Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/323830343a3633633a343030303a3a2f33342d3334203d3e20323632353731.roa
File:                     323830343a3633633a343030303a3a2f33342d3334203d3e20323632353731.roa (raw, json)
Hash identifier:          w8r7WGWXya4lCMGeQcl04L0tb5HwoDHkTH2C/+dkJsA=
Subject key identifier:   BB:40:F6:A7:17:90:6C:B1:45:EB:6E:5C:43:22:42:80:DE:2A:D7:55
Certificate issuer:       /CN=98E22FE46E4D33FDB83BF9CB602D9795BBAB376D
Certificate serial:       21DB6994A6A27354AD177719699B25E20D5C6DD4
Authority key identifier: 98:E2:2F:E4:6E:4D:33:FD:B8:3B:F9:CB:60:2D:97:95:BB:AB:37:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/323830343a3633633a343030303a3a2f33342d3334203d3e20323632353731.roa
Signing time:             Mon 06 Dec 2021 19:10:08 +0000
ROA not before:           Mon 06 Dec 2021 19:05:08 +0000
ROA not after:            Mon 05 Dec 2022 19:10:08 +0000
asID:                     262571
IP address blocks:        2804:63c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:db:69:94:a6:a2:73:54:ad:17:77:19:69:9b:25:e2:0d:5c:6d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E22FE46E4D33FDB83BF9CB602D9795BBAB376D
        Validity
            Not Before: Dec  6 19:05:08 2021 GMT
            Not After : Dec  5 19:10:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:98:31:6c:b5:a9:04:a3:78:af:53:40:b0:
                    73:16:35:14:d6:e5:ed:84:54:5a:3a:4e:fc:cd:8e:
                    e6:17:18:c6:a8:86:e5:90:a9:72:6f:ba:ca:b1:e1:
                    47:99:a0:0a:56:8a:bf:44:ee:21:11:fa:b2:13:6f:
                    4c:72:87:47:32:20:c2:0f:7f:c6:80:47:af:21:e9:
                    e5:75:84:3f:c2:79:d1:15:57:b9:57:be:24:27:79:
                    7f:a1:3e:20:9c:c5:5c:75:e8:85:80:3a:da:6f:77:
                    46:30:20:c3:64:c0:d0:bd:47:45:e5:79:ec:5f:f7:
                    3b:e2:38:f5:c1:75:69:61:cf:dd:f7:4b:df:73:cc:
                    82:91:fb:33:cd:79:9e:b7:a5:5d:fb:c7:a5:42:89:
                    8a:fc:a5:83:21:72:d0:99:ce:c9:a5:a1:f6:32:48:
                    bd:3b:cd:63:93:99:15:c2:84:16:7d:f5:5d:27:38:
                    71:45:ba:7e:54:50:78:54:9d:a4:9c:d8:70:3c:a1:
                    1a:8a:f5:13:6d:98:58:8d:e4:61:f6:df:06:a7:26:
                    cb:2d:d7:04:e6:23:92:84:63:ed:0c:9d:68:58:52:
                    78:88:58:16:73:9b:10:d0:7a:b4:61:a0:66:50:3c:
                    6e:98:ff:17:4a:75:5d:51:b9:6b:b8:16:a7:68:5b:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:40:F6:A7:17:90:6C:B1:45:EB:6E:5C:43:22:42:80:DE:2A:D7:55
            X509v3 Authority Key Identifier:
                keyid:98:E2:2F:E4:6E:4D:33:FD:B8:3B:F9:CB:60:2D:97:95:BB:AB:37:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/323830343a3633633a343030303a3a2f33342d3334203d3e20323632353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1a:31:60:50:76:e4:e2:f3:30:45:cf:67:f6:10:4e:8d:4c:ac:
         56:75:9f:a5:b7:fc:39:9a:a7:85:82:dd:89:5c:07:fc:85:0a:
         d5:7d:ea:e4:64:61:7f:a9:cb:18:e1:7f:07:a2:ec:f6:02:f6:
         89:54:b0:c6:f1:aa:42:b5:18:37:d5:8a:12:c7:c9:a1:e3:53:
         88:0b:d6:c3:0e:8f:ab:7d:3b:74:83:22:3a:d1:15:b9:bf:3f:
         a9:a7:17:44:62:f1:11:73:63:4c:5c:95:d9:94:8c:3a:b0:cd:
         30:f0:83:83:f3:cc:b3:82:d1:f0:da:25:24:d5:84:ad:a3:3a:
         82:d4:09:35:e1:e9:82:25:e5:55:4a:47:07:41:e1:04:54:45:
         4c:60:49:f7:c1:c4:20:28:75:01:0a:88:86:65:d3:7e:4a:4a:
         e5:d8:3a:1c:cd:8c:da:d4:38:ff:2c:93:b5:16:b0:0c:b3:8b:
         9a:2e:ce:58:43:71:71:bd:fd:e4:ae:02:78:90:f8:ee:d9:61:
         a9:92:9d:39:63:77:85:0b:52:3f:bb:e7:68:b0:1b:89:66:d3:
         1a:9d:d1:e2:56:92:29:66:6e:a7:15:1f:da:94:62:a7:e9:55:
         93:f9:ec:5b:8c:c5:1e:03:9f:ce:24:dc:38:74:11:93:ce:3f:
         38:d4:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org