Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a3a2f33332d3333203d3e20323731353434.roa
File:                     323830343a376432633a3a2f33332d3333203d3e20323731353434.roa (raw, json)
Hash identifier:          c4tqk2fhMGsS1V/JJ4qbsANcZrisr+ZXarC5DY9/enc=
Subject key identifier:   2E:3F:AC:8E:82:C7:FF:12:4C:4C:A0:F1:25:00:48:55:66:F1:DA:0C
Certificate issuer:       /CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
Certificate serial:       705E6AE0DC16DAFBC99692BAB5333809D3A7A0BD
Authority key identifier: 98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a3a2f33332d3333203d3e20323731353434.roa
Signing time:             Sat 27 May 2023 11:34:05 +0000
ROA not before:           Sat 27 May 2023 11:29:05 +0000
ROA not after:            Sat 25 May 2024 11:34:05 +0000
asID:                     271544
IP address blocks:        2804:7d2c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5e:6a:e0:dc:16:da:fb:c9:96:92:ba:b5:33:38:09:d3:a7:a0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
        Validity
            Not Before: May 27 11:29:05 2023 GMT
            Not After : May 25 11:34:05 2024 GMT
        Subject: CN=2E3FAC8E82C7FF124C4CA0F12500485566F1DA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:3b:c2:16:91:fb:e4:94:90:dc:52:91:5a:
                    0c:52:43:83:4e:c3:78:58:09:f8:69:d5:47:4d:c5:
                    f8:97:8f:00:e9:4c:0c:20:03:1f:bc:5d:c3:6d:22:
                    cd:84:7a:bd:cb:c9:aa:05:55:1b:28:a1:a8:34:1c:
                    8e:0c:55:8a:95:d7:dd:0e:c6:5e:ad:b2:8b:91:d9:
                    32:c0:de:05:92:36:5c:4e:f0:c4:29:41:92:aa:0f:
                    74:0d:6b:87:ff:92:97:34:d5:5f:36:29:57:78:74:
                    c8:4f:9b:06:62:3f:89:b0:1e:ce:75:6e:48:0a:3e:
                    47:62:6f:7a:1f:e7:98:4c:43:41:d3:e9:66:c7:79:
                    1f:91:55:c7:9d:b2:52:69:e8:df:0a:3f:7f:c1:df:
                    dd:86:9c:16:07:d5:99:d7:96:ee:db:44:52:96:82:
                    29:59:aa:ae:41:3b:14:f0:f6:82:fd:40:3b:08:95:
                    67:47:7d:ff:72:d5:ec:68:20:2d:1e:b8:65:ce:3b:
                    45:c5:dd:0c:fe:d8:bc:ce:f0:c5:1f:fe:e1:50:08:
                    3e:95:3a:b9:3a:1f:7d:ab:18:a1:2c:6c:bb:09:5e:
                    69:a1:ff:ed:7c:59:0f:02:ad:ac:c8:94:c8:52:20:
                    8a:31:ff:a9:99:53:07:b1:07:13:f8:d6:29:e0:c3:
                    19:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3F:AC:8E:82:C7:FF:12:4C:4C:A0:F1:25:00:48:55:66:F1:DA:0C
            X509v3 Authority Key Identifier:
                keyid:98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a3a2f33332d3333203d3e20323731353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d2c::/33

    Signature Algorithm: sha256WithRSAEncryption
         05:d4:99:26:ab:94:eb:73:95:50:98:c7:f9:9b:43:53:f4:1c:
         f7:af:67:66:b4:10:02:d9:c4:38:c4:ce:16:ec:b1:d1:22:4c:
         b4:84:81:e7:38:ad:fe:ac:3a:61:a2:18:dc:06:47:ec:a5:81:
         71:32:80:f3:24:bf:ed:4e:e9:78:7d:17:10:5f:04:90:62:fe:
         22:91:80:3b:5e:54:8e:fd:6e:eb:3e:8b:33:75:76:26:6d:f3:
         b7:3f:ae:2f:9e:be:12:97:98:9b:bd:a7:45:fd:90:4d:69:9f:
         2f:ee:6d:3b:40:9f:43:22:41:04:98:0c:4d:78:49:c2:aa:87:
         81:db:18:5c:48:4f:86:57:d3:61:93:f4:fb:23:90:a8:0b:3b:
         29:2a:7d:fa:03:d4:c6:12:ab:d5:61:29:f5:38:fb:be:e0:52:
         2d:dd:40:b5:a4:55:b8:ed:14:79:6e:63:a3:94:80:f6:78:60:
         32:40:83:8f:2b:a7:1b:cb:66:a6:9d:05:2f:0a:6d:a8:6c:d3:
         fc:5e:89:94:3f:e8:81:6b:dc:81:5b:51:41:d0:71:9d:7d:47:
         89:ec:ec:0b:61:ec:6f:42:e6:83:2a:6e:75:e6:25:34:29:07:
         b0:d8:aa:17:15:aa:75:0b:95:0e:f8:e6:4c:61:06:9a:0d:37:
         c0:5b:3b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org