Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/323830343a3633633a633030303a3a2f33342d3334203d3e20323632353731.roa
File:                     323830343a3633633a633030303a3a2f33342d3334203d3e20323632353731.roa (raw, json)
Hash identifier:          08Es05NSShLbyVw7dtsl42UAh1qYbhydtyXjquyFWH0=
Subject key identifier:   59:A4:94:F7:68:E6:E8:42:A8:B2:69:A9:78:18:ED:F7:36:35:49:C5
Certificate issuer:       /CN=98E22FE46E4D33FDB83BF9CB602D9795BBAB376D
Certificate serial:       292EB3F8567BC3439DDD10C72FDCDCBFE7CB9572
Authority key identifier: 98:E2:2F:E4:6E:4D:33:FD:B8:3B:F9:CB:60:2D:97:95:BB:AB:37:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/323830343a3633633a633030303a3a2f33342d3334203d3e20323632353731.roa
Signing time:             Mon 06 Dec 2021 19:10:09 +0000
ROA not before:           Mon 06 Dec 2021 19:05:09 +0000
ROA not after:            Mon 05 Dec 2022 19:10:09 +0000
asID:                     262571
IP address blocks:        2804:63c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2e:b3:f8:56:7b:c3:43:9d:dd:10:c7:2f:dc:dc:bf:e7:cb:95:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E22FE46E4D33FDB83BF9CB602D9795BBAB376D
        Validity
            Not Before: Dec  6 19:05:09 2021 GMT
            Not After : Dec  5 19:10:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:79:cb:c9:c9:37:86:2d:8e:c8:10:fe:7f:
                    8d:d6:26:5b:3c:ec:63:a6:87:e1:f0:8a:c2:fd:84:
                    37:67:7b:25:22:86:13:79:d0:3c:90:3a:ba:78:03:
                    90:d4:64:f3:1f:a6:b6:95:f2:bc:0f:59:3e:a8:de:
                    58:80:49:69:f1:84:fa:dd:10:41:d3:ee:c4:28:19:
                    72:fe:f9:cd:c0:bb:44:3b:97:c5:4f:e6:67:26:cf:
                    57:ad:d7:5e:12:04:72:8d:42:c3:2f:02:83:3f:67:
                    30:99:ed:23:0e:96:59:29:12:d7:64:53:68:81:f4:
                    75:74:44:16:35:4d:e1:ca:6e:03:11:36:08:b0:8f:
                    ca:52:18:2b:3b:2c:65:56:5e:46:fc:89:83:12:c4:
                    97:67:b0:fa:57:93:d4:4a:a4:b5:73:f1:7a:b0:c0:
                    7b:cc:67:92:2a:b6:29:56:7b:15:fd:92:f2:63:28:
                    4d:f8:47:3b:04:16:08:29:69:b7:37:bc:d1:2d:90:
                    5d:c9:65:05:79:90:ce:1e:50:87:26:ee:9a:a2:96:
                    e0:29:d4:f7:46:f4:f7:32:0d:0d:52:07:72:ec:b0:
                    6b:ca:b4:23:d2:dd:7c:7a:cf:d1:f7:5f:9d:86:69:
                    a6:33:74:5a:d6:ed:f6:f1:7c:27:df:01:72:2a:ae:
                    31:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A4:94:F7:68:E6:E8:42:A8:B2:69:A9:78:18:ED:F7:36:35:49:C5
            X509v3 Authority Key Identifier:
                keyid:98:E2:2F:E4:6E:4D:33:FD:B8:3B:F9:CB:60:2D:97:95:BB:AB:37:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98E22FE46E4D33FDB83BF9CB602D9795BBAB376D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/LPaLandRWPLhCDegionobzUmoDVDHhAUJubkwR9zgpi/0/323830343a3633633a633030303a3a2f33342d3334203d3e20323632353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:4e:ea:ae:4a:86:f8:51:19:da:45:01:c6:06:8a:0c:44:
         65:a7:54:e1:fe:79:f6:b3:ba:f7:f6:9e:82:00:e7:98:06:7d:
         14:85:98:4e:ea:fa:74:74:d5:ed:39:c6:13:ee:3a:3a:a6:4d:
         25:7a:4e:45:c9:a2:ed:11:a9:60:9b:d3:e4:d3:a2:a8:51:e8:
         d2:c0:59:d5:19:44:fc:cb:54:74:f1:d8:d8:10:43:5c:99:97:
         d8:66:97:c9:68:81:1a:00:da:52:9b:30:29:e2:ea:de:59:bf:
         cb:01:7f:94:c7:ee:dc:90:1d:92:2c:c2:af:cb:f3:32:90:65:
         90:77:0a:74:de:94:ca:3d:00:1c:11:3a:4f:d1:41:6f:99:73:
         e8:61:1d:25:ad:b8:76:60:e2:64:7b:b6:c3:2e:3d:e6:be:7c:
         5d:86:b0:b1:53:87:79:95:36:89:95:b2:33:15:5a:a2:85:63:
         df:3a:df:b2:3e:96:95:ed:27:97:d3:1d:e9:12:1a:ae:4e:b5:
         92:8d:01:f0:60:a1:53:9b:bd:6c:77:62:56:90:82:95:a2:be:
         7c:1d:67:f7:04:94:c8:78:91:36:08:30:13:96:9c:07:a0:b2:
         7b:e6:bb:fe:8f:fc:36:ea:7b:13:dd:da:15:58:69:17:06:4e:
         4e:0c:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org