Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033633a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633033633a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          fhqGN71wDU33bpg0YWK28xN6qc103OT8LXwclKzNivA=
Subject key identifier:   3E:1D:ED:E7:B8:1B:48:B6:81:8A:11:63:91:91:C2:BC:09:20:EC:E8
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       45D393B56E2D7BFCDB108F34F87A3EC8D3B453A6
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033633a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:08 +0000
ROA not before:           Thu 24 Aug 2023 18:48:08 +0000
ROA not after:            Thu 22 Aug 2024 18:53:08 +0000
asID:                     61592
IP address blocks:        2804:4c34:c03c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d3:93:b5:6e:2d:7b:fc:db:10:8f:34:f8:7a:3e:c8:d3:b4:53:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:08 2023 GMT
            Not After : Aug 22 18:53:08 2024 GMT
        Subject: CN=3E1DEDE7B81B48B6818A11639191C2BC0920ECE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:a2:d3:20:5d:91:c9:84:cb:6d:fc:6c:33:
                    c3:7d:b7:de:d6:89:a4:d1:a6:1e:8c:32:78:eb:09:
                    a8:4a:c8:82:ea:cb:ae:37:02:fa:b6:81:7f:24:44:
                    51:68:22:ae:d8:a7:00:f3:1d:bc:dd:ee:cf:f6:8c:
                    ce:46:4c:8f:1c:5d:a8:60:19:07:ba:4b:21:6b:96:
                    6e:32:0b:d5:fb:1d:44:87:55:45:cf:f0:a6:9c:70:
                    3e:c1:66:b0:40:37:57:8a:0a:1e:e0:c1:c8:6e:f5:
                    27:f9:be:dc:4d:1a:b8:9b:b8:77:57:bf:80:e6:39:
                    18:67:99:19:70:48:0a:16:e0:22:f5:4e:e4:30:0b:
                    be:a2:1a:c7:b5:1d:23:b2:34:57:09:25:4b:6c:15:
                    dd:bc:c2:79:d2:c4:fe:95:be:f4:94:ff:b5:40:11:
                    7b:69:6e:a4:b7:03:47:2d:8a:31:6d:d0:45:e7:89:
                    15:d7:b5:04:ab:18:e2:6e:17:8b:06:23:c2:cc:57:
                    b0:ce:35:2f:60:1d:11:7f:b6:91:80:58:31:fe:34:
                    53:a1:69:4a:d0:46:84:1d:26:fb:03:37:ea:cd:de:
                    41:10:0c:e9:b3:36:1a:a8:1d:c9:4b:e9:32:01:f3:
                    30:cd:d3:fd:7a:23:53:68:a9:f6:b0:29:d0:b4:f3:
                    fc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1D:ED:E7:B8:1B:48:B6:81:8A:11:63:91:91:C2:BC:09:20:EC:E8
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033633a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c03c::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:0d:f0:6b:39:79:1a:14:35:36:f0:2c:c4:3c:66:8c:56:
         2b:8a:24:81:91:b0:1b:97:af:9a:2a:4d:f3:ec:79:c6:3e:c6:
         85:89:c2:92:66:0e:b4:07:ac:45:be:a5:ab:0d:c0:99:f3:1a:
         1b:2f:30:51:14:44:71:df:84:a3:7b:5c:b5:bd:e1:97:c1:c7:
         24:1b:33:d7:6e:fe:54:8d:ef:59:8b:7c:e6:3e:46:13:54:57:
         88:f9:77:e9:19:45:09:fc:59:03:78:ab:4c:28:3c:8f:d8:5d:
         21:e6:d5:e2:8f:b1:69:47:0d:28:b5:c1:e6:76:34:dd:51:29:
         e1:a4:a9:03:3e:65:d4:43:c4:07:7e:a9:48:87:b2:5d:ef:1c:
         bd:4e:bd:2b:7e:fb:c8:20:5c:01:84:51:10:b7:66:c0:24:4b:
         96:f9:8b:47:65:06:37:41:66:d2:99:49:35:58:a2:0d:64:38:
         38:17:f6:82:89:8e:60:06:8c:bd:47:48:4b:e6:3a:98:37:a9:
         1a:2d:6f:f3:74:53:ea:1e:1b:e3:aa:b1:1a:95:8b:3d:9d:18:
         b3:17:60:85:ce:ab:38:36:ff:1e:4b:75:14:a2:ea:74:3d:a6:
         64:64:4b:23:78:31:a5:1d:1f:ad:3c:8f:da:67:72:7e:45:ce:
         0c:f3:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org