Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a323166343a3a2f33322d3332203d3e203532353638.roa
File:                     323830343a323166343a3a2f33322d3332203d3e203532353638.roa (raw, json)
Hash identifier:          4MT9HdPeX+nrT59CAzejxlgeaHejcFxItV8JkrzOOrg=
Subject key identifier:   AE:2A:2C:6C:08:70:51:22:E6:82:F9:72:41:B8:64:55:CB:56:E3:07
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       2263285D40A1EA873175C5443A97F591ED6D6B6C
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a323166343a3a2f33322d3332203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:12 +0000
ROA not before:           Tue 07 Feb 2023 19:59:12 +0000
ROA not after:            Tue 06 Feb 2024 20:04:12 +0000
asID:                     52568
IP address blocks:        2804:21f4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:63:28:5d:40:a1:ea:87:31:75:c5:44:3a:97:f5:91:ed:6d:6b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:12 2023 GMT
            Not After : Feb  6 20:04:12 2024 GMT
        Subject: CN=3082010A0282010100ECFF31DD62CC298BC4F902BF05A9CF881BD624C9F94EE8C74AB5B004502638A334A1BCC8330ED93DBF0F983BB8F00CBEAA7D3CFACD70AC03259A614EC8931C9D826369682290239312E96481261114CA1C81040E360D419E52C0F8E7510D30ADF9174FEA6E9922C74CE17FFECB2F2C377E44CB93D70DA9304CF9E94D65198404515A86C0833AA0A5799064FC29AB2085226260DE47AA84BD3F10AE78324B669B4FDBF416F50A484145ED85201A4D43A72F69EBC51E66CA73736C956686B30BB262EC37405C11947D64990B62E0115A6574E11A853A2BC993D892DC38B8AA2AE3BE0528BC583FFEDA81643E59CC4F276E842C8A8D1219B780B2A9E2B1FA3D03BD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ff:31:dd:62:cc:29:8b:c4:f9:02:bf:05:a9:
                    cf:88:1b:d6:24:c9:f9:4e:e8:c7:4a:b5:b0:04:50:
                    26:38:a3:34:a1:bc:c8:33:0e:d9:3d:bf:0f:98:3b:
                    b8:f0:0c:be:aa:7d:3c:fa:cd:70:ac:03:25:9a:61:
                    4e:c8:93:1c:9d:82:63:69:68:22:90:23:93:12:e9:
                    64:81:26:11:14:ca:1c:81:04:0e:36:0d:41:9e:52:
                    c0:f8:e7:51:0d:30:ad:f9:17:4f:ea:6e:99:22:c7:
                    4c:e1:7f:fe:cb:2f:2c:37:7e:44:cb:93:d7:0d:a9:
                    30:4c:f9:e9:4d:65:19:84:04:51:5a:86:c0:83:3a:
                    a0:a5:79:90:64:fc:29:ab:20:85:22:62:60:de:47:
                    aa:84:bd:3f:10:ae:78:32:4b:66:9b:4f:db:f4:16:
                    f5:0a:48:41:45:ed:85:20:1a:4d:43:a7:2f:69:eb:
                    c5:1e:66:ca:73:73:6c:95:66:86:b3:0b:b2:62:ec:
                    37:40:5c:11:94:7d:64:99:0b:62:e0:11:5a:65:74:
                    e1:1a:85:3a:2b:c9:93:d8:92:dc:38:b8:aa:2a:e3:
                    be:05:28:bc:58:3f:fe:da:81:64:3e:59:cc:4f:27:
                    6e:84:2c:8a:8d:12:19:b7:80:b2:a9:e2:b1:fa:3d:
                    03:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2A:2C:6C:08:70:51:22:E6:82:F9:72:41:B8:64:55:CB:56:E3:07
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a323166343a3a2f33322d3332203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:21:b7:d8:29:ee:5e:6c:ce:26:da:b3:f3:1f:d6:94:a3:d7:
         d6:38:8a:99:e6:2e:4f:f7:cb:ba:24:be:3c:16:a3:ff:26:72:
         1e:1c:50:f0:93:f0:89:19:89:5d:97:75:0c:79:6d:66:91:21:
         e5:e4:24:89:52:be:ad:a3:dc:84:fa:a4:04:b2:a6:ad:84:76:
         67:e8:98:d9:8f:c5:1d:b7:2f:14:fb:d5:0a:51:12:8f:6c:e1:
         32:47:da:bf:4e:fd:15:30:72:64:cb:96:5d:95:76:75:8b:e2:
         bb:d5:7a:c2:38:6e:c7:78:78:9f:a6:dd:e6:bd:69:cd:1c:de:
         e0:fd:13:94:7b:36:38:5b:2e:5c:4d:d1:84:fb:f9:6f:f5:a4:
         ec:78:77:e7:b3:03:25:bf:88:2b:b5:aa:51:6a:c1:44:f1:7c:
         b8:0e:6a:84:c4:39:7a:a1:f2:07:59:6e:65:d5:d2:15:e3:81:
         fd:f5:6a:8c:c0:7f:ac:f4:d1:91:08:42:e1:71:76:32:86:f4:
         69:8b:b6:58:88:f2:c4:3b:30:89:be:23:3c:63:4f:e7:e4:b4:
         fc:e0:79:90:04:bf:a4:c5:a5:fe:e5:d0:cd:87:0d:65:9c:9a:
         bc:b0:f7:5b:65:28:4b:bb:6b:37:e1:d3:99:5c:6e:19:92:45:
         24:e0:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org