Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032333a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633032333a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          wsycmAoDkIb919nCgsuqQCm24IUpy8utvrZmvJdQsOw=
Subject key identifier:   B5:13:12:D0:D4:41:1E:57:67:9D:57:30:51:18:E0:3F:14:40:28:9D
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       562472CE8AD842424AE567C411750B6F9552B717
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032333a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:02 +0000
ROA not before:           Thu 24 Aug 2023 18:48:02 +0000
ROA not after:            Thu 22 Aug 2024 18:53:02 +0000
asID:                     61592
IP address blocks:        2804:4c34:c023::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:24:72:ce:8a:d8:42:42:4a:e5:67:c4:11:75:0b:6f:95:52:b7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:02 2023 GMT
            Not After : Aug 22 18:53:02 2024 GMT
        Subject: CN=B51312D0D4411E57679D57305118E03F1440289D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:72:33:72:9d:76:21:83:21:61:f1:c8:9e:
                    1f:99:84:22:db:02:33:06:12:63:f9:97:72:07:b3:
                    17:9c:f0:6f:30:c8:cb:52:78:3b:ec:e7:82:0f:f0:
                    a4:1e:7c:d6:29:2e:dd:94:93:d3:5b:cc:d4:03:04:
                    c0:94:01:9a:b3:5b:a0:48:41:69:9e:8c:a9:05:2c:
                    f3:9c:dc:a3:c5:e7:06:ae:a1:05:7b:17:e3:42:7f:
                    72:4b:77:8c:54:3a:92:49:62:5a:92:7b:24:6b:40:
                    12:ed:8d:0e:2e:98:e4:ff:72:34:53:e0:ce:c4:b3:
                    28:5c:da:19:5d:66:37:2d:85:84:f3:6d:2e:00:2d:
                    50:9a:74:d8:bd:97:6c:48:42:09:88:65:d2:1b:3b:
                    f8:a5:26:94:e3:b8:ad:99:9d:4d:11:fd:8f:bb:03:
                    e8:1f:ee:6c:88:da:3a:0a:35:8a:1e:c7:aa:1f:f3:
                    87:cc:1c:98:e0:19:c9:31:b8:b6:3c:25:66:a3:be:
                    8f:ec:96:9e:66:e9:dd:f5:ef:15:48:86:c6:a8:fa:
                    8b:f4:44:35:ea:05:46:d5:af:73:3d:2f:3d:13:ee:
                    ef:e5:87:24:0c:61:32:8c:47:03:5d:93:1f:a5:c9:
                    44:73:f2:9c:b9:02:75:0f:0e:84:e8:a0:e9:32:a5:
                    b3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:13:12:D0:D4:41:1E:57:67:9D:57:30:51:18:E0:3F:14:40:28:9D
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032333a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c023::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:3d:c7:3f:ff:89:da:c6:7d:6a:90:e8:39:d2:1e:31:fb:3f:
         6e:33:44:a8:d5:08:07:a7:37:56:2a:b8:fc:0b:bd:3c:35:15:
         68:fb:ae:46:6b:16:85:df:3e:91:32:1d:f6:df:28:74:ec:ad:
         85:70:a0:85:8b:4b:51:9b:72:88:23:90:44:b5:b9:a5:48:ad:
         ef:7b:33:7f:74:6e:15:33:a1:c1:6d:e3:f8:5c:72:8a:de:0c:
         1d:b2:d9:0e:f0:2b:9d:9e:e7:ab:67:ab:ae:f8:f9:c5:90:54:
         c7:1a:29:7a:5a:e2:86:3b:60:89:77:c5:3a:a2:4c:28:e1:1a:
         f8:30:42:b9:30:39:37:a7:a8:e7:2f:81:9a:c3:56:2b:43:89:
         f8:97:de:1f:ae:75:4f:25:56:ff:23:70:be:2a:2d:79:4e:dc:
         c4:62:1b:93:b1:98:fe:49:54:d9:05:66:74:1d:cf:8c:3f:72:
         fb:57:18:d1:30:71:84:e0:92:6c:aa:c0:3c:7e:d3:65:0a:59:
         fa:7a:d6:58:51:d1:e3:11:4e:e8:ce:1d:ff:2f:87:a1:da:71:
         49:49:bf:e1:da:81:32:d9:cf:ae:7b:f0:b5:51:34:08:8c:65:
         4a:67:20:7b:72:14:0c:01:c8:7a:4d:3a:b3:9c:84:67:89:18:
         fc:f8:07:ca
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUViRyzorYQkJK5WfEEXULb5VStxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDJaFw0yNDA4MjIxODUzMDJaMDMxMTAvBgNV
BAMTKEI1MTMxMkQwRDQ0MTFFNTc2NzlENTczMDUxMThFMDNGMTQ0MDI4OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcHIzcp12IYMhYfHInh+ZhCLb
AjMGEmP5l3IHsxec8G8wyMtSeDvs54IP8KQefNYpLt2Uk9NbzNQDBMCUAZqzW6BI
QWmejKkFLPOc3KPF5wauoQV7F+NCf3JLd4xUOpJJYlqSeyRrQBLtjQ4umOT/cjRT
4M7Esyhc2hldZjcthYTzbS4ALVCadNi9l2xIQgmIZdIbO/ilJpTjuK2ZnU0R/Y+7
A+gf7myI2joKNYoex6of84fMHJjgGckxuLY8JWajvo/slp5m6d317xVIhsao+ov0
RDXqBUbVr3M9Lz0T7u/lhyQMYTKMRwNdkx+lyURz8py5AnUPDoTooOkypbORAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUtRMS0NRBHldnnVcwURjgPxRAKJ0wHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2MzMwMzIzMzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0wCMwDQYJKoZIhvcNAQELBQAD
ggEBAE09xz//idrGfWqQ6DnSHjH7P24zRKjVCAenN1YquPwLvTw1FWj7rkZrFoXf
PpEyHfbfKHTsrYVwoIWLS1GbcogjkES1uaVIre97M390bhUzocFt4/hccoreDB2y
2Q7wK52e56tnq674+cWQVMcaKXpa4oY7YIl3xTqiTCjhGvgwQrkwOTenqOcvgZrD
VitDifiX3h+udU8lVv8jcL4qLXlO3MRiG5OxmP5JVNkFZnQdz4w/cvtXGNEwcYTg
kmyqwDx+02UKWfp61lhR0eMRTujOHf8vh6HacUlJv+HagTLZz6578LVRNAiMZUpn
IHtyFAwByHpNOrOchGeJGPz4B8o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org