Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030333a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343030333a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          Gyq2pO48UyDNcxKfLp146rg9i/qX5fxQ4YfdU2aCj5s=
Subject key identifier:   EE:9A:00:3F:88:88:35:96:B9:4E:48:D5:4A:1E:9A:40:4E:30:73:F8
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       7838F96B3C8923C199CAA5F9E2815E4F88BA5F54
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030333a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:19:29 +0000
ROA not before:           Tue 09 Aug 2022 13:14:29 +0000
ROA not after:            Tue 08 Aug 2023 13:19:29 +0000
asID:                     262773
IP address blocks:        2804:9f8:4003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:38:f9:6b:3c:89:23:c1:99:ca:a5:f9:e2:81:5e:4f:88:ba:5f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:14:29 2022 GMT
            Not After : Aug  8 13:19:29 2023 GMT
        Subject: CN=3082010A0282010100BA5DDDE839A84F7176CF6F95DE7BB3C904555A3BBA3A9BE05123254F9DDE0C358EF0806769FEE6AAD3F5A18A5355EED2A8AC02719308A71702D65BF581A46F6E07B3C241829FEEEA0EA8B6CAC1163A6F7A06F058611D524DF571D5FE0D6403906CC053004FF0CE4277B7DA4B71D05131C205B3486AC440B974543433884CD8DAC2DB09A87CCED4D7A84AC298A127CDF7760FCDA1A16A90A09797AA06EA9A740D6AC7D91AF0E76309A8908FE9A83F5143B83E4140388CAA4EE6CF51C781B3E767209158BCCE6CCC74E586ABE6D76E2180163DF2881011BE0BCDD1AEB26BC631F595BD96EB4B715397BC137D5D7D9A8607C8002162B768C5DB9781ECC754A7627B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:dd:e8:39:a8:4f:71:76:cf:6f:95:de:7b:
                    b3:c9:04:55:5a:3b:ba:3a:9b:e0:51:23:25:4f:9d:
                    de:0c:35:8e:f0:80:67:69:fe:e6:aa:d3:f5:a1:8a:
                    53:55:ee:d2:a8:ac:02:71:93:08:a7:17:02:d6:5b:
                    f5:81:a4:6f:6e:07:b3:c2:41:82:9f:ee:ea:0e:a8:
                    b6:ca:c1:16:3a:6f:7a:06:f0:58:61:1d:52:4d:f5:
                    71:d5:fe:0d:64:03:90:6c:c0:53:00:4f:f0:ce:42:
                    77:b7:da:4b:71:d0:51:31:c2:05:b3:48:6a:c4:40:
                    b9:74:54:34:33:88:4c:d8:da:c2:db:09:a8:7c:ce:
                    d4:d7:a8:4a:c2:98:a1:27:cd:f7:76:0f:cd:a1:a1:
                    6a:90:a0:97:97:aa:06:ea:9a:74:0d:6a:c7:d9:1a:
                    f0:e7:63:09:a8:90:8f:e9:a8:3f:51:43:b8:3e:41:
                    40:38:8c:aa:4e:e6:cf:51:c7:81:b3:e7:67:20:91:
                    58:bc:ce:6c:cc:74:e5:86:ab:e6:d7:6e:21:80:16:
                    3d:f2:88:10:11:be:0b:cd:d1:ae:b2:6b:c6:31:f5:
                    95:bd:96:eb:4b:71:53:97:bc:13:7d:5d:7d:9a:86:
                    07:c8:00:21:62:b7:68:c5:db:97:81:ec:c7:54:a7:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9A:00:3F:88:88:35:96:B9:4E:48:D5:4A:1E:9A:40:4E:30:73:F8
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030333a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:4003::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:78:59:a2:56:e7:2b:08:fd:90:b3:74:1d:7f:bc:ac:1b:5a:
         00:94:9a:d9:10:6e:72:2f:3a:4e:c0:fe:6f:19:f7:d8:b8:d8:
         b6:aa:6d:0a:f7:f2:b9:b1:01:0e:49:70:2d:bd:23:06:58:67:
         8b:cc:22:8c:ef:41:80:b4:84:34:b5:88:6a:83:da:1b:6d:b0:
         c3:11:9a:f9:ff:b3:0f:27:7e:05:89:f2:30:76:53:88:30:03:
         a2:66:1a:0c:8e:2c:04:ca:7d:bc:7f:44:3c:40:e5:21:73:07:
         fa:a6:b3:02:09:7f:77:a3:63:19:90:dc:0b:5b:27:3f:ee:1f:
         da:2d:38:d0:75:b7:80:76:6e:57:37:81:ba:81:64:ea:90:9c:
         3e:62:ce:9d:36:87:13:43:37:18:dc:60:30:93:e9:e4:33:c1:
         af:a4:8a:79:a3:09:1d:37:ab:bf:95:d5:4c:a4:36:bb:0e:ac:
         3e:95:e0:68:9b:25:b6:ae:0b:5a:a6:58:a2:91:16:43:5d:51:
         ad:b7:ca:96:50:ab:0d:05:b2:e0:2d:91:59:95:a3:45:61:a6:
         72:58:49:fd:eb:ec:40:ea:9e:53:ba:da:f1:c2:f7:11:b7:60:
         4a:d9:12:f0:2b:4d:df:50:51:29:c7:98:fb:ff:76:26:ca:f9:
         51:e9:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org