Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a323166343a383030303a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a323166343a383030303a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          cdVoLtfEykHVozd3b6LYZCKctO78EtU7W+xuAnGWF8w=
Subject key identifier:   2B:12:8B:93:98:B0:C0:BC:9D:09:C3:BE:14:56:1D:22:18:67:A4:95
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       41E78E864C11214C5BDDD3CACE054E84EDE7A8DC
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a323166343a383030303a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:52 +0000
ROA not before:           Tue 19 Mar 2024 21:48:52 +0000
ROA not after:            Tue 18 Mar 2025 21:53:52 +0000
asID:                     262773
IP address blocks:        2804:21f4:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e7:8e:86:4c:11:21:4c:5b:dd:d3:ca:ce:05:4e:84:ed:e7:a8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:52 2024 GMT
            Not After : Mar 18 21:53:52 2025 GMT
        Subject: CN=2B128B9398B0C0BC9D09C3BE14561D221867A495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:96:81:ba:c0:69:ee:d0:e1:97:26:1b:ed:bd:
                    7d:2a:23:87:b7:31:17:76:23:79:6f:de:84:d1:57:
                    78:45:43:1b:52:fe:6a:d5:ed:6a:63:9c:ac:58:19:
                    8d:2a:98:ea:57:67:fd:b6:85:3f:a3:55:9c:84:fc:
                    98:af:23:99:87:7f:0b:10:ae:cd:75:9b:69:b8:86:
                    2d:bb:d0:e4:cc:19:80:ab:25:7f:d7:ac:11:31:01:
                    16:d6:67:08:53:ad:82:b5:59:0b:77:7b:63:bd:12:
                    2d:36:8f:84:3f:d3:5b:f1:ae:fd:a5:96:cb:4a:9d:
                    68:fc:76:73:6c:45:c6:59:ed:3a:45:e7:9e:ba:5b:
                    b7:16:9f:c2:c8:66:0a:8a:26:32:83:1d:8a:8c:72:
                    1e:b5:56:6a:37:55:b2:35:4e:5f:42:87:01:f8:c2:
                    64:ef:57:db:f6:9a:bb:1c:d5:4e:a9:65:ae:ef:e8:
                    87:38:e8:1a:61:6a:63:bc:dd:be:14:ee:e1:c7:3f:
                    f0:d8:a0:e3:47:53:a8:4f:41:21:36:ae:4f:0f:11:
                    d9:5e:8c:ba:3e:ac:1d:95:92:3d:54:bb:57:94:52:
                    39:0b:63:37:54:b9:e6:f4:c0:5f:c3:37:f4:79:a4:
                    b3:a7:92:f9:06:60:f3:99:78:22:53:27:4a:c4:b2:
                    fa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:12:8B:93:98:B0:C0:BC:9D:09:C3:BE:14:56:1D:22:18:67:A4:95
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a323166343a383030303a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21f4:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:fc:2f:c8:ab:c5:da:3f:75:30:42:69:9b:58:5f:dd:b6:af:
         bb:e0:45:b8:b0:ba:9f:f0:ac:21:1c:cc:02:60:86:f1:e3:0b:
         0e:b5:03:25:ed:75:5c:4b:63:53:cb:2a:e4:ac:f3:c3:0a:ca:
         a2:83:b2:d6:f3:06:d7:59:82:ae:5c:84:c6:18:41:17:70:09:
         81:00:b0:92:06:c8:28:e4:2f:f9:73:5d:64:9b:df:5b:93:21:
         91:80:51:80:85:bc:4d:42:50:95:ea:27:d0:78:ac:b8:33:e9:
         9c:41:bd:82:d5:05:78:2a:fe:21:0e:54:49:56:41:d6:a0:0a:
         4c:90:9b:01:f2:13:1d:34:43:45:a3:de:4f:1a:b7:f3:10:37:
         21:fc:37:59:1a:bc:c3:27:3f:5a:b0:02:a1:af:cd:54:b9:65:
         c8:5e:e8:ed:15:c0:0b:78:f8:5c:40:75:d5:ff:d8:82:22:71:
         03:23:9c:6f:4c:95:22:2e:76:a3:50:c0:8b:b0:a3:78:28:cd:
         98:74:b6:26:f6:9c:c0:55:e3:1c:91:52:dd:1d:9c:9a:9f:65:
         2b:45:65:bf:5b:29:33:d1:cf:c1:6e:80:9a:10:ba:69:9e:ea:
         52:45:d2:b7:3b:f3:76:e0:30:8d:57:df:5c:d7:5f:3b:cc:91:
         75:43:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org