Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030373a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343030373a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          /kCAKFhnoXHBC3HD9OLKhzE2+9Z0GaqKvAyDdTbIhx0=
Subject key identifier:   F8:BD:88:6A:46:7C:D8:CF:CD:71:09:E1:3B:7E:27:5D:EF:F6:85:32
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       2F651214B1144B6EFF6E6DC59C6DE349326D66A3
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030373a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:19:52 +0000
ROA not before:           Tue 09 Aug 2022 13:14:52 +0000
ROA not after:            Tue 08 Aug 2023 13:19:52 +0000
asID:                     262773
IP address blocks:        2804:9f8:4007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:65:12:14:b1:14:4b:6e:ff:6e:6d:c5:9c:6d:e3:49:32:6d:66:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:14:52 2022 GMT
            Not After : Aug  8 13:19:52 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:49:f7:c9:ff:3a:15:88:c7:44:2d:90:78:
                    8c:7c:6e:8f:bf:ea:a5:a2:e2:ce:96:74:51:c5:52:
                    36:9f:94:46:a8:c9:43:5a:8a:ee:73:c3:c3:23:07:
                    ee:9c:0d:49:9d:03:53:c3:95:6b:3e:e1:4f:a3:26:
                    0d:76:ed:d7:22:e1:d2:f5:9d:5d:a4:9f:43:e0:88:
                    90:f8:72:e4:4a:72:7e:da:67:9c:c5:b0:f3:f1:93:
                    1e:7c:11:86:e6:9d:0f:8d:1e:3e:78:f5:b5:b5:44:
                    d0:ec:04:82:e6:83:39:b9:fc:5e:64:65:e3:5c:d2:
                    bb:9f:59:8c:42:56:60:73:e9:b2:49:d0:14:b8:a9:
                    3e:af:da:5a:21:e5:df:4a:4c:b8:53:36:5e:6b:a3:
                    b7:cf:c2:d8:8a:29:fd:ec:b2:3e:43:bb:16:1a:85:
                    28:a6:e7:49:83:f8:7f:ee:da:17:fe:0c:29:83:96:
                    2c:34:41:ce:eb:a2:de:39:17:6d:d2:b5:8b:05:dc:
                    de:b8:30:5b:f6:9e:80:dc:75:ec:3a:45:6e:e7:56:
                    11:89:ed:14:d1:d5:5c:f0:10:f3:1e:0d:8f:7e:f2:
                    91:73:a4:84:8c:ee:63:33:b8:74:bc:b3:06:44:8b:
                    f1:59:2c:eb:4a:30:8f:f2:b1:94:ba:78:2a:0d:c9:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BD:88:6A:46:7C:D8:CF:CD:71:09:E1:3B:7E:27:5D:EF:F6:85:32
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030373a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:4007::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:20:d0:f9:77:0b:ff:1d:48:10:8f:59:2f:60:bb:8f:6f:
         0b:29:b4:1d:43:05:10:c6:dc:75:9c:45:4c:78:b8:37:c9:27:
         f2:70:f5:74:06:14:39:32:0c:30:56:d0:f3:1e:49:9c:74:aa:
         23:52:6b:9b:0a:89:2c:fc:b1:61:e0:ab:cc:36:e9:e4:1a:b8:
         cf:01:15:76:19:6e:37:35:30:a0:9f:a2:ed:8d:34:91:68:52:
         b5:4c:b9:9d:94:b3:8d:7f:1e:f6:b4:87:de:10:9a:07:d3:ed:
         1a:23:05:24:08:58:c8:7f:7b:39:d9:32:e1:5c:6d:4a:5c:d4:
         f0:a3:87:24:91:e1:88:ac:49:a1:37:ee:ae:bc:d9:4a:cc:3b:
         fb:cb:1d:c9:d3:58:c7:78:aa:6e:5d:ae:f7:bf:df:a2:90:da:
         b1:d5:22:82:c6:20:21:3f:93:a1:3b:36:3f:ea:55:cc:2a:90:
         ff:91:0c:73:51:3a:b8:7a:14:54:5e:81:03:19:a6:a8:49:12:
         98:66:52:4c:86:ca:35:b7:54:d1:02:25:fe:87:e2:c3:ec:f7:
         aa:58:29:94:6e:1a:7d:62:36:fa:6b:6a:76:31:3a:7c:b2:cb:
         08:bb:d6:18:4e:6b:49:d1:a2:81:01:aa:06:af:97:e3:41:f9:
         03:08:b2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org