Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031643a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633031643a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          WfbQ674jfsW/9xNm0eINsqZOsQaBJKgMCEHpL0puFPM=
Subject key identifier:   D9:69:D0:13:9B:9B:EB:1D:B5:8A:74:CD:96:79:17:28:6E:99:BC:D9
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       14E1A5AA1D923EC5E50E196540A8608AF46AD471
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031643a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:00 +0000
ROA not before:           Thu 24 Aug 2023 18:48:00 +0000
ROA not after:            Thu 22 Aug 2024 18:53:00 +0000
asID:                     61592
IP address blocks:        2804:4c34:c01d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e1:a5:aa:1d:92:3e:c5:e5:0e:19:65:40:a8:60:8a:f4:6a:d4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:00 2023 GMT
            Not After : Aug 22 18:53:00 2024 GMT
        Subject: CN=D969D0139B9BEB1DB58A74CD967917286E99BCD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:4e:36:89:6e:17:94:6e:39:40:46:0c:a5:
                    04:00:6c:de:77:a3:70:b1:0b:79:66:9e:c3:3e:13:
                    67:d4:c4:52:ae:64:47:43:48:f5:ae:34:17:50:07:
                    61:dd:46:5a:45:48:d8:0b:8d:a8:ce:87:33:a9:e1:
                    a3:30:fc:47:8c:28:95:e5:93:60:b5:8d:7d:ea:5b:
                    cd:fc:2f:28:e7:65:46:a5:7a:91:71:c7:97:0c:67:
                    cb:05:4b:75:fb:6e:00:c9:e7:10:a3:c5:ce:7c:9f:
                    c8:cc:a5:d8:58:ed:6e:38:aa:ba:07:3a:b6:54:d0:
                    a2:d6:3e:6e:58:78:a0:83:c6:12:98:04:4a:be:3a:
                    0b:66:8a:91:6a:13:fc:9d:58:3e:51:b9:b9:73:82:
                    ab:66:18:f7:90:c7:3b:39:8e:7e:a0:ca:f1:08:13:
                    63:d3:32:ba:9a:4f:a2:df:eb:25:7e:3b:2b:29:59:
                    a1:f6:93:ea:69:6e:76:6a:67:c5:6e:53:29:fb:1d:
                    79:b1:f1:be:76:5d:90:0e:45:51:85:ab:92:b7:d7:
                    7c:ea:6f:d3:11:77:4e:9a:4c:49:33:19:d7:60:5b:
                    ce:62:c1:41:1f:07:76:4e:b9:49:69:20:1b:f7:f1:
                    fd:d9:64:c8:23:42:0c:a4:68:a9:ed:56:c6:a5:e4:
                    a6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:69:D0:13:9B:9B:EB:1D:B5:8A:74:CD:96:79:17:28:6E:99:BC:D9
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031643a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c01d::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:30:c7:2f:eb:c3:77:30:8d:2d:38:6e:e2:3f:f8:18:65:19:
         6d:85:cc:51:56:1c:f0:fd:c6:70:48:7e:13:fd:1e:c9:7c:a6:
         e4:d4:2b:e0:86:cb:c7:5e:9a:bf:01:90:cc:56:50:12:3e:7a:
         7f:66:aa:8f:54:ac:a7:29:8e:a1:a6:17:2c:70:23:e5:fe:bb:
         91:80:e8:40:7f:f5:49:3d:e3:ef:d7:e6:25:c6:30:af:1a:c2:
         da:c8:2c:0c:ef:24:64:51:fa:80:4e:4f:0b:4f:86:78:2d:e6:
         dc:5e:2f:fe:d2:40:3c:76:83:20:b5:70:31:7e:04:c7:44:77:
         8b:d4:ef:de:05:e2:83:50:69:d4:31:d5:cf:c1:77:0d:31:cb:
         d2:e4:8a:d2:eb:0d:b4:e3:80:fe:b9:a7:3e:56:18:72:7f:fb:
         9d:a8:92:5b:fc:16:0c:d0:4a:6a:ce:b3:5f:01:28:70:71:ed:
         49:38:c6:73:f1:9e:97:1f:c1:bf:be:5d:d9:58:20:2f:7b:fb:
         ee:5c:bd:39:e9:d4:d9:21:c1:69:fa:2b:f7:f8:f1:36:87:44:
         d8:2a:8b:c3:a6:e4:f4:05:50:4f:55:ae:a5:b5:2f:15:fd:7f:
         a1:8a:71:05:6c:da:ac:6f:c0:f8:ef:7f:a1:41:50:fc:ef:2e:
         ca:2a:f5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org