Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032303a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633032303a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          FPOW3ZeyBF7gqiavk3NVNfEqd+/ynM+PLrpdnHZNNDQ=
Subject key identifier:   F4:2E:71:FF:E6:EE:DC:3A:B2:5B:47:9E:8C:49:60:07:0F:6C:D7:5C
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       455E3E27298B28B08B1859CFB99085BA1274F2E2
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032303a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:05 +0000
ROA not before:           Thu 24 Aug 2023 18:48:05 +0000
ROA not after:            Thu 22 Aug 2024 18:53:05 +0000
asID:                     61592
IP address blocks:        2804:4c34:c020::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5e:3e:27:29:8b:28:b0:8b:18:59:cf:b9:90:85:ba:12:74:f2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:05 2023 GMT
            Not After : Aug 22 18:53:05 2024 GMT
        Subject: CN=F42E71FFE6EEDC3AB25B479E8C4960070F6CD75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e0:67:ca:54:d6:ed:ac:bd:b5:44:10:33:66:
                    e1:dd:98:d2:b1:fb:74:a0:ab:71:1c:d5:7e:d7:37:
                    c7:71:1b:2b:f4:5f:af:c1:6d:e4:34:47:b0:e4:22:
                    f7:e5:89:67:eb:db:c7:66:ec:f4:eb:fd:9e:0b:59:
                    bd:02:02:34:c9:74:df:11:14:f2:3c:dd:b8:fa:6d:
                    f9:96:a9:29:ef:d2:c3:91:18:3a:b5:05:bf:55:39:
                    77:2a:ee:eb:dd:20:3f:59:ce:68:55:75:27:04:25:
                    8e:d5:a2:b5:a1:a0:05:1b:02:85:9d:77:17:81:af:
                    5f:a5:50:1c:03:ad:5f:93:99:6c:0f:ab:57:41:da:
                    ac:e4:e0:c5:67:b8:f6:63:18:38:da:5a:60:c9:b9:
                    96:79:d4:c0:84:8c:fb:9a:d6:c0:2d:74:ef:f5:54:
                    4a:8f:d6:52:66:a5:ac:2d:34:74:cb:b4:03:f8:35:
                    6c:91:4a:cb:41:9c:e2:08:97:0a:bb:3b:c8:09:ca:
                    0b:7b:51:01:26:7e:1d:c6:98:b4:9b:2a:75:a0:6a:
                    09:1b:23:9a:46:cc:ff:2c:0c:8d:29:1a:67:37:14:
                    fb:06:ea:09:54:b9:4d:17:a1:88:c8:02:05:b6:87:
                    2a:ce:02:63:5a:4a:84:f7:43:ae:8a:42:e5:5b:b3:
                    f8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2E:71:FF:E6:EE:DC:3A:B2:5B:47:9E:8C:49:60:07:0F:6C:D7:5C
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032303a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c020::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:17:99:84:9d:c5:eb:0b:8d:d9:44:d1:65:d7:b1:3e:29:6c:
         00:26:18:2d:1a:59:df:e0:9c:02:3e:8d:b5:63:e4:cd:f4:ea:
         ad:6d:e1:83:77:2b:43:ec:9e:13:4b:16:18:aa:93:c2:f6:ca:
         f5:16:81:27:a2:98:15:80:cc:02:cf:70:1c:b6:38:57:de:e2:
         c6:7b:a7:bb:88:d0:bf:a2:c1:64:f5:2e:61:f4:c1:42:4e:a9:
         09:c9:62:ef:7d:9b:e8:76:f9:48:2a:cc:83:01:e5:f6:a7:c0:
         3f:12:26:43:94:c4:37:e1:53:ed:0c:18:ee:57:b0:73:31:f0:
         31:4f:2f:87:a1:10:76:10:b1:82:1f:69:90:99:a6:94:31:6e:
         db:27:0d:1b:c5:f1:42:e0:0d:8b:61:98:30:63:34:41:d1:42:
         d3:47:51:c8:29:f9:1f:9c:c2:1a:90:33:ec:bc:5b:6f:c9:ac:
         fc:b8:8f:63:10:2d:75:cd:a7:e1:06:2d:f8:e9:f0:70:54:ae:
         a9:b5:3e:e3:35:1e:e4:cc:8c:2f:6a:c2:21:8f:92:4e:44:af:
         dc:02:2e:ec:30:51:bd:9d:2d:1b:49:72:67:ad:f8:2e:84:19:
         f8:c9:37:17:59:21:f2:97:1f:7d:82:b1:87:7a:87:ab:ac:57:
         86:3c:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org