Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030383a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343030383a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          N9QCHemuDdDDDAKVCdmapywQovxtgI8V6WhO0qs0Gi8=
Subject key identifier:   0F:C8:A9:FC:A6:04:5A:D3:0F:85:5A:A1:F9:65:80:2E:B4:93:2D:27
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       6C9EFC8490E65DD3D853B94FB97005F0D71DABA8
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030383a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:19:59 +0000
ROA not before:           Tue 09 Aug 2022 13:14:59 +0000
ROA not after:            Tue 08 Aug 2023 13:19:59 +0000
asID:                     262773
IP address blocks:        2804:9f8:4008::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9e:fc:84:90:e6:5d:d3:d8:53:b9:4f:b9:70:05:f0:d7:1d:ab:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:14:59 2022 GMT
            Not After : Aug  8 13:19:59 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:0a:e6:f5:48:c8:8f:23:af:aa:35:f7:6c:
                    f9:04:64:d5:56:60:d5:94:87:4f:04:8f:ce:b8:8a:
                    37:38:62:63:0d:69:4a:41:57:26:d6:e5:d8:de:32:
                    50:6e:37:9e:bc:b9:b0:1a:65:31:20:d3:05:06:ed:
                    45:ad:b4:48:3f:15:79:df:72:54:41:39:eb:a5:07:
                    12:63:f6:54:08:a2:71:db:62:a0:d0:e0:0d:7b:5f:
                    ad:1b:9a:3b:7b:2a:b2:69:b7:80:5c:bd:b3:8a:c2:
                    a3:81:5c:b1:8e:ce:03:c4:76:6c:b5:3b:0d:74:6f:
                    a6:4b:9a:78:ab:4a:a4:a1:42:9e:fc:d8:6a:c8:da:
                    4a:b0:8b:bc:d0:75:03:6a:f1:df:69:ab:d5:bb:95:
                    1e:d7:f9:6c:e3:c6:1d:bc:00:55:66:a4:0f:cd:3f:
                    9d:75:6c:e4:e9:d6:4d:4e:b7:72:57:e8:80:b4:21:
                    42:87:98:27:5d:63:5d:91:40:b0:60:4a:e7:cc:44:
                    b1:80:06:d9:d0:e5:ee:dc:3d:12:8a:cd:de:2c:17:
                    80:13:63:63:43:37:28:b8:c6:b7:c3:c0:ac:ac:04:
                    94:36:e2:25:48:ab:1f:8e:09:53:77:77:6a:0d:ad:
                    c9:5c:87:68:a7:be:d2:f1:f3:f4:a3:56:c2:82:5c:
                    4f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C8:A9:FC:A6:04:5A:D3:0F:85:5A:A1:F9:65:80:2E:B4:93:2D:27
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030383a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:4008::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:14:1f:75:af:7e:b3:b0:e0:cb:0d:5f:04:a0:dd:74:cf:be:
         b2:55:07:b4:76:18:bc:57:e4:4c:25:f6:2c:50:cb:e6:1a:ab:
         7a:12:89:62:2e:d8:04:77:92:75:a6:35:74:ef:43:e7:0e:44:
         db:d9:e5:07:11:a4:f3:c5:76:a5:6d:32:6e:34:5b:8a:b9:98:
