Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/323830343a3633633a3a2f33322d3332203d3e20323632353731.roa
File:                     323830343a3633633a3a2f33322d3332203d3e20323632353731.roa (raw, json)
Hash identifier:          jzQoKHC10pFYksWyTE0ycpBq0MX57++cwXefy1Uawo0=
Subject key identifier:   B2:90:04:5A:72:29:5F:52:A9:0E:60:06:81:CD:43:7A:51:65:20:94
Certificate issuer:       /CN=98E22FE46E4D33FDB83BF9CB602D9795BBAB376D
Certificate serial:       7FE0AE533CD7D79DC18610CB1F06C577BCA28BE8
Authority key identifier: 98:E2:2F:E4:6E:4D:33:FD:B8:3B:F9:CB:60:2D:97:95:BB:AB:37:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/323830343a3633633a3a2f33322d3332203d3e20323632353731.roa
Signing time:             Mon 06 Dec 2021 19:10:09 +0000
ROA not before:           Mon 06 Dec 2021 19:05:09 +0000
ROA not after:            Mon 05 Dec 2022 19:10:09 +0000
asID:                     262571
IP address blocks:        2804:63c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e0:ae:53:3c:d7:d7:9d:c1:86:10:cb:1f:06:c5:77:bc:a2:8b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E22FE46E4D33FDB83BF9CB602D9795BBAB376D
        Validity
            Not Before: Dec  6 19:05:09 2021 GMT
            Not After : Dec  5 19:10:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:23:a5:7a:4a:bf:e4:4a:e5:a6:41:6d:85:79:
                    6f:52:9b:ce:74:ee:41:18:08:96:41:91:00:74:1e:
                    d4:d0:f9:5b:21:9c:79:54:a8:ab:7e:6b:5b:03:30:
                    77:44:41:39:ea:fb:e6:6b:ff:c1:e6:bf:5c:e8:c0:
                    19:08:fb:39:7e:6c:00:10:c6:d6:2d:75:9c:a4:4e:
                    3e:89:fa:b2:b1:fc:cf:24:01:ef:0d:12:52:66:94:
                    62:1c:19:27:c1:53:5b:13:e3:49:f5:97:14:39:8c:
                    4f:5f:0f:6f:52:c1:fb:4a:b0:bc:34:c5:63:cb:c0:
                    4a:04:16:f0:97:2a:e7:16:95:bc:f6:37:c6:b2:2a:
                    db:fc:e8:0a:dc:50:c8:7d:bd:5f:2e:19:38:e2:15:
                    fe:86:01:b5:d9:2f:2b:db:ca:ff:ae:54:4f:73:f8:
                    ce:02:32:7b:69:b3:4d:92:2f:ee:ef:ac:13:dc:8b:
                    1b:9f:8e:45:43:80:d9:a4:b8:49:3b:b6:6b:75:58:
                    15:e4:ee:65:ab:c0:15:63:02:7f:c5:90:7e:48:83:
                    c4:10:6f:d2:9a:75:a0:0c:07:1f:f1:77:8d:8b:6b:
                    2b:d2:f0:63:51:54:7a:3a:99:87:ea:f3:75:9d:fc:
                    be:c3:c0:ad:b4:10:e8:ca:74:ba:6f:98:0b:b5:d5:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:90:04:5A:72:29:5F:52:A9:0E:60:06:81:CD:43:7A:51:65:20:94
            X509v3 Authority Key Identifier:
                keyid:98:E2:2F:E4:6E:4D:33:FD:B8:3B:F9:CB:60:2D:97:95:BB:AB:37:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/323830343a3633633a3a2f33322d3332203d3e20323632353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:7c:d7:c5:ed:a8:72:09:59:f1:e9:61:d1:1d:af:a6:c8:2b:
         67:ee:48:67:83:13:d7:7e:bf:91:9c:72:7f:56:f1:08:e3:ce:
         a5:3b:b8:8c:12:b0:7a:62:7d:72:8f:42:6c:6b:dc:33:f9:d2:
         81:23:1d:c8:d7:4f:18:d5:8f:76:76:40:1e:9e:40:cb:40:00:
         bc:a5:97:d3:3f:de:c9:cb:a8:d6:45:e0:bb:db:65:1c:82:16:
         82:a8:e0:6a:df:ff:97:59:9a:f5:f1:45:ba:40:94:84:4f:b5:
         0f:e5:42:d1:47:fd:c7:e5:6a:ef:a2:96:17:12:36:66:c1:7d:
         ba:b1:1f:92:01:d8:a3:62:50:91:87:7e:9b:e0:88:df:8e:fe:
         36:52:98:27:0e:43:cf:a5:28:ee:7c:4e:7b:14:03:8e:3e:7b:
         99:0e:2a:68:c1:0c:66:73:75:25:e2:f1:3b:08:e9:77:53:6c:
         cd:aa:35:be:e4:42:57:96:0b:c2:fc:ae:b8:cd:e2:99:e3:f5:
         35:f7:d3:7f:08:00:b0:3e:23:ed:ad:d4:f0:e9:37:d1:e5:3d:
         a2:c4:eb:ca:0d:46:25:7f:08:2d:31:30:c2:76:ed:7d:08:66:
         f9:f0:3d:06:f6:9e:09:e5:77:0a:4c:01:6f:22:f7:d7:de:7e:
         e7:50:88:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org