Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343031663a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343031663a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          B9YU9jjw20gV3f90awdDWPdcCfuw+U6wmB2ym9OoWnE=
Subject key identifier:   DC:A6:81:7A:8A:04:ED:58:57:B1:33:04:DC:E3:D2:34:33:F5:AC:64
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       7E83048555C30909B2A517D523D05D1847E2ACAB
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343031663a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Mon 30 Jan 2023 21:53:44 +0000
ROA not before:           Mon 30 Jan 2023 21:48:44 +0000
ROA not after:            Mon 29 Jan 2024 21:53:44 +0000
asID:                     262773
IP address blocks:        2804:9f8:401f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:83:04:85:55:c3:09:09:b2:a5:17:d5:23:d0:5d:18:47:e2:ac:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Jan 30 21:48:44 2023 GMT
            Not After : Jan 29 21:53:44 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:0d:fd:74:62:6d:b7:26:2d:e9:5a:03:f0:
                    0f:18:b9:06:6b:66:19:78:21:99:ff:ab:48:1b:ba:
                    6d:3c:2b:d0:cc:a6:90:da:9a:65:05:3f:a3:9e:76:
                    12:ea:53:45:88:71:bd:58:60:e8:06:96:13:40:86:
                    d7:54:24:5d:2b:17:bb:b5:6c:d5:55:a8:fc:2b:49:
                    35:6a:8e:12:04:de:15:4b:8c:dc:50:8a:dc:18:6d:
                    62:71:c2:9f:81:28:67:df:a7:69:e8:6d:29:f2:d5:
                    fe:51:a8:4f:ee:b8:78:89:52:2d:59:55:34:f9:56:
                    b3:6a:af:f8:85:a8:58:2c:d3:64:2c:3e:84:7d:8b:
                    85:b1:82:f0:a3:6c:63:cb:f9:9a:09:39:ef:f3:15:
                    80:a4:07:f7:1a:6b:dd:91:d6:bb:20:08:77:c8:5a:
                    bf:9f:fb:79:16:ee:69:c2:47:f7:c1:90:bb:18:04:
                    3b:ac:16:05:fc:aa:39:bc:f5:3e:10:be:07:47:f3:
                    c4:2e:4b:78:2d:97:f9:57:72:d9:07:03:40:f7:90:
                    95:cc:e3:74:d9:a3:8b:84:a0:76:0a:a3:f5:ad:5d:
                    09:80:fe:80:f7:c7:a2:f3:0b:b4:b7:3e:72:38:26:
                    f1:3b:1f:26:c8:83:15:3b:6b:20:72:db:42:b4:70:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A6:81:7A:8A:04:ED:58:57:B1:33:04:DC:E3:D2:34:33:F5:AC:64
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343031663a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:401f::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:1e:cf:37:b1:07:d1:49:07:87:1e:d7:a0:26:91:56:43:62:
         e1:a5:14:6e:e1:12:37:e5:57:eb:22:96:10:eb:79:52:61:85:
         20:ea:ac:68:56:40:3f:b6:8a:05:c4:42:d4:81:ba:2d:0f:68:
         4e:19:9d:dd:42:e6:3a:1f:41:85:0b:dd:f8:43:cc:18:be:35:
