Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a633030303a3a2f33342d3334203d3e20323731353434.roa
File:                     323830343a376432633a633030303a3a2f33342d3334203d3e20323731353434.roa (raw, json)
Hash identifier:          qwR284+udSGgNsJjpaaL7bK1OUhcXt09Y4Io09cx6rU=
Subject key identifier:   94:B5:17:B0:6A:B1:6D:E3:80:EA:48:47:CB:14:0A:2F:E2:A1:21:4F
Certificate issuer:       /CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
Certificate serial:       75296214939D7228B8294EACA3686FAB01077FB4
Authority key identifier: 98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a633030303a3a2f33342d3334203d3e20323731353434.roa
Signing time:             Sat 27 May 2023 11:34:16 +0000
ROA not before:           Sat 27 May 2023 11:29:16 +0000
ROA not after:            Sat 25 May 2024 11:34:16 +0000
asID:                     271544
IP address blocks:        2804:7d2c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:29:62:14:93:9d:72:28:b8:29:4e:ac:a3:68:6f:ab:01:07:7f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
        Validity
            Not Before: May 27 11:29:16 2023 GMT
            Not After : May 25 11:34:16 2024 GMT
        Subject: CN=94B517B06AB16DE380EA4847CB140A2FE2A1214F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:fd:cb:5e:96:54:52:17:31:e6:38:64:6d:
                    89:04:c3:f1:7e:27:fd:6a:d6:a1:2a:44:14:08:69:
                    0c:5c:2b:23:31:a9:37:4e:9d:5c:3d:e5:6e:b7:b0:
                    94:bd:d3:12:9e:54:55:ff:f5:6a:1e:d2:9e:f0:88:
                    11:ae:30:ae:1b:4e:a3:96:09:0a:e9:8f:90:2b:b3:
                    b2:33:2f:d0:ba:5d:3f:75:49:68:2b:92:74:4b:8f:
                    e0:d2:c8:53:2f:54:b5:c8:39:7d:b2:0c:f7:5c:23:
                    60:0a:5d:86:9a:d0:e7:64:bb:3a:48:d8:21:68:e1:
                    f8:8b:cd:48:35:44:35:08:1f:01:14:7f:9b:65:12:
                    10:23:be:78:e3:f4:0d:bd:2b:ca:00:f9:0a:61:4f:
                    08:3b:b2:98:f0:60:9c:90:cd:44:11:23:71:31:e1:
                    34:54:24:ab:a0:61:f2:34:51:fd:9e:c1:39:8d:a8:
                    d8:0e:24:f5:c0:2a:5e:ba:ec:ad:50:71:51:2b:89:
                    c4:f5:80:e9:67:89:39:1d:a2:b8:0b:2d:0b:7e:89:
                    01:f8:1e:12:0f:eb:d0:65:14:3c:f4:49:b0:34:85:
                    7d:ef:c4:2d:eb:f1:65:22:c3:5e:be:a8:a9:32:3e:
                    89:8c:a5:49:7b:be:5b:74:66:7c:06:86:f2:04:5d:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B5:17:B0:6A:B1:6D:E3:80:EA:48:47:CB:14:0A:2F:E2:A1:21:4F
            X509v3 Authority Key Identifier:
                keyid:98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/323830343a376432633a633030303a3a2f33342d3334203d3e20323731353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d2c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ac:8d:d2:c6:45:66:d1:83:be:61:86:35:df:ba:00:a3:6f:e9:
         be:ec:21:5c:ad:2c:3e:22:81:88:cb:94:6d:7f:d5:7b:8d:b5:
         da:28:28:f7:d3:70:70:76:f1:1e:ef:1e:e6:fc:1b:3f:0f:58:
         ff:77:b7:86:44:3e:90:12:85:ef:7a:8c:75:f5:81:58:fa:f2:
         27:ac:99:4a:e8:a6:15:e0:da:ff:e5:f1:2c:50:18:5a:cf:c9:
         a2:f9:4d:1e:91:41:1d:50:de:69:8f:97:82:f3:a8:ea:f8:18:
         f6:6c:cf:b4:f6:5f:a7:2c:11:94:b7:5c:d1:85:9f:23:29:aa:
         c5:c2:ea:e3:3b:17:e4:6c:81:74:b7:7f:53:36:da:20:cf:45:
         6c:06:fc:0d:1d:11:16:3f:cb:6e:ee:b7:54:a3:98:eb:06:de:
         08:b7:1e:aa:65:5e:cf:1a:55:53:00:18:c5:8e:a9:55:cf:d8:
         90:44:54:f0:42:95:b9:be:b4:f5:96:61:ed:e9:fc:54:2b:96:
         77:7a:02:c2:6a:4f:05:12:f6:34:c9:13:cf:93:11:32:5e:af:
         a1:ff:53:f0:21:5f:d0:80:4c:bb:2c:09:a4:72:1e:13:4b:91:
         5b:c0:9e:4f:e8:03:c0:8f:a7:54:4b:89:e2:7b:4c:c4:c3:3f:
         65:6f:59:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org