         5f:6f:ab:80:e6:fa:08:f9:be:a6:0a:bc:3d:9a:ec:33:f2:d4:
         ee:cf:f4:97:23:3f:da:7e:77:cd:d2:50:6b:a4:64:5c:c4:c4:
         c1:22:f7:b0:ba:74:9a:f4:dd:15:a8:47:06:59:ca:3d:c0:39:
         d9:10:d9:4d:6f:81:4f:23:3b:f0:49:17:77:46:b1:a6:5c:1b:
         e4:bf:fd:88:47:00:4a:ce:b8:ad:44:5b:be:45:12:57:06:c3:
         69:5a:38:83:38:62:a6:46:be:17:89:06:87:09:0b:ce:9d:6b:
         b5:3f:b5:ed:80:43:e4:ce:f1:3b:ee:da:a7:9a:01:79:55:57:
         62:a2:8a:44:ef:d9:a2:ac:d2:3e:b6:ea:a8:65:f3:cb:e1:67:
         1c:09:bd:0b:cd:63:8f:3e:56:39:34:3f:5c:2d:35:ae:08:18:
         70:e8:5f:a3:6b:8f:bd:91:cc:be:b8:1b:d5:2b:5e:f7:e9:94:
         bf:c2:4c:ed
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUbJ78hJDmXdPYU7lPuXAF8Ncdq6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA4MDkxMzE0NTlaFw0yMzA4MDgxMzE5NTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUFFQzBBRTZGNTQ4Qzg4RjIz
QUZBQTM1Rjc2Q0Y5MDQ2NEQ1NTY2MEQ1OTQ4NzRGMDQ4RkNFQjg4QTM3Mzg2MjYz
MEQ2OTRBNDE1NzI2RDZFNUQ4REUzMjUwNkUzNzlFQkNCOUIwMUE2NTMxMjBEMzA1
MDZFRDQ1QURCNDQ4M0YxNTc5REY3MjU0NDEzOUVCQTUwNzEyNjNGNjU0MDhBMjcx
REI2MkEwRDBFMDBEN0I1RkFEMUI5QTNCN0IyQUIyNjlCNzgwNUNCREIzOEFDMkEz
ODE1Q0IxOEVDRTAzQzQ3NjZDQjUzQjBENzQ2RkE2NEI5QTc4QUI0QUE0QTE0MjlF
RkNEODZBQzhEQTRBQjA4QkJDRDA3NTAzNkFGMURGNjlBQkQ1QkI5NTFFRDdGOTZD
RTNDNjFEQkMwMDU1NjZBNDBGQ0QzRjlENzU2Q0U0RTlENjRENEVCNzcyNTdFODgw
QjQyMTQyODc5ODI3NUQ2MzVEOTE0MEIwNjA0QUU3Q0M0NEIxODAwNkQ5RDBFNUVF
REMzRDEyOEFDRERFMkMxNzgwMTM2MzYzNDMzNzI4QjhDNkI3QzNDMEFDQUMwNDk0
MzZFMjI1NDhBQjFGOEUwOTUzNzc3NzZBMERBREM5NUM4NzY4QTdCRUQyRjFGM0Y0
QTM1NkMyODI1QzRGMEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmuwK5vVIyI8jr6o192z5BGTVVmDVlIdPBI/OuIo3OGJjDWlKQVcm
1uXY3jJQbjeevLmwGmUxINMFBu1FrbRIPxV533JUQTnrpQcSY/ZUCKJx22Kg0OAN
e1+tG5o7eyqyabeAXL2zisKjgVyxjs4DxHZstTsNdG+mS5p4q0qkoUKe/NhqyNpK
sIu80HUDavHfaavVu5Ue1/ls48YdvABVZqQPzT+ddWzk6dZNTrdyV+iAtCFCh5gn
XWNdkUCwYErnzESxgAbZ0OXu3D0Sis3eLBeAE2NjQzcouMa3w8CsrASUNuIlSKsf
jglTd3dqDa3JXIdop77S8fP0o1bCglxPCwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FA/IqfymBFrTD4VaofllgC60ky0nMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMyMzgzMDM0M2EzOTY2MzgzYTM0
MzAzMDM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQJ+EAIMA0GCSqGSIb3DQEBCwUAA4IBAQBqFB91r36zsODLDV8EoN10
z76yVQe0dhi8V+RMJfYsUMvmGqt6EoliLtgEd5J1pjV070PnDkTb2eUHEaTzxXal
bTJuNFuKuZhfb6uA5voI+b6mCrw9muwz8tTuz/SXIz/afnfN0lBrpGRcxMTBIvew
unSa9N0VqEcGWco9wDnZENlNb4FPIzvwSRd3RrGmXBvkv/2IRwBKzritRFu+RRJX
BsNpWjiDOGKmRr4XiQaHCQvOnWu1P7XtgEPkzvE77tqnmgF5VVdioopE79mirNI+
tuqoZfPL4WccCb0LzWOPPlY5ND9cLTWuCBhw6F+ja4+9kcy+uBvVK1736ZS/wkzt
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org