Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/323830343a3633633a3a2f33322d3336203d3e20323632353731.roa
File:                     323830343a3633633a3a2f33322d3336203d3e20323632353731.roa (raw, json)
Hash identifier:          aDYBGJBpyoII15I9kbfM1EIwcQIzdz9/B3USwJICtPA=
Subject key identifier:   CE:C5:49:78:0B:51:BF:6A:DE:FD:47:60:73:75:77:30:54:5F:DF:42
Certificate issuer:       /CN=98E22FE46E4D33FDB83BF9CB602D9795BBAB376D
Certificate serial:       7E441728D2A13C0E7A4DDC53F52531F0FFAF706D
Authority key identifier: 98:E2:2F:E4:6E:4D:33:FD:B8:3B:F9:CB:60:2D:97:95:BB:AB:37:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/323830343a3633633a3a2f33322d3336203d3e20323632353731.roa
Signing time:             Mon 03 Jul 2023 16:00:00 +0000
ROA not before:           Mon 03 Jul 2023 15:55:00 +0000
ROA not after:            Mon 01 Jul 2024 16:00:00 +0000
asID:                     262571
IP address blocks:        2804:63c::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:44:17:28:d2:a1:3c:0e:7a:4d:dc:53:f5:25:31:f0:ff:af:70:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E22FE46E4D33FDB83BF9CB602D9795BBAB376D
        Validity
            Not Before: Jul  3 15:55:00 2023 GMT
            Not After : Jul  1 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7b:73:af:77:65:2a:d5:83:3e:3c:66:aa:a9:
                    22:42:f2:ae:37:6d:6a:2b:05:8e:5b:46:79:25:4c:
                    3e:50:d3:a7:89:15:40:65:58:71:21:b0:c5:9f:06:
                    6b:ee:82:0b:ab:73:e9:2d:fe:1d:ef:98:2c:30:31:
                    df:b1:21:63:e1:60:75:3b:5f:3a:65:c8:af:ff:10:
                    c5:a5:b7:6d:c4:77:95:75:d9:ab:0b:be:c6:e4:ed:
                    8f:a7:ce:a8:da:3d:b5:b3:c1:fd:ee:43:d6:9f:21:
                    4c:10:4c:3f:83:34:76:0a:f3:52:d3:18:df:43:76:
                    60:66:1b:9d:db:7d:5e:23:e5:c9:af:9b:5a:20:4a:
                    cd:d6:d5:eb:70:74:da:56:0c:d8:0b:57:7d:2e:e2:
                    8b:ed:01:70:c7:6e:3d:5d:63:f0:ae:eb:de:9d:ac:
                    fc:d8:48:9f:90:37:d6:23:e1:7b:c0:a6:30:be:97:
                    de:b4:f4:76:8f:9e:49:d4:d6:32:0f:53:37:0d:3e:
                    57:db:97:92:f1:49:67:66:4b:d2:bf:e1:1b:e9:e0:
                    e4:1b:e6:b8:f8:25:d4:0f:f6:72:8f:2f:ea:a6:ca:
                    c6:7c:97:82:f4:00:f9:8e:a9:c6:cf:2a:c8:85:58:
                    bf:42:46:eb:c1:65:46:4b:ed:de:29:ca:aa:ba:13:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C5:49:78:0B:51:BF:6A:DE:FD:47:60:73:75:77:30:54:5F:DF:42
            X509v3 Authority Key Identifier:
                keyid:98:E2:2F:E4:6E:4D:33:FD:B8:3B:F9:CB:60:2D:97:95:BB:AB:37:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/323830343a3633633a3a2f33322d3336203d3e20323632353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63c::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:04:3a:a5:32:86:31:54:0e:df:e2:e1:15:d5:b6:43:83:ba:
         1d:42:2f:69:d9:78:dd:ca:be:e7:cb:49:7e:31:75:22:2b:5a:
         4e:85:46:a7:c3:af:b9:d1:2f:ab:cb:03:45:67:ac:e5:f7:38:
         4c:16:57:4c:a0:1b:0a:4c:fb:11:c3:0f:e1:9c:a1:91:a6:aa:
