Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033613a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633033613a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          FD5VqUTQj+pkA8kFQKtNCe5YEFhQSyPhPecjT7HFpZc=
Subject key identifier:   53:E4:98:60:B3:04:02:43:32:B9:F1:A0:38:07:99:08:5F:61:9C:9E
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       7FFEA5130716767C0BA23E6EB45067168EABCC3E
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033613a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:06 +0000
ROA not before:           Thu 24 Aug 2023 18:48:06 +0000
ROA not after:            Thu 22 Aug 2024 18:53:06 +0000
asID:                     61592
IP address blocks:        2804:4c34:c03a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fe:a5:13:07:16:76:7c:0b:a2:3e:6e:b4:50:67:16:8e:ab:cc:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:06 2023 GMT
            Not After : Aug 22 18:53:06 2024 GMT
        Subject: CN=53E49860B304024332B9F1A0380799085F619C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:50:8a:ee:28:7a:4b:ba:61:bb:69:1c:63:80:
                    75:e7:63:3b:1e:d6:2f:40:f9:be:e4:69:3f:82:38:
                    6e:9b:d2:66:15:f3:04:a5:3b:1e:09:fe:08:78:d3:
                    26:b5:cc:51:b5:02:4a:ad:e2:b6:57:1d:7c:87:90:
                    96:84:38:41:37:b5:d5:89:87:35:07:3d:4b:a0:7e:
                    9e:53:e9:0c:47:4b:5b:1e:16:96:8d:da:83:eb:1e:
                    73:d0:8b:db:6c:a3:b9:31:6b:f3:40:dd:17:20:03:
                    7c:9b:21:32:5f:ab:19:aa:b4:47:1a:6f:97:30:b8:
                    d8:73:4c:7c:09:2a:7c:f6:21:1e:3d:84:a7:b4:09:
                    26:ff:19:aa:24:62:7f:b3:16:9a:02:eb:4e:cd:9a:
                    d4:9e:c0:34:32:7f:47:ca:a1:4f:ab:c1:c8:87:08:
                    7e:37:07:ab:0e:d2:9f:6d:a5:b5:c9:21:31:f6:05:
                    ec:01:af:f8:e8:44:a9:00:5c:e0:9c:56:1e:0a:84:
                    10:7a:f3:55:e7:e5:8a:58:12:60:b8:f3:ac:e4:0b:
                    b6:51:a7:47:de:95:8c:b2:3f:4e:a1:2a:d0:bc:cb:
                    10:bb:61:b5:db:91:52:31:cf:78:69:32:91:d9:8a:
                    ef:61:de:2f:dd:78:31:e1:97:e2:9e:f6:c7:40:c1:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E4:98:60:B3:04:02:43:32:B9:F1:A0:38:07:99:08:5F:61:9C:9E
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033613a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c03a::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:cf:4d:3b:e3:f3:6a:d8:48:e0:ed:26:1e:33:2e:1c:10:12:
         28:77:a0:c1:5d:90:1e:6a:87:47:49:93:86:7c:15:77:ee:63:
         2a:a3:b7:96:c6:5c:c2:0d:35:65:25:bf:63:89:9e:59:ef:29:
         df:de:f9:2c:bc:29:50:f6:c9:a8:a9:38:95:a7:4e:03:80:11:
         0b:78:a0:3e:00:e0:6c:89:d5:68:b6:e8:c0:68:fa:39:6a:57:
         d2:a2:6e:32:cb:ce:b3:67:db:94:d0:87:82:5b:f4:36:84:09:
         6a:e1:cb:e3:06:a7:9b:29:58:b6:1b:e2:19:12:e5:c2:a6:95:
         08:e5:2d:96:f9:62:bc:08:5e:ba:86:53:9a:91:3d:c6:d9:65:
         87:48:50:0d:d8:c6:2c:2d:55:5b:6a:4e:c4:60:af:9b:25:42:
         61:b5:a1:38:5d:aa:df:15:31:04:b5:bd:bf:51:47:46:20:10:
         26:80:7e:bd:8c:88:8c:a1:c4:39:09:ff:5d:a1:8b:12:43:03:
         ea:cb:35:f7:44:59:d3:51:f9:6b:be:a9:c7:b9:c3:ff:53:aa:
         4f:68:6c:1f:8d:06:76:06:37:48:67:75:c3:9b:ee:f2:74:43:
         a5:97:e3:4e:33:72:42:2f:33:67:f5:12:c7:98:ab:fc:f6:63:
         5d:08:e8:c8
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUf/6lEwcWdnwLoj5utFBnFo6rzD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDZaFw0yNDA4MjIxODUzMDZaMDMxMTAvBgNV
BAMTKDUzRTQ5ODYwQjMwNDAyNDMzMkI5RjFBMDM4MDc5OTA4NUY2MTlDOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTUIruKHpLumG7aRxjgHXnYzse
1i9A+b7kaT+COG6b0mYV8wSlOx4J/gh40ya1zFG1Akqt4rZXHXyHkJaEOEE3tdWJ
hzUHPUugfp5T6QxHS1seFpaN2oPrHnPQi9tso7kxa/NA3RcgA3ybITJfqxmqtEca
b5cwuNhzTHwJKnz2IR49hKe0CSb/GaokYn+zFpoC607NmtSewDQyf0fKoU+rwciH
CH43B6sO0p9tpbXJITH2BewBr/joRKkAXOCcVh4KhBB681Xn5YpYEmC486zkC7ZR
p0felYyyP06hKtC8yxC7YbXbkVIxz3hpMpHZiu9h3i/deDHhl+Ke9sdAwQF3AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUU+SYYLMEAkMyufGgOAeZCF9hnJ4wHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2MzMwMzM2MTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0wDowDQYJKoZIhvcNAQELBQAD
ggEBAFzPTTvj82rYSODtJh4zLhwQEih3oMFdkB5qh0dJk4Z8FXfuYyqjt5bGXMIN
NWUlv2OJnlnvKd/e+Sy8KVD2yaipOJWnTgOAEQt4oD4A4GyJ1Wi26MBo+jlqV9Ki
bjLLzrNn25TQh4Jb9DaECWrhy+MGp5spWLYb4hkS5cKmlQjlLZb5YrwIXrqGU5qR
PcbZZYdIUA3YxiwtVVtqTsRgr5slQmG1oThdqt8VMQS1vb9RR0YgECaAfr2MiIyh
xDkJ/12hixJDA+rLNfdEWdNR+Wu+qce5w/9Tqk9obB+NBnYGN0hndcOb7vJ0Q6WX
404zckIvM2f1EseYq/z2Y10I6Mg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org