Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a3a2f33332d3333203d3e20323637333733.roa
File:                     323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (raw, json)
Hash identifier:          QVAvlKMLsF52XOTrpF6wKKMjdwr9oVaN2NAlYRvBUWE=
Subject key identifier:   E0:21:22:AC:AF:A6:37:F0:B0:1F:3E:81:85:DB:9E:0B:37:BA:8B:7E
Certificate issuer:       /CN=98C8564D2D23C0B3238882D116CD64384F680CDC
Certificate serial:       6A8ECAB3A90EAA3AA6517314149F9D4C1BA98262
Authority key identifier: 98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a3a2f33332d3333203d3e20323637333733.roa
Signing time:             Tue 25 Apr 2023 21:32:20 +0000
ROA not before:           Tue 25 Apr 2023 21:27:20 +0000
ROA not after:            Tue 23 Apr 2024 21:32:20 +0000
asID:                     267373
IP address blocks:        2804:4c7c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8e:ca:b3:a9:0e:aa:3a:a6:51:73:14:14:9f:9d:4c:1b:a9:82:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C8564D2D23C0B3238882D116CD64384F680CDC
        Validity
            Not Before: Apr 25 21:27:20 2023 GMT
            Not After : Apr 23 21:32:20 2024 GMT
        Subject: CN=E02122ACAFA637F0B01F3E8185DB9E0B37BA8B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:86:14:e1:ff:d3:39:49:4c:92:6c:07:0b:
                    a4:de:ef:4a:bc:34:d3:14:80:dd:36:f6:86:c7:db:
                    08:97:da:b8:f0:eb:bf:14:4b:a2:6b:a3:7b:2d:7d:
                    ef:85:0c:81:d1:f2:01:b7:df:36:dc:dc:bd:5e:81:
                    d1:fe:3f:17:37:ab:b6:0b:ef:ca:90:ca:f8:17:3e:
                    f1:32:8c:7c:4c:a5:6b:b2:af:4d:c0:58:44:12:47:
                    2e:bc:87:50:7a:cc:48:fe:4a:00:46:3f:ab:b3:81:
                    12:4b:a2:ac:0f:18:19:70:e6:7e:80:33:63:2c:d7:
                    55:b3:8a:2a:4e:47:31:b4:24:59:09:8d:04:da:4f:
                    c4:5c:af:fc:9c:c4:83:7b:1f:02:ec:fd:10:f0:15:
                    33:1b:7c:40:01:9d:9e:7b:71:60:fa:a2:31:3b:a9:
                    ea:ea:88:46:1f:08:aa:02:10:4e:4f:d6:d3:ed:8b:
                    34:e7:79:05:a2:2d:12:4f:7c:a3:a1:60:a5:31:ec:
                    4d:7f:f4:e9:62:c4:f7:68:17:2f:2d:90:26:02:e4:
                    b7:ef:23:89:c9:de:b9:14:31:16:6a:df:3e:2b:74:
                    3d:5f:54:b9:80:c7:26:87:f6:32:79:8d:70:be:d6:
                    9d:c2:b3:d0:bc:86:0d:eb:64:15:30:90:28:15:66:
                    42:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:21:22:AC:AF:A6:37:F0:B0:1F:3E:81:85:DB:9E:0B:37:BA:8B:7E
            X509v3 Authority Key Identifier:
                keyid:98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/98C8564D2D23C0B3238882D116CD64384F680CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a3a2f33332d3333203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c7c::/33

    Signature Algorithm: sha256WithRSAEncryption
         85:8d:47:d3:c8:7e:e2:6e:f0:82:b5:71:27:65:74:0f:92:03:
         93:a3:de:ce:68:ff:33:ec:a7:de:2f:c4:b5:14:90:eb:1b:8d:
         21:04:2e:11:32:f7:45:3e:96:2d:15:92:a7:73:7d:16:1c:c2:
         3f:19:81:cf:5d:4e:ff:5b:a1:3e:b5:97:97:6f:95:41:e8:2a:
         22:9d:1f:4f:a3:4c:d4:db:45:2a:b8:84:e3:30:2f:88:6e:ab:
         fd:b4:14:7e:98:2a:9b:20:a9:ff:2b:23:83:69:17:79:30:8f:
         92:d5:93:3b:d8:e5:8a:8e:0c:94:cd:cb:47:31:e6:52:84:93:
         31:00:2e:13:cf:cf:b6:23:cb:32:01:a5:a9:dc:31:7b:cd:79:
         14:1d:68:e0:62:be:76:c8:68:34:cc:18:b7:85:3d:df:f2:8a:
         a0:1e:9a:cd:28:d0:ee:d5:b9:81:e0:92:ba:ec:62:cb:f1:30:
         fd:78:08:06:75:46:c6:a3:12:07:51:75:78:ac:0c:1e:0c:6a:
         e0:69:13:b6:66:11:c8:d3:aa:39:e2:cf:e1:3e:4c:0e:4a:6e:
         c2:2a:76:e8:36:a6:67:1b:33:5b:7e:2b:c9:80:98:46:05:eb:
         f9:37:35:37:9c:87:dd:ea:13:b9:29:55:09:a4:67:7d:5c:14:
         d3:d2:f4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org