Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/323830343a323931633a3a2f33322d3438203d3e20323633393938.roa
File:                     323830343a323931633a3a2f33322d3438203d3e20323633393938.roa (raw, json)
Hash identifier:          NZuzZiZAwgbD4DKfMZmyIEyFqkt+dmR2hLNPnfMhW4U=
Subject key identifier:   22:B6:65:18:AF:51:14:E3:F9:7C:BF:78:18:18:2A:24:36:45:55:B9
Certificate issuer:       /CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
Certificate serial:       63517BD117E57EEE8E0F6426CD5D17E8FAB2EAC9
Authority key identifier: 98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/323830343a323931633a3a2f33322d3438203d3e20323633393938.roa
Signing time:             Fri 04 Aug 2023 12:48:49 +0000
ROA not before:           Fri 04 Aug 2023 12:43:49 +0000
ROA not after:            Fri 02 Aug 2024 12:48:49 +0000
asID:                     263998
IP address blocks:        2804:291c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:51:7b:d1:17:e5:7e:ee:8e:0f:64:26:cd:5d:17:e8:fa:b2:ea:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
        Validity
            Not Before: Aug  4 12:43:49 2023 GMT
            Not After : Aug  2 12:48:49 2024 GMT
        Subject: CN=22B66518AF5114E3F97CBF7818182A24364555B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:4f:fc:70:91:74:b9:5c:cb:8d:44:d2:92:
                    4d:fe:a5:fc:dd:20:c2:19:58:12:c2:f2:64:ce:3f:
                    8e:4d:ef:3f:b0:34:47:d5:08:21:f5:5f:61:15:56:
                    f2:af:32:29:79:a7:c0:ab:c5:b1:1f:ac:96:19:04:
                    32:52:8e:66:10:b5:34:70:c6:24:ef:5b:f5:35:d1:
                    1c:14:bd:b1:6e:81:1c:46:35:9a:ba:ce:6c:98:f4:
                    7d:ee:37:2f:9e:11:f5:19:7e:e9:51:37:46:33:35:
                    f2:7a:b7:0d:97:17:65:2e:3e:49:e9:a5:98:41:4b:
                    2f:49:6f:ed:5f:b9:c3:ed:1b:76:5f:71:ef:dc:6f:
                    4a:29:06:53:ac:e4:d6:e1:dc:0d:59:2a:3f:c6:61:
                    e8:e8:32:0f:fd:fb:e8:9e:97:ae:38:fc:74:6b:42:
                    af:b6:9b:66:22:6c:c3:13:0d:b1:bc:52:e8:e7:db:
                    ad:98:95:4f:26:d9:8d:d0:79:1a:5d:62:f0:8a:82:
                    07:fb:ae:4e:86:3a:b4:8e:51:f1:c9:9a:fb:64:a8:
                    79:42:5f:be:4e:67:ab:36:ce:02:0c:7b:f2:33:db:
                    2d:cc:fe:b2:35:94:cd:93:f3:0b:c8:67:a8:ba:b5:
                    66:d9:d6:50:a9:ad:0a:37:bb:89:b8:90:33:fe:45:
                    fa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B6:65:18:AF:51:14:E3:F9:7C:BF:78:18:18:2A:24:36:45:55:B9
            X509v3 Authority Key Identifier:
                keyid:98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/323830343a323931633a3a2f33322d3438203d3e20323633393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:291c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:d0:4b:f2:3a:11:63:3f:07:cc:db:bd:19:54:b5:dd:02:
         ad:1a:81:de:db:3f:76:06:a7:95:5e:fd:fb:22:dc:13:5f:e3:
         92:2d:48:3a:3a:e7:cc:87:7c:1b:9b:1c:b0:0f:d7:ee:7b:d7:
         e7:e7:f9:3c:7f:05:a8:aa:6a:e9:40:09:cc:4e:f3:bc:03:d0:
         2d:66:22:d7:0f:9c:51:cf:92:d2:86:95:8a:85:7f:a2:5d:96:
         b3:ec:a3:9f:c0:59:8e:81:f6:ae:e5:f8:a9:46:8e:98:1f:bd:
         ac:0a:73:03:f5:4e:e1:de:65:77:1e:1a:b6:74:1c:59:57:5f:
         5e:da:49:a1:5b:90:60:a4:34:3a:b5:fd:58:01:d2:50:f5:e6:
         1b:1c:d1:f7:55:a1:a4:72:98:7b:0b:9f:4d:c8:f5:c3:38:39:
         c2:68:03:9b:2d:8e:d0:88:e8:60:16:78:37:4b:dc:cf:bf:09:
         40:e3:c1:1a:4b:33:a3:b6:b1:47:c2:30:ee:e3:01:ae:5b:2c:
         26:84:9e:eb:af:37:4d:33:90:56:b5:17:be:5a:c0:ea:d3:9e:
         57:cc:bd:19:cb:f4:a1:fc:e4:57:c3:c6:4c:e1:3c:b2:66:d0:
         c6:1f:67:fc:78:16:27:14:cb:26:e9:f4:68:c6:e7:40:43:99:
         ff:eb:b4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org