Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a643030303a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a643030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          XHNoR+ydVDN9K1eZnVkJ5w/kUjoK9/0VTnhAU/wkz3k=
Subject key identifier:   3E:AF:F9:29:10:38:21:04:BD:A3:D5:C9:C3:B0:23:DA:CA:64:1F:EB
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       1618B1A0762C6987D88877BC5EE45C1FA064A58E
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a643030303a3a2f33362d3336203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:53:01 +0000
ROA not before:           Thu 24 Aug 2023 18:48:01 +0000
ROA not after:            Thu 22 Aug 2024 18:53:01 +0000
asID:                     61592
IP address blocks:        2804:4c34:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:18:b1:a0:76:2c:69:87:d8:88:77:bc:5e:e4:5c:1f:a0:64:a5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:48:01 2023 GMT
            Not After : Aug 22 18:53:01 2024 GMT
        Subject: CN=3EAFF92910382104BDA3D5C9C3B023DACA641FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:01:35:be:81:4c:7d:b4:52:96:13:92:e9:cf:
                    26:0e:0d:15:08:25:2c:99:19:83:08:eb:11:73:2c:
                    42:26:bc:78:44:10:1a:05:22:5d:5b:20:b1:4e:c2:
                    17:fb:cf:3d:f7:e5:0d:03:9c:17:68:b0:84:ba:74:
                    0d:ac:d4:6b:e1:09:5c:69:ea:c7:7d:01:05:ae:15:
                    98:91:4c:f7:6e:fa:65:5e:4a:b0:52:7c:56:fe:d1:
                    1e:69:bb:0f:72:4e:d7:ca:a5:4d:e3:cc:c5:ac:df:
                    56:e9:76:7f:17:dd:d8:3e:57:bd:1a:34:ad:3f:a0:
                    7a:69:a4:82:af:ae:cd:93:75:34:ef:29:bf:04:92:
                    4e:18:3d:c2:a7:32:45:4b:20:74:33:df:1b:f8:3d:
                    3f:0c:2a:77:39:4d:5f:8c:28:c8:ed:97:6c:ba:03:
                    06:ee:17:6e:ac:ad:b9:a5:a9:0d:6f:25:4b:7d:62:
                    67:03:e2:8c:92:72:e2:4f:4a:24:31:ce:d8:29:21:
                    52:d9:de:6c:c0:3f:55:44:7a:3b:28:4b:8d:08:7e:
                    fd:a7:f7:92:e4:ce:e3:d2:b9:c4:ab:56:96:66:54:
                    ed:84:2f:b0:2e:7c:a7:64:8d:aa:a9:85:b5:9e:8b:
                    f3:04:10:fc:ba:58:79:80:a3:c3:c6:3b:a1:69:29:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AF:F9:29:10:38:21:04:BD:A3:D5:C9:C3:B0:23:DA:CA:64:1F:EB
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a643030303a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         77:20:e9:bd:e4:7a:cd:52:02:e4:a5:bc:13:42:e9:94:3f:3e:
         24:ec:f1:16:76:9b:f1:18:4e:6f:d2:fd:61:98:cd:8a:55:2b:
         c4:7d:3c:cc:98:9f:3f:44:04:82:9b:a4:49:ed:2b:68:ea:dd:
         3a:7c:e0:02:7d:1a:a2:01:da:d3:47:b0:ab:b3:d2:52:8e:87:
         73:85:c6:85:10:79:39:75:d8:9d:68:fd:9f:e5:ba:4f:fa:3d:
         d1:9f:4a:d0:5e:98:9f:eb:8a:2c:b5:ee:26:8b:b9:1f:be:f3:
         75:16:3e:d8:88:ca:a0:62:33:d0:80:77:aa:81:ba:5b:c7:11:
         c2:0d:c0:58:0f:4c:de:73:0f:8e:6c:d7:32:5b:8a:51:a0:a1:
         a5:3f:a6:2f:a5:ce:a8:2a:f7:d0:63:27:16:6b:cc:22:6b:70:
         50:26:0b:28:d6:bc:47:bd:07:f8:c6:5d:4b:ad:34:e9:ed:dc:
         c9:78:8f:24:6f:1c:c3:94:58:18:65:dc:f3:ca:f0:56:a6:30:
         25:a7:d6:19:8e:35:74:a2:a4:e4:f2:d1:ba:45:ba:30:79:ba:
         c7:c4:57:3c:8b:b2:f2:d8:63:ae:82:a3:fd:1b:03:9e:00:88:
         3b:b3:f2:7a:e6:44:f5:ad:f5:32:72:8d:8e:e7:7f:1b:61:72:
         07:59:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org