Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a383030303a3a2f33342d3334203d3e20323637333733.roa
File:                     323830343a346337633a383030303a3a2f33342d3334203d3e20323637333733.roa (raw, json)
Hash identifier:          57KQyMmQQBJ9utjWkm/YQOrOktUQ6Xodd5QO6vPX++0=
Subject key identifier:   B0:37:5A:9F:01:8F:13:22:19:C1:31:EA:1C:7D:81:DF:8C:D4:1E:71
Certificate issuer:       /CN=98C8564D2D23C0B3238882D116CD64384F680CDC
Certificate serial:       50FB9EE69E3079C14DBCB3534DAF87946D8F0A89
Authority key identifier: 98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a383030303a3a2f33342d3334203d3e20323637333733.roa
Signing time:             Tue 25 Apr 2023 21:32:19 +0000
ROA not before:           Tue 25 Apr 2023 21:27:19 +0000
ROA not after:            Tue 23 Apr 2024 21:32:19 +0000
asID:                     267373
IP address blocks:        2804:4c7c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fb:9e:e6:9e:30:79:c1:4d:bc:b3:53:4d:af:87:94:6d:8f:0a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C8564D2D23C0B3238882D116CD64384F680CDC
        Validity
            Not Before: Apr 25 21:27:19 2023 GMT
            Not After : Apr 23 21:32:19 2024 GMT
        Subject: CN=B0375A9F018F132219C131EA1C7D81DF8CD41E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:4b:f4:1c:67:b6:04:47:81:e6:14:87:a9:
                    9a:62:9a:60:93:60:c0:39:e1:ab:6c:71:6a:83:fe:
                    5e:45:bf:4a:26:5c:b1:22:96:3b:34:23:1e:dc:70:
                    f0:1c:07:6f:8d:cb:51:7d:d1:73:1d:dd:9e:54:20:
                    c0:3d:80:28:ff:b1:c0:a0:87:1b:0a:de:29:b3:00:
                    02:01:75:1c:ee:7a:41:18:dd:f6:75:ee:d0:41:7c:
                    97:42:6f:c3:61:d9:98:a7:89:8b:b3:80:62:05:6f:
                    b4:bd:92:6d:59:ad:67:ee:66:7e:7f:57:4f:d9:ff:
                    ec:37:55:0f:c5:46:e0:0a:55:02:12:2f:c5:d0:48:
                    42:d0:b2:72:f6:14:00:4b:b6:fb:a1:ea:04:57:28:
                    b3:50:f2:18:3b:9b:22:18:b3:9e:b5:df:4b:89:54:
                    72:77:9a:9b:91:d4:9e:ae:a0:77:82:53:b8:97:91:
                    55:8e:36:15:1d:43:7e:fb:25:e8:27:72:99:bd:16:
                    a7:ba:98:82:1c:56:ee:7b:a5:39:43:fc:5d:3b:bf:
                    cf:73:98:4d:bd:79:c7:5a:6e:f3:e5:af:01:7d:8b:
                    18:2a:bc:f1:ef:70:1b:ed:a1:fe:7f:6c:a7:b3:51:
                    2d:41:cd:21:60:d1:15:24:c5:a9:ac:94:7a:81:27:
                    eb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:37:5A:9F:01:8F:13:22:19:C1:31:EA:1C:7D:81:DF:8C:D4:1E:71
            X509v3 Authority Key Identifier:
                keyid:98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/98C8564D2D23C0B3238882D116CD64384F680CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a383030303a3a2f33342d3334203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c7c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         91:b7:f9:c5:98:d8:0c:bf:a7:ae:19:c3:93:df:99:5a:ab:4c:
         f1:9b:b4:51:b3:b3:cf:d9:a6:1f:fd:e4:0f:1c:cf:4a:d4:51:
         83:15:07:fb:03:05:32:5f:06:86:bb:ab:f5:ff:29:36:16:da:
         b4:d2:0e:65:27:05:88:36:c9:df:03:14:bc:02:e8:39:4f:3a:
         81:8a:bf:62:58:2b:3d:58:64:b1:21:03:d4:84:45:2d:2f:6f:
         ec:27:38:83:dd:56:f3:c4:01:bf:6b:cb:03:49:ba:3e:df:99:
         1b:14:09:2e:6c:91:30:7d:39:0f:6a:29:d2:61:9b:6f:fd:b2:
         66:0a:aa:a4:4b:d7:94:58:ae:89:8f:cd:e5:9d:4a:87:1a:74:
         3c:b4:65:c3:9b:da:5c:54:b7:27:fa:ab:2b:25:b0:68:ef:ba:
         3f:87:d4:b0:c9:3f:76:26:6c:5a:04:df:9c:3a:ef:9b:03:35:
         69:3a:22:03:8d:c9:8c:01:02:b4:49:97:b7:04:40:79:d2:f1:
         03:8a:78:9e:a6:b6:a8:ca:c6:2f:d0:18:2d:70:8b:a1:6c:28:
         da:0d:c6:f5:63:f4:2b:21:14:81:fc:70:8b:c0:83:90:9a:3b:
         17:b5:c3:67:63:c9:d5:21:1c:16:bb:6b:14:00:58:13:c7:cc:
         5b:b6:04:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org