Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030393a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343030393a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          bduckAuSkN8x3bBOd39BP13Z8A5qUy7x8Vi+kE0J2t4=
Subject key identifier:   72:57:56:79:6F:18:C6:5D:3B:B9:C4:A1:0F:9E:DF:05:B6:EB:F7:92
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       4164DFAB0ECFAC31F63E743F974944B86AA8391C
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030393a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:20:04 +0000
ROA not before:           Tue 09 Aug 2022 13:15:04 +0000
ROA not after:            Tue 08 Aug 2023 13:20:04 +0000
asID:                     262773
IP address blocks:        2804:9f8:4009::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:64:df:ab:0e:cf:ac:31:f6:3e:74:3f:97:49:44:b8:6a:a8:39:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:15:04 2022 GMT
            Not After : Aug  8 13:20:04 2023 GMT
        Subject: CN=3082010A0282010100C7D256503E95E6945B7134028933CF2263B1AF380277029794CCC7F8B568923CD094BB3BFECFF022925F508DBAC4EB7A1BC9473985749892FB590C24F7C97E7C1612DDDFFA69ACCEA700C09AA44594DDF3790335C3490EF0772C226CE38BBD3C251FA56736ABF2C16EF5B504FF7D5718C1446ED38F68F39105A06A4D64D42165989A2E7F0720B1CC7F56430930CEAAB43CD8D2B651616815382357C980FBB8F0D485CF804D261A62F4BAED11CE3400878C92CE9B2CD79F90FF201DAFD16559DD059CD4198CBC4A5C84135023E1667E2DB20C7CD4ACD48BDDA24007369CFC947E7C032ADE266572EC291DA952BAF27C8197A8BB46FBEC8B8B11E1EB05669B1E8B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:56:50:3e:95:e6:94:5b:71:34:02:89:33:
                    cf:22:63:b1:af:38:02:77:02:97:94:cc:c7:f8:b5:
                    68:92:3c:d0:94:bb:3b:fe:cf:f0:22:92:5f:50:8d:
                    ba:c4:eb:7a:1b:c9:47:39:85:74:98:92:fb:59:0c:
                    24:f7:c9:7e:7c:16:12:dd:df:fa:69:ac:ce:a7:00:
                    c0:9a:a4:45:94:dd:f3:79:03:35:c3:49:0e:f0:77:
                    2c:22:6c:e3:8b:bd:3c:25:1f:a5:67:36:ab:f2:c1:
                    6e:f5:b5:04:ff:7d:57:18:c1:44:6e:d3:8f:68:f3:
                    91:05:a0:6a:4d:64:d4:21:65:98:9a:2e:7f:07:20:
                    b1:cc:7f:56:43:09:30:ce:aa:b4:3c:d8:d2:b6:51:
                    61:68:15:38:23:57:c9:80:fb:b8:f0:d4:85:cf:80:
                    4d:26:1a:62:f4:ba:ed:11:ce:34:00:87:8c:92:ce:
                    9b:2c:d7:9f:90:ff:20:1d:af:d1:65:59:dd:05:9c:
                    d4:19:8c:bc:4a:5c:84:13:50:23:e1:66:7e:2d:b2:
                    0c:7c:d4:ac:d4:8b:dd:a2:40:07:36:9c:fc:94:7e:
                    7c:03:2a:de:26:65:72:ec:29:1d:a9:52:ba:f2:7c:
                    81:97:a8:bb:46:fb:ec:8b:8b:11:e1:eb:05:66:9b:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:57:56:79:6F:18:C6:5D:3B:B9:C4:A1:0F:9E:DF:05:B6:EB:F7:92
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030393a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:4009::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:52:c6:de:4e:b2:d4:01:21:ae:e9:9d:14:0c:ea:87:0c:44:
         a9:76:c2:5e:72:d2:cb:3d:15:4b:2c:23:67:90:c8:97:cd:29:
         40:7c:b5:f1:81:97:91:40:bb:93:81:ec:74:e7:66:a3:f8:cb:
         00:fc:f3:e3:4b:3b:f3:76:68:7e:01:e7:13:b2:33:c3:89:3d:
         1e:4a:bb:c1:df:ef:37:96:45:5a:5b:a0:87:45:47:23:7c:b1:
         2d:48:fb:3e:28:ba:56:73:9c:e4:45:8f:62:a3:d6:1d:ab:81:
         94:e6:92:1c:0a:73:a0:da:2c:52:45:9c:71:ae:fa:17:6b:1c:
         ab:ed:ab:bb:1b:d3:46:d7:19:4e:0b:63:28:b1:27:ec:78:c2:
         5c:97:36:88:fb:e9:73:c5:a0:8a:3a:58:6e:21:ad:59:dd:02:
         eb:ac:2f:5c:dc:47:f0:ae:29:35:2b:5d:d9:07:1b:a7:d1:75:
         6a:da:85:12:f9:cb:4d:b0:3a:bf:48:2e:13:32:ef:7e:c1:3c:
         5c:bb:2a:21:9c:c5:0f:9c:cd:93:18:55:6a:1c:af:16:cf:0a:
         12:e5:4c:ee:4d:bd:89:26:45:16:c7:cb:66:cd:0f:dd:fc:24:
         62:3b:cf:ef:9b:51:96:0d:f7:26:1d:d1:84:4f:b5:1d:0c:45:
         bd:44:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org