Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033353a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633033353a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          3/0oWSc2Q674ZYDYEpYwA5xQ6UPn8UX62MfSw6tm/98=
Subject key identifier:   EA:7F:BF:3B:37:F2:CA:BB:A5:00:36:6C:48:C9:D3:D6:C8:42:90:5A
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       5398070539261BDCC27C41227B3C3F93A01B3460
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033353a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:03 +0000
ROA not before:           Thu 24 Aug 2023 18:48:03 +0000
ROA not after:            Thu 22 Aug 2024 18:53:03 +0000
asID:                     61592
IP address blocks:        2804:4c34:c035::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:98:07:05:39:26:1b:dc:c2:7c:41:22:7b:3c:3f:93:a0:1b:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:03 2023 GMT
            Not After : Aug 22 18:53:03 2024 GMT
        Subject: CN=EA7FBF3B37F2CABBA500366C48C9D3D6C842905A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:93:2a:1a:19:de:e7:52:1b:12:3f:ff:3b:89:
                    98:2d:26:e7:47:52:33:1e:da:7f:50:e1:b1:e3:96:
                    9f:e1:96:d9:9c:62:fd:98:86:45:6a:d1:f6:a5:4d:
                    ef:5a:55:d6:c8:74:db:9a:48:78:33:30:bf:ec:b1:
                    17:80:50:e3:37:0d:15:33:37:18:e0:f6:79:56:b2:
                    e3:59:99:5c:c9:47:71:78:46:8c:51:56:10:75:a8:
                    a5:b7:26:47:bc:8c:f8:96:23:6b:52:86:8b:19:77:
                    5f:69:9c:30:93:48:12:4a:ef:ea:a9:1f:78:48:d0:
                    da:d6:41:95:d7:76:cf:f7:2b:51:2b:51:2a:ff:85:
                    81:45:ad:51:41:e0:64:08:a0:04:98:28:0c:02:02:
                    26:e1:fa:64:33:70:fd:6a:c9:f9:f6:32:d0:87:cd:
                    f9:b4:7a:3f:c5:a4:57:77:c6:bf:57:3c:f7:bf:67:
                    f4:38:28:c0:ad:30:44:47:b1:c9:f2:a7:1b:3b:4f:
                    05:db:5b:3f:b1:72:9e:43:f0:46:b7:c4:c9:5b:e4:
                    54:3f:7e:e3:e9:4e:ea:c8:3c:34:bd:f8:26:b3:bb:
                    c0:cd:10:c0:85:e9:98:a3:da:ef:00:dc:c0:81:06:
                    b3:d5:76:21:b5:c3:d0:01:e9:7a:ca:c7:40:80:f8:
                    2e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7F:BF:3B:37:F2:CA:BB:A5:00:36:6C:48:C9:D3:D6:C8:42:90:5A
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033353a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c035::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:75:fd:ca:de:b8:77:8f:e2:b9:51:07:1e:79:97:70:77:
         64:cc:07:27:a3:35:32:0a:a2:1e:28:87:67:80:c4:0d:1a:17:
         fc:17:9a:4d:18:f5:0f:3b:9c:b8:d6:4e:48:c0:86:22:ba:4f:
         f4:5f:58:93:86:18:f1:b4:3c:ed:d9:9d:76:e8:77:be:74:47:
         53:b8:84:24:4e:6d:31:df:92:6a:73:d8:8a:d5:ed:9a:fe:2b:
         cc:e8:b0:f9:39:52:8c:1e:94:53:86:12:40:36:d0:f5:f1:d4:
         c3:62:52:5b:74:74:2a:6f:77:f3:d1:94:05:52:22:6e:59:6b:
         35:57:44:c6:d7:ed:cc:cd:a2:06:ce:73:52:00:32:07:cd:e0:
         80:0b:10:5a:d1:c5:aa:d5:fa:26:11:e8:50:64:6b:71:de:f8:
         59:f0:7e:42:39:df:1a:27:8f:49:8b:a0:98:da:51:d0:aa:7f:
         45:de:dc:be:bc:76:af:83:42:e4:ae:3f:d0:07:0a:db:73:5e:
         33:b7:6c:f8:89:af:80:14:3b:e1:b2:93:5f:b1:da:cc:50:8d:
         24:5c:92:4a:92:f8:53:1e:31:50:11:b8:6f:e2:29:5b:ee:02:
         a8:29:37:5c:28:cf:9d:c9:84:ad:60:8d:97:ed:8b:ba:39:bf:
         f7:fc:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org