Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033373a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633033373a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          BoIWNrvPFrIY2nI9JysOLfq8FphfBxV4w4NWJmLBnx4=
Subject key identifier:   27:82:6E:96:72:0D:A5:A5:6C:77:F4:56:78:34:6C:45:F5:0F:93:4C
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       4C393BFBA0B1D514D2DAC069B97F3803C446AEF9
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033373a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:08 +0000
ROA not before:           Thu 24 Aug 2023 18:48:08 +0000
ROA not after:            Thu 22 Aug 2024 18:53:08 +0000
asID:                     61592
IP address blocks:        2804:4c34:c037::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:39:3b:fb:a0:b1:d5:14:d2:da:c0:69:b9:7f:38:03:c4:46:ae:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:08 2023 GMT
            Not After : Aug 22 18:53:08 2024 GMT
        Subject: CN=27826E96720DA5A56C77F45678346C45F50F934C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:80:91:b4:77:8b:5e:d8:ba:1e:c0:fb:5a:
                    41:c1:ea:28:36:7e:10:58:c8:1a:84:33:8d:6b:69:
                    fb:f8:17:c5:05:3c:e5:a6:e7:ed:5c:2c:51:ce:8c:
                    31:87:47:22:d2:b5:2e:16:55:bc:81:15:59:ac:de:
                    a1:e2:d8:46:35:c3:1a:90:62:7a:6d:46:f9:25:a6:
                    36:99:2d:b7:dc:f1:fd:51:69:24:fc:d8:c0:d1:d3:
                    1d:9e:87:c9:49:ea:72:4c:3a:59:c2:4a:fd:6d:7d:
                    16:e1:ab:74:f6:d0:2f:a9:00:b1:2a:57:4d:ce:f4:
                    2c:d8:f3:bb:fc:53:3d:d4:67:f5:87:e3:16:af:b5:
                    8f:52:7c:f9:b2:f3:40:a0:a2:ff:8f:70:47:37:ee:
                    57:01:9b:41:cd:0c:8f:ec:19:77:ea:45:71:5a:55:
                    c9:a3:e9:40:e1:00:36:d8:f5:60:d8:9c:27:b1:bb:
                    90:24:50:a3:e8:4c:e6:e7:3b:95:bb:26:ac:d2:bb:
                    52:b8:38:87:c0:3d:c6:07:a5:54:a4:58:88:c8:5a:
                    f6:55:7b:91:37:55:ba:01:3c:66:4d:56:33:df:19:
                    c6:b4:5a:94:4c:31:40:bd:0c:6a:d2:49:5f:9e:79:
                    52:d7:87:3c:74:f2:20:ec:ef:2e:ea:a2:c2:47:08:
                    c8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:82:6E:96:72:0D:A5:A5:6C:77:F4:56:78:34:6C:45:F5:0F:93:4C
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033373a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c037::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:ae:77:03:16:b7:19:d0:83:80:24:9e:b5:b3:f0:b6:ed:fc:
         72:65:01:ce:ad:c3:48:43:99:d7:c2:26:4b:e5:da:d6:24:e1:
         14:63:8f:8c:a5:24:67:59:bb:27:b5:67:89:77:0f:47:fc:8f:
         33:4a:b0:48:80:d1:b3:24:c5:cc:14:41:88:7f:cf:d8:4f:c6:
         71:8f:52:a5:07:20:16:e7:b7:d8:f8:23:3e:20:66:c7:40:3c:
         e4:a7:05:7c:07:48:95:01:44:a5:06:1c:b8:22:58:e4:3e:54:
         92:e0:e5:f5:93:1e:9e:44:cb:d8:a3:37:d1:24:c7:02:93:f7:
         01:95:6a:d5:e9:76:a6:3f:1a:dd:88:90:b6:51:20:96:b6:18:
         12:90:4f:24:40:76:a6:04:35:60:b9:2e:1b:1e:36:c9:84:e8:
         72:17:22:75:b6:eb:d0:e4:99:d3:41:fc:bb:c5:e3:bb:4a:4e:
         b5:ce:ac:09:9d:f6:ef:d1:72:9d:5d:c8:39:c2:46:a6:e9:a5:
         20:03:af:a7:e6:a6:c4:b4:22:e3:84:9f:3e:db:6e:1c:c9:4c:
         51:52:b8:0a:86:41:39:22:c2:03:6e:3f:12:eb:96:a2:59:85:
         f0:c4:7b:c9:39:ef:e3:c6:87:67:3a:ee:39:db:6a:af:3e:4b:
         33:b5:e2:b2
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUTDk7+6Cx1RTS2sBpuX84A8RGrvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDhaFw0yNDA4MjIxODUzMDhaMDMxMTAvBgNV
BAMTKDI3ODI2RTk2NzIwREE1QTU2Qzc3RjQ1Njc4MzQ2QzQ1RjUwRjkzNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVF4CRtHeLXti6HsD7WkHB6ig2
fhBYyBqEM41rafv4F8UFPOWm5+1cLFHOjDGHRyLStS4WVbyBFVms3qHi2EY1wxqQ
YnptRvklpjaZLbfc8f1RaST82MDR0x2eh8lJ6nJMOlnCSv1tfRbhq3T20C+pALEq
V03O9CzY87v8Uz3UZ/WH4xavtY9SfPmy80Cgov+PcEc37lcBm0HNDI/sGXfqRXFa
Vcmj6UDhADbY9WDYnCexu5AkUKPoTObnO5W7JqzSu1K4OIfAPcYHpVSkWIjIWvZV
e5E3VboBPGZNVjPfGca0WpRMMUC9DGrSSV+eeVLXhzx08iDs7y7qosJHCMgJAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUJ4JulnINpaVsd/RWeDRsRfUPk0wwHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2MzMwMzMzNzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0wDcwDQYJKoZIhvcNAQELBQAD
ggEBACCudwMWtxnQg4AknrWz8Lbt/HJlAc6tw0hDmdfCJkvl2tYk4RRjj4ylJGdZ
uye1Z4l3D0f8jzNKsEiA0bMkxcwUQYh/z9hPxnGPUqUHIBbnt9j4Iz4gZsdAPOSn
BXwHSJUBRKUGHLgiWOQ+VJLg5fWTHp5Ey9ijN9EkxwKT9wGVatXpdqY/Gt2IkLZR
IJa2GBKQTyRAdqYENWC5LhseNsmE6HIXInW269DkmdNB/LvF47tKTrXOrAmd9u/R
cp1dyDnCRqbppSADr6fmpsS0IuOEnz7bbhzJTFFSuAqGQTkiwgNuPxLrlqJZhfDE
e8k57+PGh2c67jnbaq8+SzO14rI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org