         5f:a7:a6:2c:85:72:5b:8a:53:ad:6d:9b:f1:f5:d7:a7:a9:a0:
         65:ed:e6:71:5f:fa:18:73:4c:8b:aa:c0:83:18:b4:d5:a1:88:
         dd:a2:10:88:1a:31:90:bd:0c:27:d5:32:90:d8:6c:08:56:94:
         07:a0:62:a1:a1:39:03:28:6b:b9:73:20:ab:2b:08:cf:38:de:
         c5:e9:ba:5f:c0:cc:ff:c3:d3:4b:19:8c:7b:47:84:3d:8a:ef:
         14:95:4f:f4:31:dd:b6:31:af:95:aa:ac:30:bb:8b:4c:56:ca:
         38:ca:9f:35:36:80:bc:fd:97:e6:5d:84:69:60:fe:a0:f6:bf:
         3f:6e:22:62:3e:93:dc:1f:98:c4:3c:6f:dc:ec:d8:4e:60:f4:
         47:76:c5:7a:e4:c0:eb:f6:f7:47:ae:37:1f:dd:32:4a:9b:cb:
         65:b2:72:02:2b:0e:01:c0:44:a8:c3:3d:90:d2:49:b7:c6:4f:
         5a:a0:d0:4a
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUfoMEhVXDCQmypRfVI9BdGEfirKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMzAxMzAyMTQ4NDRaFw0yNDAxMjkyMTUzNDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjAwMTBERkQ3NDYyNkRCNzI2
MkRFOTVBMDNGMDBGMThCOTA2NkI2NjE5NzgyMTk5RkZBQjQ4MUJCQTZEM0MyQkQw
Q0NBNjkwREE5QTY1MDUzRkEzOUU3NjEyRUE1MzQ1ODg3MUJENTg2MEU4MDY5NjEz
NDA4NkQ3NTQyNDVEMkIxN0JCQjU2Q0Q1NTVBOEZDMkI0OTM1NkE4RTEyMDRERTE1
NEI4Q0RDNTA4QURDMTg2RDYyNzFDMjlGODEyODY3REZBNzY5RTg2RDI5RjJENUZF
NTFBODRGRUVCODc4ODk1MjJENTk1NTM0Rjk1NkIzNkFBRkY4ODVBODU4MkNEMzY0
MkMzRTg0N0Q4Qjg1QjE4MkYwQTM2QzYzQ0JGOTlBMDkzOUVGRjMxNTgwQTQwN0Y3
MUE2QkREOTFENkJCMjAwODc3Qzg1QUJGOUZGQjc5MTZFRTY5QzI0N0Y3QzE5MEJC
MTgwNDNCQUMxNjA1RkNBQTM5QkNGNTNFMTBCRTA3NDdGM0M0MkU0Qjc4MkQ5N0Y5
NTc3MkQ5MDcwMzQwRjc5MDk1Q0NFMzc0RDlBMzhCODRBMDc2MEFBM0Y1QUQ1RDA5
ODBGRTgwRjdDN0EyRjMwQkI0QjczRTcyMzgyNkYxM0IxRjI2Qzg4MzE1M0I2QjIw
NzJEQjQyQjQ3MEU4OTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsAEN/XRibbcmLelaA/APGLkGa2YZeCGZ/6tIG7ptPCvQzKaQ2ppl
BT+jnnYS6lNFiHG9WGDoBpYTQIbXVCRdKxe7tWzVVaj8K0k1ao4SBN4VS4zcUIrc
GG1iccKfgShn36dp6G0p8tX+UahP7rh4iVItWVU0+Vazaq/4hahYLNNkLD6EfYuF
sYLwo2xjy/maCTnv8xWApAf3Gmvdkda7IAh3yFq/n/t5Fu5pwkf3wZC7GAQ7rBYF
/Ko5vPU+EL4HR/PELkt4LZf5V3LZBwNA95CVzON02aOLhKB2CqP1rV0JgP6A98ei
8wu0tz5yOCbxOx8myIMVO2sgcttCtHDolwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FNymgXqKBO1YV7EzBNzj0jQz9axkMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMyMzgzMDM0M2EzOTY2MzgzYTM0
MzAzMTY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQJ+EAfMA0GCSqGSIb3DQEBCwUAA4IBAQAMHs83sQfRSQeHHtegJpFW
Q2LhpRRu4RI35VfrIpYQ63lSYYUg6qxoVkA/tooFxELUgbotD2hOGZ3dQuY6H0GF
C934Q8wYvjVfp6YshXJbilOtbZvx9denqaBl7eZxX/oYc0yLqsCDGLTVoYjdohCI
GjGQvQwn1TKQ2GwIVpQHoGKhoTkDKGu5cyCrKwjPON7F6bpfwMz/w9NLGYx7R4Q9
iu8UlU/0Md22Ma+Vqqwwu4tMVso4yp81NoC8/ZfmXYRpYP6g9r8/biJiPpPcH5jE
PG/c7NhOYPRHdsV65MDr9vdHrjcf3TJKm8tlsnICKw4BwESowz2Q0km3xk9aoNBK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org