Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033323a3a2f34372d3437203d3e203631353932.roa
File:                     323830343a346333343a633033323a3a2f34372d3437203d3e203631353932.roa (raw, json)
Hash identifier:          oBswkNaU6PnS03/K7lWKYlfDLbo4/WcJVDg8NM4fBQc=
Subject key identifier:   64:DE:96:9F:82:0B:8F:B4:61:AE:B0:F3:9C:E0:61:B4:64:81:43:BC
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       0209B2F24A85F7AE8A64A39750B7ECEFC0C7C39E
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033323a3a2f34372d3437203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:01 +0000
ROA not before:           Thu 24 Aug 2023 18:48:01 +0000
ROA not after:            Thu 22 Aug 2024 18:53:01 +0000
asID:                     61592
IP address blocks:        2804:4c34:c032::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:09:b2:f2:4a:85:f7:ae:8a:64:a3:97:50:b7:ec:ef:c0:c7:c3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:01 2023 GMT
            Not After : Aug 22 18:53:01 2024 GMT
        Subject: CN=64DE969F820B8FB461AEB0F39CE061B4648143BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:be:65:28:7a:aa:8b:4f:bf:ea:4d:16:d5:fc:
                    45:2b:94:eb:26:f7:35:01:91:fb:42:e2:19:d5:ab:
                    d5:ea:08:70:fe:d4:f6:14:43:80:1b:fd:86:4f:eb:
                    32:bc:cc:96:15:3e:69:a4:03:bc:17:08:dc:80:9e:
                    38:1a:82:c4:27:4e:68:f8:9a:11:b1:b2:3b:bc:ec:
                    c9:1a:6c:5a:52:6f:83:2b:6f:cf:41:2d:4c:c3:44:
                    6d:80:16:72:cc:e5:5e:67:44:11:c3:11:32:b7:12:
                    89:fa:a4:b7:93:dc:cb:fd:3f:ad:a3:99:d4:1a:a0:
                    f0:b3:ac:c0:6e:cd:44:3c:16:4a:df:9e:7f:9a:96:
                    7c:1a:67:1b:5a:c6:5d:8a:cb:b0:fb:90:86:13:26:
                    47:e4:e5:be:56:55:d8:f3:6b:ff:a2:06:80:07:4e:
                    fc:f6:a7:6d:b0:ab:f5:91:40:d8:4f:45:5b:78:85:
                    64:f3:5b:66:5d:0e:b8:bc:52:cc:2b:35:f5:af:10:
                    90:e1:ce:40:18:38:50:a7:2b:8e:32:df:ff:6d:a0:
                    6d:5d:aa:18:a6:8f:f3:2f:f0:5f:e8:ec:b6:4d:e3:
                    49:28:d3:80:d7:3e:7b:10:e0:e1:ce:21:a8:d0:f4:
                    c4:66:0c:6b:28:8f:34:a2:85:38:3f:cb:ed:89:4a:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DE:96:9F:82:0B:8F:B4:61:AE:B0:F3:9C:E0:61:B4:64:81:43:BC
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033323a3a2f34372d3437203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c032::/47

    Signature Algorithm: sha256WithRSAEncryption
         9a:91:ac:4f:4a:cd:16:75:76:a5:8f:cd:c2:fe:ce:86:ac:5d:
         da:c7:32:67:4a:74:84:75:05:38:36:31:7d:5b:3e:9b:82:68:
         5d:8a:61:6e:18:81:70:a2:66:25:13:6b:f6:de:3b:5c:f8:3b:
         12:37:c3:2b:60:a1:8d:68:1d:da:5b:00:6c:12:ea:e9:72:e5:
         c2:1c:a8:bc:08:22:5f:9f:af:a3:8f:c8:9d:fc:b3:cc:d8:77:
         39:c4:18:c9:6c:fb:19:20:21:c8:7a:ea:1e:e0:57:e7:c9:c4:
         34:29:fa:0a:b1:76:bf:fa:c3:20:e8:cb:c9:3b:17:ed:1f:e8:
         74:b6:a2:a5:2c:44:08:79:c0:ae:84:d7:01:18:c2:95:4a:9c:
         42:77:c9:52:fb:16:87:be:4b:67:6a:20:5d:8e:53:3f:50:80:
         9f:4c:10:1f:ed:4b:52:89:13:5c:53:f5:67:c6:f6:c6:9d:2f:
         5e:59:89:76:01:ee:55:7d:c0:00:a8:ac:c1:89:94:fc:89:ce:
         c1:88:82:bc:ab:6d:45:3d:eb:cf:0a:d2:cc:d8:e7:d0:d5:a3:
         ab:da:e5:26:9d:69:b7:0b:c5:e4:39:66:a1:7c:d4:7c:42:90:
         ad:93:a8:da:b5:7e:e7:71:c6:ed:df:20:c6:4a:df:de:f9:37:
         8f:69:61:d5
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUAgmy8kqF966KZKOXULfs78DHw54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDFaFw0yNDA4MjIxODUzMDFaMDMxMTAvBgNV
BAMTKDY0REU5NjlGODIwQjhGQjQ2MUFFQjBGMzlDRTA2MUI0NjQ4MTQzQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTvmUoeqqLT7/qTRbV/EUrlOsm
9zUBkftC4hnVq9XqCHD+1PYUQ4Ab/YZP6zK8zJYVPmmkA7wXCNyAnjgagsQnTmj4
mhGxsju87MkabFpSb4Mrb89BLUzDRG2AFnLM5V5nRBHDETK3Eon6pLeT3Mv9P62j
mdQaoPCzrMBuzUQ8Fkrfnn+alnwaZxtaxl2Ky7D7kIYTJkfk5b5WVdjza/+iBoAH
Tvz2p22wq/WRQNhPRVt4hWTzW2ZdDri8UswrNfWvEJDhzkAYOFCnK44y3/9toG1d
qhimj/Mv8F/o7LZN40ko04DXPnsQ4OHOIajQ9MRmDGsojzSihTg/y+2JSo1jAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUZN6Wn4ILj7RhrrDznOBhtGSBQ7wwHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2MzMwMzMzMjNhM2EyZjM0MzcyZDM0MzcyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEoBEw0wDIwDQYJKoZIhvcNAQELBQAD
ggEBAJqRrE9KzRZ1dqWPzcL+zoasXdrHMmdKdIR1BTg2MX1bPpuCaF2KYW4YgXCi
ZiUTa/beO1z4OxI3wytgoY1oHdpbAGwS6uly5cIcqLwIIl+fr6OPyJ38s8zYdznE
GMls+xkgIch66h7gV+fJxDQp+gqxdr/6wyDoy8k7F+0f6HS2oqUsRAh5wK6E1wEY
wpVKnEJ3yVL7Foe+S2dqIF2OUz9QgJ9MEB/tS1KJE1xT9WfG9sadL15ZiXYB7lV9
wACorMGJlPyJzsGIgryrbUU9688K0szY59DVo6va5SadabcLxeQ5ZqF81HxCkK2T
qNq1fudxxu3fIMZK3975N49pYdU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org