Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/323830343a326462343a633030303a3a2f33342d3334203d3e20323635323938.roa
File:                     323830343a326462343a633030303a3a2f33342d3334203d3e20323635323938.roa (raw, json)
Hash identifier:          D0QgxqLeYwQPPhCQ+h2Go+zIwlYp8kzPXrJtRRygtM4=
Subject key identifier:   99:A7:41:8B:14:C8:11:EC:1B:A7:0F:2E:37:C3:9B:AB:98:52:D1:9D
Certificate issuer:       /CN=C89FB798B987A5F0993D2D3DA37341AC88185E4E
Certificate serial:       6FA50E6F358C5768B469FCB6D37998C130D3149C
Authority key identifier: C8:9F:B7:98:B9:87:A5:F0:99:3D:2D:3D:A3:73:41:AC:88:18:5E:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89FB798B987A5F0993D2D3DA37341AC88185E4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/323830343a326462343a633030303a3a2f33342d3334203d3e20323635323938.roa
Signing time:             Fri 22 Apr 2022 12:22:21 +0000
ROA not before:           Fri 22 Apr 2022 12:17:21 +0000
ROA not after:            Fri 21 Apr 2023 12:22:21 +0000
asID:                     265298
IP address blocks:        2804:2db4:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a5:0e:6f:35:8c:57:68:b4:69:fc:b6:d3:79:98:c1:30:d3:14:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89FB798B987A5F0993D2D3DA37341AC88185E4E
        Validity
            Not Before: Apr 22 12:17:21 2022 GMT
            Not After : Apr 21 12:22:21 2023 GMT
        Subject: CN=99A7418B14C811EC1BA70F2E37C39BAB9852D19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:7e:e8:78:b1:a3:41:96:11:32:54:0a:cb:
                    ea:28:79:f6:60:5a:31:4e:c8:fc:eb:ae:aa:92:84:
                    53:86:af:9e:89:76:b0:25:c1:5a:97:c8:d8:d4:35:
                    33:7a:03:e1:45:fe:9a:a2:19:de:d2:d0:5f:c9:dc:
                    35:9b:8e:4a:c5:1c:57:50:65:41:1a:b8:66:ed:0c:
                    49:4b:1a:14:86:e1:2a:03:1a:8f:3d:75:3c:f1:6e:
                    0d:89:97:53:28:d2:37:99:09:31:78:cd:e2:fd:bc:
                    a2:31:f0:5d:f3:dd:1f:65:15:d8:64:1d:d4:1a:8d:
                    df:7e:e8:eb:32:4a:f1:89:aa:db:e3:30:ae:9d:bb:
                    cf:c5:55:72:ec:7b:03:86:b6:57:91:f5:4a:ee:73:
                    e4:80:84:64:dc:4d:a7:f6:93:2b:03:29:59:75:ce:
                    bf:44:49:de:d0:ea:4b:88:c6:bb:b1:18:7b:5e:dc:
                    33:18:95:83:d5:8c:67:14:59:35:70:3d:02:56:3d:
                    e5:86:c9:f5:d3:cf:0f:64:9d:ff:ef:d7:f9:0d:58:
                    32:a1:16:b9:a7:7d:d0:0b:f3:f3:ac:75:88:c0:f1:
                    99:f7:a8:f4:f5:68:63:57:b6:b1:6e:d7:fb:35:f7:
                    d5:e9:be:31:82:63:8f:fc:ea:7b:21:c7:4b:75:dc:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A7:41:8B:14:C8:11:EC:1B:A7:0F:2E:37:C3:9B:AB:98:52:D1:9D
            X509v3 Authority Key Identifier:
                keyid:C8:9F:B7:98:B9:87:A5:F0:99:3D:2D:3D:A3:73:41:AC:88:18:5E:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/C89FB798B987A5F0993D2D3DA37341AC88185E4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89FB798B987A5F0993D2D3DA37341AC88185E4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/323830343a326462343a633030303a3a2f33342d3334203d3e20323635323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2db4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:49:67:2d:19:0f:00:63:be:6b:ca:12:7c:c6:79:e0:d0:7f:
         ed:2e:9c:f4:76:30:bd:1d:b5:6a:7f:2a:6e:2f:eb:dc:e3:1c:
         fa:ca:c9:8b:89:2f:ee:bc:04:02:b1:fd:7a:0b:ee:38:2c:85:
         62:57:22:c5:9a:05:89:79:78:ff:ac:0e:86:c8:17:c9:5e:39:
         5a:56:e2:e6:8c:46:cb:cf:35:01:99:04:67:d2:9d:74:33:27:
         dd:bd:c0:6c:bf:54:50:54:f8:01:2a:ec:a2:9f:86:5b:88:f5:
         a3:07:8c:19:81:b8:c8:e5:f9:93:57:dc:18:00:46:be:15:a6:
         52:7e:3a:5e:af:35:e0:98:37:5d:d0:79:1d:90:49:3c:12:fc:
         f2:ce:ba:ec:d8:90:c9:a6:60:43:fd:b4:fb:f6:0f:9a:43:44:
         c6:46:f2:99:73:05:77:f5:58:8d:1b:fc:0a:86:2e:9e:7e:7e:
         7e:df:4a:4c:68:02:9b:e3:10:4a:ed:b0:20:09:07:53:cc:72:
         aa:60:98:96:b6:4e:e0:9d:b9:47:7b:f6:2a:dd:3c:b9:92:cd:
         eb:36:df:96:1f:95:31:96:17:1b:11:b6:5b:c6:da:22:8d:b9:
         4d:36:7d:bb:c9:0e:5b:69:ec:f6:5f:5f:b5:99:01:aa:fe:50:
         70:a1:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org