Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033663a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633033663a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          1f8TXwXszJENCUt8+SZR8jD3MzqAO88uFaCHIJ54YZs=
Subject key identifier:   6C:68:1A:13:65:7B:AC:CF:90:63:01:CF:95:F8:7C:A6:20:3A:35:37
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       37DCBEAE7C42E6D7D188C54BB6CE659C17D97129
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033663a3a2f34382d3438203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:00 +0000
ROA not before:           Thu 24 Aug 2023 18:48:00 +0000
ROA not after:            Thu 22 Aug 2024 18:53:00 +0000
asID:                     61592
IP address blocks:        2804:4c34:c03f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:dc:be:ae:7c:42:e6:d7:d1:88:c5:4b:b6:ce:65:9c:17:d9:71:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:00 2023 GMT
            Not After : Aug 22 18:53:00 2024 GMT
        Subject: CN=6C681A13657BACCF906301CF95F87CA6203A3537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:a6:bd:86:c3:cd:f9:d4:72:9e:75:42:6b:
                    73:66:78:d0:95:18:5d:50:e1:50:b0:2f:ca:51:a8:
                    19:c0:9f:69:2f:5c:e6:e0:52:9c:60:ba:c2:b8:f8:
                    43:53:6f:01:ca:b1:47:2f:ab:9f:a7:8a:87:50:b6:
                    4d:5c:0b:5f:a4:ca:04:8c:d9:60:c2:14:29:26:ea:
                    f3:80:4a:6b:3f:b3:87:e6:eb:e5:b2:3a:d6:5f:aa:
                    76:83:91:c7:ce:43:96:e3:c8:2e:e3:33:a9:25:9f:
                    a4:ed:f3:e1:71:d9:1b:93:3f:69:8d:47:07:2c:a3:
                    7c:7b:55:3b:b3:37:75:24:3d:44:9b:1c:1a:b4:0f:
                    37:bd:56:39:57:c2:66:20:72:90:81:ec:5e:6e:71:
                    79:1b:19:54:40:58:17:8d:23:a8:84:3d:95:3d:8f:
                    19:bb:a1:38:27:f9:94:cb:50:68:b3:1d:63:02:16:
                    05:68:d1:3f:1b:18:3a:99:c7:91:c4:8b:d1:34:7e:
                    af:a4:9b:27:f6:db:4a:cb:50:91:24:fa:b5:e9:db:
                    22:c3:b3:b3:ca:07:d5:23:d6:1c:0f:83:ce:7b:72:
                    a8:30:67:1f:69:a8:05:67:10:6a:98:13:b9:3b:8d:
                    b8:0e:63:c1:14:2a:9e:71:a9:79:ef:3c:ef:5a:57:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:68:1A:13:65:7B:AC:CF:90:63:01:CF:95:F8:7C:A6:20:3A:35:37
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633033663a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c03f::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:96:67:4d:94:35:bd:4e:fd:0e:30:13:56:49:03:05:10:30:
         d1:04:36:54:c7:0d:53:59:4d:91:26:83:5c:22:ca:98:cc:05:
         ee:3f:19:80:38:08:8b:c9:dd:93:da:87:12:55:ca:b5:00:46:
         00:e0:11:7c:4c:ff:14:6d:54:48:de:ce:e4:b1:49:00:f2:5f:
         ec:7f:40:bf:59:05:ef:a3:f4:fb:55:d1:30:07:b0:1e:80:2f:
         73:ed:bc:97:6c:27:af:de:21:f8:d9:6a:67:7f:87:a0:5a:14:
         cd:d0:e7:62:67:74:66:29:09:ba:6c:c6:49:90:78:de:11:e7:
         88:bf:0b:d6:80:12:2e:65:3a:8f:90:c6:18:a7:e8:07:65:ee:
         44:28:5b:ff:00:f4:fe:71:45:2b:6f:44:a5:4e:d0:9f:3a:50:
         9b:e8:ce:2f:e6:3d:7d:f3:bb:b2:e4:d3:ce:cd:92:16:da:7e:
         b5:19:83:f1:c4:69:7f:8a:38:72:ba:13:9c:dc:57:83:9d:a5:
         24:45:bf:01:e9:03:fd:e6:25:c2:39:a6:07:d2:dd:5f:3e:3e:
         bf:5a:cc:05:a1:69:65:1b:b0:bf:cd:c1:27:6a:70:cb:6f:1e:
         2d:da:cb:26:b5:2c:96:8f:72:04:af:5c:b7:91:f1:48:a7:cc:
         fd:f4:8a:01
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUN9y+rnxC5tfRiMVLts5lnBfZcSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ4MDBaFw0yNDA4MjIxODUzMDBaMDMxMTAvBgNV
BAMTKDZDNjgxQTEzNjU3QkFDQ0Y5MDYzMDFDRjk1Rjg3Q0E2MjAzQTM1MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH0Ka9hsPN+dRynnVCa3NmeNCV
GF1Q4VCwL8pRqBnAn2kvXObgUpxgusK4+ENTbwHKsUcvq5+niodQtk1cC1+kygSM
2WDCFCkm6vOASms/s4fm6+WyOtZfqnaDkcfOQ5bjyC7jM6kln6Tt8+Fx2RuTP2mN
Rwcso3x7VTuzN3UkPUSbHBq0Dze9VjlXwmYgcpCB7F5ucXkbGVRAWBeNI6iEPZU9
jxm7oTgn+ZTLUGizHWMCFgVo0T8bGDqZx5HEi9E0fq+kmyf220rLUJEk+rXp2yLD
s7PKB9Uj1hwPg857cqgwZx9pqAVnEGqYE7k7jbgOY8EUKp5xqXnvPO9aV9KzAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUbGgaE2V7rM+QYwHPlfh8piA6NTcwHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2MzMwMzM2NjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0wD8wDQYJKoZIhvcNAQELBQAD
ggEBAFyWZ02UNb1O/Q4wE1ZJAwUQMNEENlTHDVNZTZEmg1wiypjMBe4/GYA4CIvJ
3ZPahxJVyrUARgDgEXxM/xRtVEjezuSxSQDyX+x/QL9ZBe+j9PtV0TAHsB6AL3Pt
vJdsJ6/eIfjZamd/h6BaFM3Q52JndGYpCbpsxkmQeN4R54i/C9aAEi5lOo+Qxhin
6Adl7kQoW/8A9P5xRStvRKVO0J86UJvozi/mPX3zu7Lk087NkhbafrUZg/HEaX+K
OHK6E5zcV4OdpSRFvwHpA/3mJcI5pgfS3V8+Pr9azAWhaWUbsL/NwSdqcMtvHi3a
yya1LJaPcgSvXLeR8UinzP30igE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:22 2025 by rpki-client