Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/323830343a353936343a383030303a3a2f33342d3334203d3e203631363133.roa
File:                     323830343a353936343a383030303a3a2f33342d3334203d3e203631363133.roa (raw, json)
Hash identifier:          +K7e9hkp+1S78ERItDL0cg6sJdkEfy7eH6eDAlf26mI=
Subject key identifier:   DE:C9:29:B4:07:86:2D:E1:18:9B:8C:13:77:B3:10:7F:DC:2E:77:84
Certificate issuer:       /CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
Certificate serial:       5C4BBBAC3D38DEB796E899FCA6B2AA519E968E50
Authority key identifier: 98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/323830343a353936343a383030303a3a2f33342d3334203d3e203631363133.roa
Signing time:             Fri 05 May 2023 18:40:37 +0000
ROA not before:           Fri 05 May 2023 18:35:37 +0000
ROA not after:            Fri 03 May 2024 18:40:37 +0000
asID:                     61613
IP address blocks:        2804:5964:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4b:bb:ac:3d:38:de:b7:96:e8:99:fc:a6:b2:aa:51:9e:96:8e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
        Validity
            Not Before: May  5 18:35:37 2023 GMT
            Not After : May  3 18:40:37 2024 GMT
        Subject: CN=DEC929B407862DE1189B8C1377B3107FDC2E7784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f8:69:d7:a1:87:8f:22:31:5d:a4:ed:a3:db:
                    2c:d9:48:1f:38:08:72:7e:f0:e8:fe:20:c2:10:d3:
                    58:2d:5d:50:42:4e:b7:38:f3:ba:48:e4:86:f4:8a:
                    57:48:01:2d:33:7f:90:a5:13:72:d3:63:09:aa:e3:
                    6e:ea:0c:24:0a:69:38:03:11:be:0a:8a:cd:bf:1f:
                    4d:bd:be:49:39:b2:c4:10:45:e7:91:66:e0:6c:b5:
                    80:75:a7:5d:3d:ac:b0:0a:56:b1:e1:ec:0e:5d:94:
                    c3:66:25:40:8a:d3:9e:02:f4:18:ee:ff:b9:50:93:
                    e9:95:84:41:3c:ea:c3:85:39:59:4f:33:53:78:05:
                    57:ca:19:3e:83:a0:0a:8d:67:5d:c4:93:cb:7c:be:
                    d5:95:e7:04:6a:20:f7:0a:57:77:91:56:e8:4a:d9:
                    fb:f6:c3:70:fe:83:40:76:94:31:f4:fe:ac:69:4f:
                    99:00:b1:e9:3f:22:25:00:db:5c:7f:32:59:f6:70:
                    dd:54:01:a5:b9:47:be:4f:ea:4d:b9:4a:ca:7d:3e:
                    37:e2:25:ad:55:c2:1c:58:68:c9:99:63:d5:1a:1f:
                    55:be:e0:f1:39:89:d4:47:ca:56:66:5b:09:a5:2b:
                    be:9c:a1:e5:27:b0:bc:dd:fa:5a:95:02:59:3b:78:
                    d7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C9:29:B4:07:86:2D:E1:18:9B:8C:13:77:B3:10:7F:DC:2E:77:84
            X509v3 Authority Key Identifier:
                keyid:98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/323830343a353936343a383030303a3a2f33342d3334203d3e203631363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5964:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6f:0f:0c:2f:55:21:fe:c9:3b:ff:9c:3c:5d:4e:19:57:80:76:
         7d:6a:36:22:41:3b:cc:4d:83:fa:ad:79:63:08:13:88:9a:b2:
         75:66:91:d2:a1:78:df:27:60:9f:58:39:51:69:42:e0:b9:8e:
         52:7e:c3:6d:6c:ae:b3:9c:50:a1:e4:dc:aa:94:6b:84:fb:5b:
         96:3d:ee:fe:10:9c:83:a2:18:61:3c:b8:c7:08:49:fc:87:6d:
         21:9d:f1:46:dd:ef:bf:b9:24:dc:c7:bb:76:d4:11:6b:07:ff:
         65:4c:d6:bb:aa:e8:84:bb:9c:54:95:e5:73:a2:d6:09:c7:f5:
         0a:40:8e:2f:0c:2a:f3:61:b1:a9:35:65:37:8f:7b:e1:0a:82:
         b8:98:cd:bc:84:76:0f:14:bd:42:68:b4:a6:54:4e:6c:03:b2:
         19:87:84:5f:aa:8a:fa:f6:62:fb:62:26:a3:3b:5f:19:96:5f:
         cf:bd:10:f1:a4:c7:92:41:58:e8:04:aa:13:f3:67:50:2a:bc:
         9b:57:21:3b:af:8e:cf:0a:e1:98:c8:50:d9:75:c1:b6:2a:66:
         e5:cc:3f:16:02:a8:93:63:04:af:64:47:e7:2c:c8:d9:1b:00:
         49:7e:d7:f7:ec:b9:a1:77:e0:02:7a:88:89:83:4a:4e:f3:53:
         e1:20:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org