Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/323830343a353936343a3a2f33332d3333203d3e203631363133.roa
File:                     323830343a353936343a3a2f33332d3333203d3e203631363133.roa (raw, json)
Hash identifier:          zA2mUKOrfceZMaquUoMC73LnZW1WNv5/DnOAuQu3K+8=
Subject key identifier:   2F:E7:CD:B1:D8:9B:42:E5:B6:8A:B9:0D:8B:75:2D:EB:05:DA:38:21
Certificate issuer:       /CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
Certificate serial:       27B4330572A3340CB861058A77FAACAB325D3350
Authority key identifier: 98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/323830343a353936343a3a2f33332d3333203d3e203631363133.roa
Signing time:             Fri 05 May 2023 18:40:18 +0000
ROA not before:           Fri 05 May 2023 18:35:18 +0000
ROA not after:            Fri 03 May 2024 18:40:18 +0000
asID:                     61613
IP address blocks:        2804:5964::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b4:33:05:72:a3:34:0c:b8:61:05:8a:77:fa:ac:ab:32:5d:33:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
        Validity
            Not Before: May  5 18:35:18 2023 GMT
            Not After : May  3 18:40:18 2024 GMT
        Subject: CN=2FE7CDB1D89B42E5B68AB90D8B752DEB05DA3821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:44:53:98:8d:12:3f:67:89:ea:03:ab:c7:
                    26:ba:0a:66:e0:47:ca:f6:77:66:8b:0c:6b:75:8d:
                    6a:e8:d5:de:e6:ea:1d:43:53:91:8b:25:26:74:44:
                    e6:11:b5:a7:58:f2:ec:6d:37:a0:e6:8c:98:f5:6b:
                    a1:f3:b5:b0:b3:c7:6f:cf:ac:31:d1:46:60:71:8e:
                    f7:04:a0:01:28:51:8f:9f:19:47:b1:74:97:c1:45:
                    a1:2b:a6:34:b3:70:06:63:a6:19:47:5c:ad:aa:6a:
                    17:cb:6c:96:52:d9:fd:60:d3:8f:4d:3a:6b:27:82:
                    01:fb:54:0d:f7:52:fe:16:29:0f:69:6c:05:76:b3:
                    9a:ff:7f:a8:86:02:52:4c:e0:e8:34:d7:7c:70:f4:
                    f6:b4:a3:f2:9d:a1:d4:d0:32:45:78:5f:9b:80:03:
                    17:f9:64:56:e7:1a:0b:95:98:2d:36:35:cb:b0:a1:
                    32:4a:42:f3:51:ee:55:78:15:39:e2:39:5b:6f:50:
                    9d:e7:36:09:63:63:e4:6b:2c:31:7d:db:0b:17:4a:
                    22:be:40:dc:e8:8a:ed:f2:3a:81:fc:2e:72:15:dc:
                    36:f6:8e:2d:69:14:7a:fc:21:e5:d6:01:cc:25:8b:
                    0e:8d:0d:85:e1:97:05:15:68:70:09:f1:e1:37:1f:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E7:CD:B1:D8:9B:42:E5:B6:8A:B9:0D:8B:75:2D:EB:05:DA:38:21
            X509v3 Authority Key Identifier:
                keyid:98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/323830343a353936343a3a2f33332d3333203d3e203631363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5964::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:96:a3:e0:52:f5:d5:0b:86:71:a4:ed:b1:c6:93:8a:47:52:
         5c:d9:95:e3:2e:48:b4:20:20:1b:10:d0:e5:54:e2:cc:0d:e0:
         79:ac:d5:cc:20:98:40:27:86:46:3f:b1:c1:94:ec:d2:79:bc:
         b0:c1:29:24:28:c2:57:a7:54:74:3c:a9:8a:60:5a:c9:91:9e:
         5c:d0:a8:83:5e:d6:b0:b5:a6:b1:b3:f7:90:02:22:45:1a:96:
         2c:5b:aa:03:26:d5:bb:53:71:7e:24:5f:37:bb:ad:77:fc:da:
         88:c7:5a:22:42:ec:1a:ad:60:b9:5e:43:c8:d5:6d:97:01:c8:
         dd:aa:5e:38:17:8f:29:7f:87:fa:9f:ca:c8:d1:62:25:e2:8d:
         84:d1:c0:36:4c:45:8e:88:72:18:d1:c6:18:e7:b0:c5:fd:4a:
         1b:c5:b9:61:9c:f1:cf:1f:41:3c:a7:dd:4c:92:4b:61:83:c9:
         67:fa:f3:97:22:0d:c1:9d:f0:73:5b:75:df:fe:1e:30:21:ea:
         ed:15:8b:50:58:5c:e9:45:66:78:6f:97:54:96:9e:dc:d1:34:
         ab:de:40:bb:ec:c6:be:3c:1c:25:14:83:71:c4:26:50:25:20:
         7c:d7:63:7a:2c:e4:79:52:4d:8f:63:94:48:f9:f4:0a:a7:62:
         38:e2:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org