Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033343a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633033343a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          HQxKfQE2gIY+optP/UR0e7Wp6mOfwM8M/OYlrxUCw7Q=
Subject key identifier:   70:BD:8C:A4:04:CD:06:E5:A6:6A:34:45:0C:B5:B6:87:6E:BE:CC:93
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       2183BD8C0DAE49C28E4F75C4630CF2912E1AF8B3
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033343a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:05 +0000
ROA not before:           Thu 24 Aug 2023 18:48:05 +0000
ROA not after:            Thu 22 Aug 2024 18:53:05 +0000
asID:                     61592
IP address blocks:        2804:4c34:c034::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:83:bd:8c:0d:ae:49:c2:8e:4f:75:c4:63:0c:f2:91:2e:1a:f8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:05 2023 GMT
            Not After : Aug 22 18:53:05 2024 GMT
        Subject: CN=70BD8CA404CD06E5A66A34450CB5B6876EBECC93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ea:88:a2:30:bf:28:85:4d:a7:b4:6b:49:c2:
                    0f:b4:e4:0d:fa:1d:05:60:6a:72:fd:be:fe:9d:89:
                    11:e4:24:d3:9c:1c:cd:ea:cb:1b:76:49:05:5f:2a:
                    f7:3d:0e:75:8a:f2:73:2f:6e:ee:59:28:6d:a9:0d:
                    e0:a0:34:08:27:f1:61:10:2c:f6:26:96:02:e9:42:
                    4d:69:79:ea:9f:c5:4e:61:60:98:1b:70:ac:f1:f6:
                    2d:76:77:53:b3:6d:38:a4:9f:b7:f2:81:85:02:b0:
                    69:6c:64:1e:37:dd:58:91:b8:bd:2b:43:d1:8e:3b:
                    43:4b:d8:f8:94:66:51:31:27:94:02:9f:1f:f0:15:
                    c9:7d:03:d6:69:33:71:b8:a9:92:cd:1a:c6:b8:46:
                    ca:c2:9b:58:9f:46:84:a5:e7:77:79:1e:1d:15:b2:
                    3e:82:1f:25:a1:1f:56:c3:93:ef:a3:19:ae:36:86:
                    9c:ee:72:d4:06:c9:fa:51:c7:b0:eb:92:fb:29:c7:
                    6a:c4:b9:d9:c1:ad:da:69:e6:50:fb:e3:9e:b9:29:
                    e3:bc:a4:6a:0e:06:e2:dc:e4:61:1f:0c:06:25:37:
                    d4:57:68:8a:21:cf:8f:93:78:41:b8:35:49:a4:35:
                    38:47:a0:9a:86:0c:8e:c2:fb:cc:32:2b:9c:99:91:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BD:8C:A4:04:CD:06:E5:A6:6A:34:45:0C:B5:B6:87:6E:BE:CC:93
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033343a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c034::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:1f:af:85:30:75:15:80:cf:67:52:6c:83:fa:36:39:b7:28:
         01:c2:2d:2d:cd:8b:d0:6d:98:52:63:1c:b1:48:be:c4:cb:cc:
         9f:c9:64:c6:c9:50:a8:89:2e:aa:a7:ae:22:cf:5b:90:1f:85:
         ba:88:df:79:0b:c7:db:58:fd:79:71:55:78:d9:40:d9:5a:e6:
         5b:6f:59:d7:6a:22:52:7d:95:bd:7b:2c:41:9a:54:0b:8f:5f:
         25:1d:ab:31:1a:1c:68:19:99:d2:24:0b:76:cd:48:58:20:ce:
         d1:11:59:05:d4:91:a9:33:e0:2b:c2:92:5a:dd:6b:e1:5f:03:
         83:20:a3:36:6d:58:06:b4:d7:ca:e2:09:2a:b0:89:93:bd:7c:
         89:3a:bb:28:65:8c:0a:a7:c7:08:08:31:67:40:0e:28:bd:92:
         38:c3:86:96:bc:51:de:c5:ec:f7:b4:67:f9:2c:e9:8b:e5:8d:
         5b:c4:f3:c1:90:2e:e1:8c:4b:8f:8f:38:2d:e4:9b:f5:f7:98:
         15:6c:de:b5:99:fc:9c:4e:8c:c9:e0:93:ff:62:54:30:6f:18:
         af:ff:09:26:39:b4:7a:03:46:d3:78:fb:64:47:ae:b2:58:0c:
         58:da:02:4e:96:6a:d7:2d:d3:89:15:a0:de:71:c0:e6:79:0c:
         3f:45:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org