Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa
File:                     323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa (raw, json)
Hash identifier:          Gz8Asedo7N7C9pAaLc4MRVIaVHdkdeLdHf/BN8fW8sU=
Subject key identifier:   16:84:80:9E:83:58:A2:D0:2C:BE:5E:9E:B9:38:E5:49:AC:25:1C:54
Certificate issuer:       /CN=98C8564D2D23C0B3238882D116CD64384F680CDC
Certificate serial:       6191126C52CC696967F23BDA0AD783DBC3377ECE
Authority key identifier: 98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa
Signing time:             Tue 25 Apr 2023 21:32:15 +0000
ROA not before:           Tue 25 Apr 2023 21:27:15 +0000
ROA not after:            Tue 23 Apr 2024 21:32:15 +0000
asID:                     267373
IP address blocks:        2804:4c7c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:91:12:6c:52:cc:69:69:67:f2:3b:da:0a:d7:83:db:c3:37:7e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C8564D2D23C0B3238882D116CD64384F680CDC
        Validity
            Not Before: Apr 25 21:27:15 2023 GMT
            Not After : Apr 23 21:32:15 2024 GMT
        Subject: CN=1684809E8358A2D02CBE5E9EB938E549AC251C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:aa:9d:7b:b5:27:ca:b7:54:bb:d5:71:79:
                    b7:fa:7f:7b:d3:5f:45:80:9f:7a:b2:91:7c:77:d1:
                    a9:e0:6f:77:0f:e0:17:9b:60:09:d5:fa:4f:c3:bf:
                    60:8f:95:da:37:4e:d5:bc:67:6c:aa:bb:5d:2a:ce:
                    47:d3:99:e9:b3:f0:78:03:85:a5:b2:d9:6c:1c:eb:
                    88:f5:e3:5d:e3:1a:65:67:76:b4:76:8c:69:14:9a:
                    96:c8:a8:4f:8d:1d:f8:64:4e:50:f2:4a:4d:16:69:
                    f1:fe:23:33:9a:4d:99:49:5a:ff:9b:6a:88:cc:91:
                    81:c9:13:5d:a9:fe:95:da:92:c3:03:e7:d3:89:08:
                    ac:4f:90:16:17:1c:21:07:71:f1:f7:06:02:1e:16:
                    a2:ed:46:f0:24:b5:87:07:9b:31:bd:ab:cc:d5:07:
                    de:cc:fd:65:c7:11:4e:c1:2d:f6:ec:ea:49:49:86:
                    a2:aa:b1:9c:8d:26:96:2f:05:2c:1b:e9:96:98:88:
                    07:08:a2:7a:d1:87:ef:24:ea:e1:b3:51:2a:6d:ba:
                    ad:fb:78:a9:d2:4f:45:21:5b:8d:47:be:da:2a:a7:
                    9b:d8:39:b4:0a:85:78:d3:b3:99:b4:12:c1:28:ef:
                    e0:24:b5:f4:a8:15:a6:75:77:f5:a2:c7:79:db:a3:
                    10:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:84:80:9E:83:58:A2:D0:2C:BE:5E:9E:B9:38:E5:49:AC:25:1C:54
            X509v3 Authority Key Identifier:
                keyid:98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/98C8564D2D23C0B3238882D116CD64384F680CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c7c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         11:9d:17:bb:c9:5a:51:8c:59:89:25:b0:3b:32:fd:ee:7e:13:
         f5:f3:86:46:9d:bf:5f:50:e3:ba:fd:ca:c5:f2:f7:4d:8a:02:
         11:13:a0:f9:b1:76:aa:80:d0:7b:35:d9:fe:49:d0:0a:4a:67:
         bc:eb:be:45:ff:c5:4e:9a:53:18:c6:b2:4f:4b:29:08:79:e4:
         0f:73:c6:64:f3:26:59:a0:8e:76:55:98:03:b4:9d:ed:ef:25:
         98:89:e8:50:da:bb:72:bb:0d:03:85:cc:27:a9:bc:c7:6c:3d:
         67:a6:e5:57:ac:98:b5:4d:4e:d6:5a:42:89:5a:a5:83:12:83:
         e7:5b:ab:46:9d:b6:76:4d:9c:2a:7c:05:98:61:a8:c4:f2:7d:
         9a:82:2e:f2:5c:0e:d0:a9:ec:9b:72:bf:eb:14:25:c0:45:6c:
         b6:40:b8:6d:4e:7a:4d:4f:8a:94:24:18:9b:32:46:a1:8e:8c:
         20:77:c8:80:24:a6:5d:02:75:f6:49:16:01:5c:53:70:dd:70:
         3c:88:1b:cf:4b:f6:31:9f:5c:41:07:6e:9a:6b:37:34:b7:3b:
         40:36:ad:dd:0a:91:2d:5e:eb:46:f6:20:99:25:61:0a:18:b0:
         f2:59:64:27:fb:70:ac:c4:71:c1:cb:66:3c:af:a6:94:3d:2d:
         c0:15:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:47 2025 by rpki-client