Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033653a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633033653a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          qA3VEjENfgl8OIPecA/CL8ngsgyZEO3x2GQ+EJgm2g8=
Subject key identifier:   40:A7:97:7F:78:16:85:BB:BE:D5:6B:E1:FE:12:6F:06:79:F6:72:8C
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       07ED2E99243ED0A1B20DC767E13DC061A2A5AE22
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033653a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:59 +0000
ROA not before:           Thu 24 Aug 2023 18:47:59 +0000
ROA not after:            Thu 22 Aug 2024 18:52:59 +0000
asID:                     61592
IP address blocks:        2804:4c34:c03e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ed:2e:99:24:3e:d0:a1:b2:0d:c7:67:e1:3d:c0:61:a2:a5:ae:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:59 2023 GMT
            Not After : Aug 22 18:52:59 2024 GMT
        Subject: CN=40A7977F781685BBBED56BE1FE126F0679F6728C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:d1:0e:73:23:36:a2:46:fd:cb:52:80:72:
                    0e:62:f7:ea:b7:e0:50:38:ad:20:6d:53:05:9c:05:
                    75:55:c5:b0:c1:4c:bd:cc:61:fe:0b:64:81:65:da:
                    05:18:f3:b0:c0:fd:c2:25:d5:c3:d6:2d:ed:08:b5:
                    83:f3:6e:6b:bb:cf:14:a7:cf:e4:d0:ee:af:85:b7:
                    16:0c:70:ae:9c:53:72:1e:3f:ea:0e:04:e9:ad:4a:
                    b9:05:e2:4f:4e:74:8a:f7:b0:1e:0e:0e:2d:87:32:
                    dd:54:60:47:0f:f3:99:52:ed:21:8a:0d:28:74:73:
                    28:66:53:58:ee:88:17:c8:68:ce:dd:fc:0a:a7:06:
                    a2:60:3a:da:3e:a2:93:5e:5a:df:66:31:26:86:7d:
                    1f:33:4f:2c:73:50:02:c2:f4:1b:37:b6:5c:21:2e:
                    4c:d1:6f:18:d4:22:a4:59:6a:9b:6e:04:6b:f0:c9:
                    58:6d:b5:e3:d8:90:13:32:60:2f:e2:bf:7c:96:e2:
                    9f:a9:79:f2:db:20:c0:f0:1e:a2:bd:27:73:46:45:
                    ab:b6:b8:84:5f:45:73:e7:77:f7:23:37:39:18:4c:
                    8e:b5:6a:fd:46:02:01:8a:e6:48:39:a8:cd:95:1a:
                    84:d7:48:cc:1a:e5:e4:9f:9f:49:4e:4f:35:38:68:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A7:97:7F:78:16:85:BB:BE:D5:6B:E1:FE:12:6F:06:79:F6:72:8C
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033653a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c03e::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:2f:bd:b1:d7:ce:82:3c:7f:59:f8:db:19:9e:a8:ba:f7:da:
         bd:bb:d2:b3:3e:89:12:80:57:14:87:e3:d3:98:2d:5e:7a:59:
         d1:42:bd:1a:18:31:c9:7d:84:b7:4d:69:9d:f4:e8:a3:3a:76:
         b6:bf:b9:d3:08:a1:d6:24:0a:bd:52:14:3f:14:20:38:cb:bf:
         4c:5b:a4:dc:9b:e6:cd:03:07:04:97:79:2f:1f:72:ce:c3:5d:
         31:40:3f:c4:fa:d9:57:c0:25:b3:90:4b:00:64:26:c7:d7:ab:
         43:14:88:71:01:16:2b:08:ae:8c:c0:43:b8:bb:65:87:fa:3a:
         45:31:42:32:8d:21:6a:5b:30:76:7f:b6:4a:27:a2:40:23:7f:
         2d:d1:fd:11:f0:44:8b:7a:f2:b1:c4:63:6d:b9:b7:c5:cd:e8:
         c9:9b:d5:4b:ec:74:62:cc:41:6e:62:9c:31:f9:90:f3:b9:c1:
         02:5f:a8:3d:99:41:7c:f4:9e:bf:23:3c:23:ec:b6:f5:7d:ea:
         dc:8a:72:79:fc:4d:d2:c6:f2:6d:7d:53:ef:cf:ee:a8:82:41:
         61:42:c1:27:bf:ac:d4:dd:9f:09:0c:4d:80:20:88:29:0b:0b:
         22:ef:b0:56:21:fa:bf:9b:d8:b4:38:8f:0f:58:70:37:02:ac:
         53:9b:60:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org