Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a3a2f33322d3332203d3e20323731353434.roa
File:                     323830343a376432633a3a2f33322d3332203d3e20323731353434.roa (raw, json)
Hash identifier:          we3D6jkcJE0Zh7ZkVNPNYbuvteLFlns6Uszm5eUMo1c=
Subject key identifier:   28:FE:8E:59:CF:FA:B8:8D:2D:0F:A3:45:17:48:DD:63:AC:F2:6B:B7
Certificate issuer:       /CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
Certificate serial:       221711DF257DDE50C502FE95F20E90698A9DAD49
Authority key identifier: 98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a3a2f33322d3332203d3e20323731353434.roa
Signing time:             Sat 27 May 2023 11:33:57 +0000
ROA not before:           Sat 27 May 2023 11:28:57 +0000
ROA not after:            Sat 25 May 2024 11:33:57 +0000
asID:                     271544
IP address blocks:        2804:7d2c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:17:11:df:25:7d:de:50:c5:02:fe:95:f2:0e:90:69:8a:9d:ad:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
        Validity
            Not Before: May 27 11:28:57 2023 GMT
            Not After : May 25 11:33:57 2024 GMT
        Subject: CN=28FE8E59CFFAB88D2D0FA3451748DD63ACF26BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3e:97:c1:eb:04:91:a7:dd:f4:91:d6:92:9a:
                    c7:6b:53:6a:4c:be:05:f9:fa:b8:6a:62:bd:9d:85:
                    67:f0:63:d8:4b:05:f8:8c:fc:d2:38:d9:1b:d7:d0:
                    4b:66:95:09:7f:63:ad:9a:e0:52:29:87:ab:53:b5:
                    44:51:05:86:2e:b8:28:a7:29:98:1f:52:7f:ee:64:
                    c8:5d:1b:ce:17:ae:9d:4c:aa:a0:1a:b9:12:46:6b:
                    49:60:69:fd:91:ab:64:fb:4a:f6:6c:7e:a7:af:4a:
                    25:d3:c9:80:9d:ca:8a:f5:47:54:49:dd:2f:da:b4:
                    36:2e:31:b8:e5:15:63:df:2e:a4:c0:12:ee:b7:5f:
                    eb:9d:fa:35:db:a8:c3:16:e1:d8:44:e6:62:99:84:
                    c0:78:a4:e3:11:a4:c2:ad:9f:20:94:bb:87:62:96:
                    33:22:c7:9d:e0:d1:ec:89:4f:c4:8d:3b:38:b9:fe:
                    38:6c:19:3f:03:c1:94:77:ee:df:61:c5:07:b4:d8:
                    88:ce:72:53:74:6f:e2:54:91:f8:c3:93:c4:4f:fc:
                    4a:d8:dc:92:78:38:17:87:9f:77:84:6c:ee:59:f7:
                    c4:cb:d1:a4:cd:bd:e9:1c:66:eb:a0:3c:fe:31:0f:
                    ed:d9:0f:d4:fa:c9:6d:12:b0:19:95:2f:8b:1f:e6:
                    b8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FE:8E:59:CF:FA:B8:8D:2D:0F:A3:45:17:48:DD:63:AC:F2:6B:B7
            X509v3 Authority Key Identifier:
                keyid:98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a3a2f33322d3332203d3e20323731353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:0a:1b:d4:64:36:93:07:b5:ed:bc:a4:f5:c1:be:4b:36:85:
         2e:8a:24:d7:39:e1:bc:cd:bc:53:c8:bf:b1:68:5f:e7:9d:e3:
         41:a5:4f:52:e5:92:bf:09:2d:2d:11:03:6b:12:bc:15:7f:cb:
         35:fd:7f:02:96:65:0b:93:cc:83:bd:66:57:f0:ac:23:44:08:
         86:a0:0d:62:0e:85:57:ce:bb:10:fa:d3:b4:1f:45:79:21:92:
         7a:cb:47:25:f5:ac:7c:9c:55:e2:a2:29:76:eb:4c:85:bc:fa:
         70:43:29:a0:d1:a6:e2:94:4b:7d:6b:14:db:5c:ff:29:2d:b1:
         61:c0:50:cc:b4:f7:b9:e5:4e:c0:68:64:ac:a0:9f:ad:f8:fa:
         3b:8b:c1:4e:29:3c:32:a1:d3:5f:57:20:51:7e:43:7f:16:b2:
         b1:c7:6e:79:40:84:fc:a8:36:ff:d3:6f:47:15:22:0a:86:a0:
         a1:62:1b:b4:2c:4c:2b:17:a6:72:c8:88:13:2c:fd:c3:d5:bd:
         10:cd:71:46:df:b5:a7:df:c9:e6:8c:8b:52:8d:b1:37:1c:23:
         d0:39:fd:d3:2f:a5:f9:28:2c:88:c3:88:bf:de:b8:f8:86:f3:
         bf:4d:ac:2c:a8:de:d8:86:d6:75:cf:1e:ea:02:86:88:35:28:
         b1:31:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org