         df:13:6b:f2:6f:34:d4:59:ad:c5:8c:38:a3:51:92:c7:16:4b:
         e5:88:71:24:80:61:61:90:30:d4:5a:63:3b:27:69:f2:81:a3:
         20:f8:27:5f:12:62:18:78:48:bd:34:1e:d3:ef:51:34:ed:1b:
         eb:36:de:dc:6a:78:38:5f:6d:75:1a:25:70:36:d2:d7:0a:99:
         f9:a7:79:9b:e3:79:c4:ac:3c:39:3b:f6:41:ab:85:99:cd:da:
         45:7a:e8:db:3d:4a:09:e3:07:d8:64:07:46:9a:e7:07:f5:07:
         66:85:3d:07:43:f2:99:f6:39:02:7e:d7:c9:3b:ad:68:80:93:
         e4:c3:8a:79:c6:ff:29:e1:13:2d:2a:a1:53:c3:94:2e:6a:15:
         e3:0b:23:ab:c4:f4:e5:85:b8:0e:ca:a0:3b:a2:d8:e5:86:62:
         18:a4:43:5b:cf:b8:aa:f4:01:09:ed:a4:f7:37:c9:98:15:54:
         80:e7:d4:e6
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUfkQXKNKhPA56TdxT9SUx8P+vcG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThFMjJGRTQ2RTREMzNGREI4M0JGOUNCNjAyRDk3OTVC
QkFCMzc2RDAeFw0yMzA3MDMxNTU1MDBaFw0yNDA3MDExNjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjM3QjczQUY3NzY1MkFENTgz
M0UzQzY2QUFBOTIyNDJGMkFFMzc2RDZBMkIwNThFNUI0Njc5MjU0QzNFNTBEM0E3
ODkxNTQwNjU1ODcxMjFCMEM1OUYwNjZCRUU4MjBCQUI3M0U5MkRGRTFERUY5ODJD
MzAzMURGQjEyMTYzRTE2MDc1M0I1RjNBNjVDOEFGRkYxMEM1QTVCNzZEQzQ3Nzk1
NzVEOUFCMEJCRUM2RTRFRDhGQTdDRUE4REEzREI1QjNDMUZERUU0M0Q2OUYyMTRD
MTA0QzNGODMzNDc2MEFGMzUyRDMxOERGNDM3NjYwNjYxQjlEREI3RDVFMjNFNUM5
QUY5QjVBMjA0QUNERDZENUVCNzA3NERBNTYwQ0Q4MEI1NzdEMkVFMjhCRUQwMTcw
Qzc2RTNENUQ2M0YwQUVFQkRFOURBQ0ZDRDg0ODlGOTAzN0Q2MjNFMTdCQzBBNjMw
QkU5N0RFQjRGNDc2OEY5RTQ5RDRENjMyMEY1MzM3MEQzRTU3REI5NzkyRjE0OTY3
NjY0QkQyQkZFMTFCRTlFMEU0MUJFNkI4RjgyNUQ0MEZGNjcyOEYyRkVBQTZDQUM2
N0M5NzgyRjQwMEY5OEVBOUM2Q0YyQUM4ODU1OEJGNDI0NkVCQzE2NTQ2NEJFRERF
MjlDQUFBQkExMzAxQUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs3tzr3dlKtWDPjxmqqkiQvKuN21qKwWOW0Z5JUw+UNOniRVAZVhx
IbDFnwZr7oILq3PpLf4d75gsMDHfsSFj4WB1O186Zciv/xDFpbdtxHeVddmrC77G
5O2Pp86o2j21s8H97kPWnyFMEEw/gzR2CvNS0xjfQ3ZgZhud231eI+XJr5taIErN
1tXrcHTaVgzYC1d9LuKL7QFwx249XWPwruvenaz82EifkDfWI+F7wKYwvpfetPR2
j55J1NYyD1M3DT5X25eS8UlnZkvSv+Eb6eDkG+a4+CXUD/Zyjy/qpsrGfJeC9AD5
jqnGzyrIhVi/QkbrwWVGS+3eKcqquhMBrQIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FM7FSXgLUb9q3v1HYHN1dzBUX99CMB8GA1UdIwQYMBaAFJjiL+RuTTP9uDv5y2At
l5W7qzdtMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vTFBhTGFuZFJXUExoQ0Rl
Z2lvbm9ielVtb0RWREhoQVVKdWJrd1I5emdwaS8wLzk4RTIyRkU0NkU0RDMzRkRC
ODNCRjlDQjYwMkQ5Nzk1QkJBQjM3NkQuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvOThFMjJGRTQ2RTREMzNGREI4M0JGOUNCNjAyRDk3OTVCQkFCMzc2
RC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vTFBhTGFuZFJXUExoQ0RlZ2lvbm9i
elVtb0RWREhoQVVKdWJrd1I5emdwaS8wLzMyMzgzMDM0M2EzNjMzNjMzYTNhMmYz
MzMyMmQzMzM2MjAzZDNlMjAzMjM2MzIzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBAY8MA0G
CSqGSIb3DQEBCwUAA4IBAQBnBDqlMoYxVA7f4uEV1bZDg7odQi9p2Xjdyr7ny0l+
MXUiK1pOhUanw6+50S+rywNFZ6zl9zhMFldMoBsKTPsRww/hnKGRpqrfE2vybzTU
Wa3FjDijUZLHFkvliHEkgGFhkDDUWmM7J2nygaMg+CdfEmIYeEi9NB7T71E07Rvr
Nt7cang4X211GiVwNtLXCpn5p3mb43nErDw5O/ZBq4WZzdpFeujbPUoJ4wfYZAdG
mucH9QdmhT0HQ/KZ9jkCftfJO61ogJPkw4p5xv8p4RMtKqFTw5QuahXjCyOrxPTl
hbgOyqA7otjlhmIYpENbz7iq9AEJ7aT3N8mYFVSA59Tm
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org