Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a383030303a3a2f33332d3333203d3e20323731353434.roa
File:                     323830343a376432633a383030303a3a2f33332d3333203d3e20323731353434.roa (raw, json)
Hash identifier:          rdsAGXUTeOPQtkUlizEdtNSo9mQzWqiyzNO6ve8uatk=
Subject key identifier:   8D:B8:E5:D1:BA:78:A6:59:A6:64:7D:62:DC:22:D6:FE:24:41:52:B0
Certificate issuer:       /CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
Certificate serial:       6AC449F56C8B2EF2F6670895EDB7485D8C01B6A8
Authority key identifier: 98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a383030303a3a2f33332d3333203d3e20323731353434.roa
Signing time:             Sat 27 May 2023 11:34:11 +0000
ROA not before:           Sat 27 May 2023 11:29:11 +0000
ROA not after:            Sat 25 May 2024 11:34:11 +0000
asID:                     271544
IP address blocks:        2804:7d2c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c4:49:f5:6c:8b:2e:f2:f6:67:08:95:ed:b7:48:5d:8c:01:b6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
        Validity
            Not Before: May 27 11:29:11 2023 GMT
            Not After : May 25 11:34:11 2024 GMT
        Subject: CN=8DB8E5D1BA78A659A6647D62DC22D6FE244152B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:48:f5:9e:c1:15:23:da:0e:a3:60:2c:ee:46:
                    37:ef:0f:ff:bd:8d:19:c3:fa:70:b1:68:4e:39:1f:
                    2c:27:ba:61:09:ce:6b:86:04:0f:4c:d8:83:8d:bb:
                    ab:b8:f6:a0:78:97:9b:2f:01:93:5b:61:5b:bf:66:
                    48:12:1a:2a:c3:0f:f1:99:3e:f8:d1:a8:5e:4f:7d:
                    e2:57:02:14:64:7a:86:b9:ae:50:e7:38:ee:22:0e:
                    cb:ab:29:0a:b1:25:b2:16:4a:94:22:62:25:f5:4f:
                    ca:f4:60:47:89:22:cf:d3:b8:1e:6a:41:2c:94:5c:
                    48:8b:01:55:99:85:58:c1:09:b1:a4:ad:b6:2b:2f:
                    99:ee:fd:6c:a4:d5:c0:b2:51:5d:d3:19:9f:c6:d0:
                    e4:49:3b:49:69:dc:51:b7:7e:cc:55:ff:33:07:2f:
                    ce:59:bb:22:fe:98:ac:9d:45:7c:1e:8e:1a:78:9a:
                    a2:27:86:31:f4:1b:30:69:05:f0:21:c9:5b:c4:d7:
                    ed:63:b3:ec:5b:9d:75:f4:32:91:2a:b5:4a:2c:47:
                    00:87:11:8a:c1:c0:63:20:85:86:eb:3f:a8:9a:c8:
                    21:e7:a8:9b:74:77:b1:e6:07:e7:75:3e:ac:46:0b:
                    8f:d8:3c:70:19:22:c3:37:d9:ec:17:05:dc:e3:63:
                    c0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B8:E5:D1:BA:78:A6:59:A6:64:7D:62:DC:22:D6:FE:24:41:52:B0
            X509v3 Authority Key Identifier:
                keyid:98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a383030303a3a2f33332d3333203d3e20323731353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d2c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:7a:17:4b:b0:34:d2:3b:c4:2f:c1:99:d4:ef:b7:8f:a8:a8:
         12:a6:4f:60:99:65:92:e1:c8:c5:dd:5c:7f:df:b0:c1:73:8e:
         60:d4:9d:81:49:e0:43:31:31:18:3a:d0:37:c4:65:ca:05:8b:
         f1:0b:30:07:38:b4:b0:d5:0c:92:b8:2b:2c:87:ba:c6:d3:a6:
         3e:9f:fc:1c:1b:4e:71:f6:2d:c4:02:c4:72:9e:d2:cd:8c:12:
         90:66:fe:5b:17:2f:f8:47:d1:1c:c3:b9:f9:96:67:60:f7:32:
         c7:dd:b0:b2:13:60:6f:41:12:c9:10:aa:1e:57:44:c7:f1:23:
         73:67:ff:ea:70:d2:65:0b:cf:80:33:c9:87:1f:4b:41:31:bb:
         11:4f:ae:6b:bb:69:c4:a9:e5:34:fc:22:d1:09:6a:2a:4d:b9:
         4e:41:05:44:98:dc:9f:2a:6c:04:67:d6:30:98:23:79:80:0b:
         8f:c2:1b:dd:23:32:12:5a:97:aa:e1:41:9d:c4:96:8c:a1:50:
         f4:c7:e6:d8:1e:0d:dd:16:31:65:5e:a7:9d:d6:87:ae:7d:59:
         4f:14:78:40:0e:c6:e6:fe:5a:91:cd:49:30:51:93:df:a5:79:
         12:df:04:0b:6b:15:5d:d3:a5:96:ba:c2:68:0d:c4:48:1a:e2:
         6c:e6:cf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org