Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030353a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343030353a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          cN3nUMnQLKJx7Weuv91f7jD6GcCIwQ1jigLZcJ6UFjY=
Subject key identifier:   EA:27:B1:13:B0:E1:07:11:84:54:89:24:8C:91:B2:8B:A7:28:95:46
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       2343251285B0E9A1475E91E99A501FAF340C4187
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030353a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:19:40 +0000
ROA not before:           Tue 09 Aug 2022 13:14:40 +0000
ROA not after:            Tue 08 Aug 2023 13:19:40 +0000
asID:                     262773
IP address blocks:        2804:9f8:4005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:43:25:12:85:b0:e9:a1:47:5e:91:e9:9a:50:1f:af:34:0c:41:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:14:40 2022 GMT
            Not After : Aug  8 13:19:40 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cf:b8:26:cd:65:0d:d9:dd:95:b9:b7:a9:2f:
                    96:97:7d:24:a8:8a:3b:4a:59:99:bb:a8:af:21:4b:
                    a5:fb:b6:27:d9:12:ea:36:cc:b0:ed:85:eb:7c:fe:
                    c2:ad:9a:db:fa:c6:01:1a:95:24:6e:d6:93:a1:63:
                    39:6f:1d:a1:0b:4f:c8:d3:95:50:db:c0:19:1b:a9:
                    20:0d:52:f1:54:05:da:fc:26:bb:db:ca:d8:30:b1:
                    f6:b7:97:d5:0d:a4:fc:8c:47:e0:2b:e7:30:11:e0:
                    f5:6a:dd:67:05:5b:45:15:d6:3e:58:2a:14:2d:f6:
                    53:4b:d1:20:bb:d7:a7:8b:5d:46:c0:f8:18:67:be:
                    49:da:e3:53:a8:8e:be:76:a3:27:22:bc:26:23:68:
                    37:43:e4:fd:43:0e:8e:f8:8a:23:84:66:1e:f5:f0:
                    a9:22:52:e1:fc:67:8c:bf:93:ff:f8:24:68:ff:7a:
                    a9:4f:05:36:5a:34:06:7a:f7:9c:ed:2d:d2:8b:55:
                    38:0f:ca:11:9b:d1:19:df:63:63:e4:d7:f3:52:9b:
                    e6:83:f1:1b:4d:99:d1:54:d8:f4:e9:27:92:08:42:
                    a8:d0:ec:9c:df:47:cd:be:04:9a:2c:4a:0a:79:dd:
                    20:33:52:1c:41:53:2a:d7:70:19:79:fc:4f:4d:1d:
                    55:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:27:B1:13:B0:E1:07:11:84:54:89:24:8C:91:B2:8B:A7:28:95:46
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030353a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:4005::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:c7:5f:f4:20:95:5e:e3:24:22:2a:a0:c8:e4:68:23:10:91:
         25:7c:7e:0d:31:26:b4:ac:17:44:71:45:7a:c4:67:d2:46:67:
         a9:83:cb:2b:5d:b0:3f:4b:fd:87:e8:f2:f6:41:ad:38:f7:b0:
         ad:1c:e5:34:e4:fb:57:ed:27:2e:03:36:8e:ad:86:2c:bc:98:
         04:3f:25:07:5e:35:39:7a:d0:5d:3a:12:25:1e:2b:9e:bc:d1:
         77:ef:db:36:07:42:29:b9:8e:ce:74:b9:ee:ed:eb:5b:7d:30:
         73:ac:b8:77:d6:e2:ad:4b:2a:c4:18:bb:ae:b3:2c:d1:43:35:
         23:d0:d1:62:e0:96:cd:50:9d:52:ab:8e:47:e3:d5:72:d5:80:
         bf:17:6c:03:19:45:79:58:5b:95:6c:d9:a5:85:65:1e:58:80:
         02:cb:67:f6:04:23:9f:22:37:4d:e6:f9:75:cc:a6:2f:82:93:
         ba:4a:b2:ef:81:0b:ba:04:26:f8:47:ad:2a:da:f3:0b:80:cb:
         95:ad:68:20:ba:6c:5d:ca:f9:01:02:18:0c:2b:9c:0c:cf:ed:
         8d:74:4e:f0:ab:88:07:e4:bf:ca:9d:78:8a:a4:eb:13:05:84:
         38:27:0b:8c:bc:ba:32:0d:2c:9a:3f:eb:ab:9f:16:1b:3b:ad:
         51:91:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org