df:1e:49:
                    c3:bc:00:b9:78:79:5f:90:3b:90:39:c1:a3:e1:3a:
                    5a:c7:41:a7:4b:08:02:db:9b:52:ef:d0:bb:5f:32:
                    24:b5:ad:b0:f3:83:58:66:47:50:94:da:4f:1d:4f:
                    6d:fb:45:d6:d0:37:01:43:87:19:4a:c0:d3:23:15:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8D:CA:87:D8:0A:E9:BE:8D:62:2D:EA:14:F3:BE:7B:F3:69:35:BF
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031613a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c01a::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:e5:fa:c2:24:35:ab:41:8f:f5:91:a0:41:5b:89:b9:24:c0:
         7e:8f:3f:b9:a4:bd:83:d9:41:11:f8:9b:10:d8:dc:49:d7:94:
         3c:04:ef:d0:7e:e2:ff:0f:29:87:fb:1e:1e:34:8a:95:b8:e3:
         fe:1a:2c:f0:1f:f5:e0:76:56:9b:f8:c8:88:6e:ec:0e:6b:92:
         22:4a:bd:73:45:da:0a:95:44:e3:45:d2:08:4a:eb:2e:1c:6c:
         2a:bd:fc:23:7d:47:a8:f2:86:38:a8:53:21:86:93:d5:4c:ec:
         ac:eb:6e:d0:03:63:53:66:5c:5f:ff:2c:62:f4:b8:09:0f:64:
         3f:df:fe:d5:af:86:9d:0b:23:1a:ff:43:af:ed:db:e8:15:41:
         03:a5:05:b1:78:23:7a:75:2f:94:a4:61:cd:12:47:5c:f9:b4:
         91:79:cb:60:34:52:ee:35:bf:02:f8:66:26:66:8d:4f:3a:9b:
         f0:35:5c:2d:ee:0b:fe:41:96:76:33:33:53:db:d5:f1:05:56:
         e1:6a:94:a6:1d:eb:8d:a0:1f:20:04:28:cf:af:ef:94:f8:2b:
         7c:f0:11:14:0f:d6:aa:c1:6f:e3:22:cf:8a:98:d0:ee:a3:db:
         be:7d:f8:ae:a6:8f:a0:f4:e9:3f:fb:2c:ce:de:6e:9f:57:56:
         99:ee:32:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org