Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031663a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633031663a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          /LI8WoowFI/WCkc1/4rEp4U155boywi1NK4p/W8yr8A=
Subject key identifier:   E9:99:E2:8A:FD:AF:2B:95:02:B7:2E:F4:B9:9D:62:6B:1F:44:82:2C
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       4897D5E119E1D18C0B6192FADFB4FB71128DB9FF
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031663a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:04 +0000
ROA not before:           Thu 24 Aug 2023 18:48:04 +0000
ROA not after:            Thu 22 Aug 2024 18:53:04 +0000
asID:                     61592
IP address blocks:        2804:4c34:c01f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:97:d5:e1:19:e1:d1:8c:0b:61:92:fa:df:b4:fb:71:12:8d:b9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:04 2023 GMT
            Not After : Aug 22 18:53:04 2024 GMT
        Subject: CN=E999E28AFDAF2B9502B72EF4B99D626B1F44822C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:56:b4:60:e2:04:75:30:ec:fd:ec:62:25:
                    d2:23:b9:c1:03:3f:03:b3:a4:e0:04:77:57:5e:45:
                    43:ff:2b:00:3d:91:28:d0:ed:a0:5f:37:32:f6:32:
                    d3:0c:8d:ab:d9:0e:1f:3f:48:93:c8:ed:21:27:42:
                    4f:26:89:77:e4:82:61:01:59:b4:fb:0c:b5:f5:11:
                    09:6e:6d:04:17:5d:e6:d7:73:6b:5c:98:71:c9:7b:
                    19:79:9b:7f:cc:26:21:21:67:de:e6:c2:e8:1f:04:
                    7e:4e:e5:33:6c:3d:67:da:85:f1:17:fe:61:b6:11:
                    8f:78:dd:37:01:43:ca:47:23:61:eb:9f:8f:ac:f0:
                    c4:ee:d9:83:a1:75:4d:d8:a6:54:dc:76:11:c9:96:
                    52:a0:90:ed:d8:2a:b9:ad:e1:39:fb:4d:c6:24:8f:
                    b4:57:e1:b5:a0:b0:13:fb:db:57:40:e1:60:51:e3:
                    71:6d:01:03:53:c6:0d:50:50:d0:57:53:de:c4:2a:
                    e3:cf:0a:be:48:38:8e:cb:4f:65:49:70:42:15:59:
                    24:a7:7a:ec:81:59:16:bd:42:13:99:7a:5c:f2:ff:
                    4f:eb:02:30:8b:11:29:98:60:af:15:b7:1c:0f:9c:
                    58:2a:8f:fc:c5:f7:3c:92:68:6b:70:84:31:19:10:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:99:E2:8A:FD:AF:2B:95:02:B7:2E:F4:B9:9D:62:6B:1F:44:82:2C
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633031663a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c01f::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:1f:1b:b6:aa:11:89:b4:de:cd:71:91:4e:6a:14:93:ff:64:
         f2:13:5d:9a:8b:da:70:93:2a:58:56:82:c0:db:92:6f:2d:ac:
         3e:8b:fa:b9:e7:ff:40:08:df:1c:f2:99:32:cb:5b:91:11:cb:
         d5:44:66:6f:92:92:8a:cd:a2:0b:62:5f:aa:a0:a8:3c:75:d7:
         7e:d1:c2:50:4d:e8:fb:7e:3f:38:6a:14:b3:a1:83:e0:c2:3c:
         72:00:2c:23:57:b8:e9:2f:21:6d:eb:ae:be:0d:7c:a7:5b:70:
         aa:37:2b:02:e9:75:ec:22:18:3f:ee:d2:52:7f:c5:6a:ce:de:
         8d:26:7d:3f:fb:42:1a:d0:76:7b:db:81:76:1e:8d:4c:9c:51:
         87:c9:c1:14:26:51:fb:50:f8:96:10:cc:ca:9b:6d:a7:2f:b4:
         c0:96:08:9d:cf:a5:78:79:7f:41:ff:9f:cb:a9:d9:e4:44:84:
         67:ec:41:bf:2c:81:cc:fd:3e:38:e2:52:61:bd:a6:3b:bd:a0:
         34:82:2e:fc:b2:43:ad:1b:e3:9a:ee:d0:d8:96:c3:1e:5b:ce:
         0c:1d:56:f0:b7:8b:e3:85:9a:e9:6e:cb:c6:0d:b0:fc:f9:fe:
         27:8d:5d:88:70:f2:93:28:a3:5a:96:c3:63:19:66:46:40:88:
         d0:17:3d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org