Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031633a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633031633a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          fP3uaePkSA/4gNjOxwPFds0vm51fbXVqT7tAt1LN+LQ=
Subject key identifier:   8F:16:64:5F:8B:8F:51:01:47:CA:35:7C:90:FF:2E:0B:F1:9E:8D:AE
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       52B90FA04C108ECF1928B70BD5CB852F385182DD
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031633a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:07 +0000
ROA not before:           Thu 24 Aug 2023 18:48:07 +0000
ROA not after:            Thu 22 Aug 2024 18:53:07 +0000
asID:                     61592
IP address blocks:        2804:4c34:c01c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b9:0f:a0:4c:10:8e:cf:19:28:b7:0b:d5:cb:85:2f:38:51:82:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:07 2023 GMT
            Not After : Aug 22 18:53:07 2024 GMT
        Subject: CN=8F16645F8B8F510147CA357C90FF2E0BF19E8DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:bc:95:29:70:1d:39:0c:b2:74:88:bd:e6:
                    07:4c:57:a8:7a:c8:6f:d8:25:89:21:e9:59:b4:70:
                    bb:03:6f:2b:e5:7f:da:84:e2:40:c3:4e:f3:6f:f4:
                    70:b3:7a:79:41:98:b8:22:41:2e:25:ab:02:78:9b:
                    cb:7a:2c:46:0d:b7:d9:68:d2:94:37:cb:ac:d7:68:
                    a7:91:27:59:6e:63:d5:13:b6:ed:6c:b2:37:2f:ac:
                    26:ec:d9:6b:db:2c:ad:f0:c3:f7:54:e5:25:a2:ab:
                    dc:a8:44:ce:d0:d0:dc:d9:f7:97:40:58:8c:bd:55:
                    c2:d2:e0:1b:d3:23:64:9d:d4:1b:99:ea:6f:33:10:
                    5e:b8:fa:31:71:b8:c2:45:74:0d:9e:9e:94:0a:be:
                    81:3d:1f:dd:62:60:01:cc:b6:cb:e0:6a:fd:a9:ee:
                    8b:8c:a8:bc:bf:ec:7c:e6:e0:0b:2f:69:81:fb:8e:
                    f0:fc:f8:e6:fe:b0:95:6e:ee:63:85:a0:86:e1:06:
                    bb:16:10:53:bf:6d:7d:35:b2:97:e7:5b:13:d5:c7:
                    5a:96:17:92:5e:4b:3d:04:2b:ba:7a:d4:70:30:ce:
                    c6:92:5e:60:aa:fd:d2:85:e4:f0:7e:a9:1c:41:9e:
                    3a:ab:78:6c:6e:d4:da:e0:c4:b2:18:4e:db:b0:d6:
                    4d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:64:5F:8B:8F:51:01:47:CA:35:7C:90:FF:2E:0B:F1:9E:8D:AE
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031633a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c01c::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:2e:c1:92:b9:d1:74:0a:b6:11:1d:2f:a2:ac:ad:62:29:b9:
         c8:9d:c3:04:f6:41:4d:52:0a:a1:09:d1:98:60:a9:b1:03:c5:
         a5:db:e3:8c:01:47:c8:80:1f:b2:5c:65:e2:5e:1f:b1:d8:15:
         a4:c7:ca:41:c0:86:9d:90:03:f0:b7:59:c0:3a:6d:18:f4:50:
         ea:70:d1:fe:28:d2:b1:c1:7a:77:d8:06:ce:ba:9b:37:53:56:
         57:02:e3:9c:9f:fe:0d:54:c5:db:86:8a:89:3d:a0:54:39:2d:
         b6:54:16:32:f9:03:ac:2c:39:ab:ff:44:9c:b0:54:f6:7e:ae:
         35:f3:c0:af:5a:51:84:5c:59:e1:f2:93:b1:cc:23:d3:38:03:
         a1:f3:90:60:ca:42:eb:bf:d1:94:54:d0:28:d4:62:94:59:e7:
         b1:6e:dd:9d:ce:31:34:a7:b6:4e:3b:7d:09:32:9e:36:a5:dc:
         3b:1a:38:06:d9:ef:7d:a4:7b:af:42:74:5c:5d:87:c1:f0:b6:
         21:dc:7f:60:84:b0:df:c4:cc:6a:a1:0c:bf:3f:92:28:8d:58:
         8e:c3:d3:b5:fe:ca:ad:29:42:b3:f4:11:6d:21:50:82:65:c0:
         5c:b6:06:ce:ea:1d:a6:78:e3:c0:ca:c0:c9:88:39:07:28:a8:
         16:88:66:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org