Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a323166343a6666663a3a2f34382d3438203d3e203532353638.roa
File:                     323830343a323166343a6666663a3a2f34382d3438203d3e203532353638.roa (raw, json)
Hash identifier:          sgpQKFe/EkEy+wsPJQuUtaSkwC+ja2qAbtZnT3UWwAE=
Subject key identifier:   CE:81:15:25:05:6B:11:A6:77:05:54:39:3D:37:91:32:1F:08:6E:82
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3763F79C25F80E051422CA587BCBD4974032EC82
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a323166343a6666663a3a2f34382d3438203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:13 +0000
ROA not before:           Tue 07 Feb 2023 19:59:13 +0000
ROA not after:            Tue 06 Feb 2024 20:04:13 +0000
asID:                     52568
IP address blocks:        2804:21f4:fff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:63:f7:9c:25:f8:0e:05:14:22:ca:58:7b:cb:d4:97:40:32:ec:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:13 2023 GMT
            Not After : Feb  6 20:04:13 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:3e:98:df:98:17:c9:55:47:06:c6:cb:3e:
                    f5:06:f7:2e:b4:c9:c6:45:72:cc:0f:7c:78:e3:ce:
                    57:51:79:31:06:51:fa:97:02:9f:29:12:21:92:e5:
                    6c:17:c1:7e:42:ce:5f:97:df:04:97:37:98:c5:79:
                    18:0c:99:32:b7:e8:34:07:b6:73:de:60:8f:0c:ec:
                    d8:2e:eb:a3:aa:30:80:25:70:b4:22:08:5a:47:3f:
                    7a:c5:47:54:1e:77:30:04:1f:d9:1e:25:45:d6:77:
                    d9:a1:79:91:80:b4:f1:d3:f9:c4:70:58:d5:7c:46:
                    e2:b5:64:47:18:8b:0a:6b:ac:6c:d8:d7:20:d3:d0:
                    d9:35:c0:e6:5b:f6:21:eb:83:4c:7b:8b:0f:70:cd:
                    0d:1a:b1:59:20:cf:69:87:c5:7c:8a:cc:af:19:ba:
                    3b:94:32:8b:9f:7f:30:08:3b:4e:87:13:22:a2:02:
                    92:18:6f:a9:df:ff:83:6f:08:94:2b:b5:8c:71:d9:
                    9f:b1:2f:56:15:f3:01:80:91:0e:8b:f6:48:5f:ce:
                    1b:46:f7:6e:40:8f:0b:fc:81:5a:1a:21:6c:e4:b7:
                    8a:f4:99:6d:cb:d8:49:bc:d7:28:55:28:e1:3a:12:
                    a8:af:36:8a:10:a3:8d:35:e4:53:6d:3b:85:13:9d:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:81:15:25:05:6B:11:A6:77:05:54:39:3D:37:91:32:1F:08:6E:82
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a323166343a6666663a3a2f34382d3438203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21f4:fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:31:cf:06:e5:ff:6c:36:71:f8:e6:9e:e5:4e:ce:3d:5a:68:
         aa:38:8a:7d:87:15:36:c0:6f:13:f8:cc:f2:ce:43:29:b5:72:
         b9:71:1d:21:82:5b:ff:d1:19:e9:03:75:f8:b7:f0:aa:4d:55:
         49:59:51:f8:2f:b5:3b:fe:87:06:9d:d0:48:eb:7c:a3:61:ff:
         b5:46:62:5e:20:dd:ac:64:fc:8a:bf:f6:63:b2:9f:e6:ba:55:
         d7:59:2a:bc:28:a4:8f:0a:d9:56:77:5a:7e:d0:17:37:92:67:
         62:3d:27:d2:ec:80:55:c7:da:dc:a2:73:97:7c:1e:54:d1:c6:
         0f:46:3f:48:dd:56:8b:d9:ac:ea:ac:0c:49:43:5f:b5:11:b9:
         d9:52:ec:91:1a:e0:95:56:56:24:9a:4b:1a:df:c5:21:46:af:
         a3:36:81:69:b8:9b:ca:2e:32:44:24:a8:dd:c1:58:43:7c:64:
         78:cd:49:de:fb:69:a2:6e:da:6e:40:73:8a:84:e4:bf:a0:58:
         54:bd:ed:af:0d:cf:7c:2b:39:43:d3:83:6b:9f:34:b8:5e:1d:
         d9:cf:3e:8a:46:92:f9:d1:a0:30:a5:17:84:99:f5:c0:27:66:
         58:c0:b1:86:9f:30:77:f8:2a:20:89:ad:30:3c:93:d0:9d:52:
         1d:0f:c7:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org