Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343032313a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343032313a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          J6fNLrZLtyXpW0Fh/vZgkLFHq1F6YVzKqJghEE4KryA=
Subject key identifier:   74:6C:69:50:A0:49:91:F3:57:66:0F:06:6F:A2:6A:95:51:AC:78:69
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       70F4AC1665A642A8FC347A57B463206BC3A230B0
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343032313a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Mon 30 Jan 2023 21:54:12 +0000
ROA not before:           Mon 30 Jan 2023 21:49:12 +0000
ROA not after:            Mon 29 Jan 2024 21:54:12 +0000
asID:                     262773
IP address blocks:        2804:9f8:4021::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f4:ac:16:65:a6:42:a8:fc:34:7a:57:b4:63:20:6b:c3:a2:30:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Jan 30 21:49:12 2023 GMT
            Not After : Jan 29 21:54:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:11:05:40:78:c7:29:48:03:a9:30:40:c9:
                    be:c5:df:7a:a9:64:2e:d7:75:bc:36:cd:14:5d:9e:
                    b4:c6:93:b2:d2:19:19:18:66:2e:45:68:3b:9b:a7:
                    91:fb:bb:a7:96:40:cf:11:7d:84:95:dd:22:57:db:
                    bd:64:dd:71:fa:f1:21:d8:f9:04:a2:46:f7:22:6f:
                    34:16:90:d4:45:52:ec:20:c0:a3:e1:92:e0:dc:0c:
                    a7:b6:7d:ad:c1:18:aa:c6:20:ad:b5:14:dd:73:73:
                    a7:c6:52:85:ec:ab:e5:44:4b:a8:14:6b:9f:ae:ac:
                    90:3c:e8:28:81:77:f2:90:78:74:68:a6:1e:41:01:
                    6e:f1:a6:6a:18:cc:05:8c:ec:94:8d:1b:7c:7c:d5:
                    c8:23:88:7a:0a:04:30:06:5e:3d:d1:4f:fa:ad:60:
                    c9:86:09:93:d5:7c:31:50:77:40:ab:66:73:c4:72:
                    fd:ad:0e:5a:f6:94:63:bb:c9:c8:e3:2e:fe:83:9f:
                    71:0e:61:48:59:df:56:7c:74:03:5f:a4:9b:89:8d:
                    71:fb:32:db:04:5b:d5:e8:50:e5:86:a2:56:00:53:
                    0a:6a:e5:98:92:29:12:90:f5:77:2b:3c:33:15:4b:
                    85:43:bd:f3:92:e4:cc:a4:79:b7:5e:52:41:33:1a:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6C:69:50:A0:49:91:F3:57:66:0F:06:6F:A2:6A:95:51:AC:78:69
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343032313a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:4021::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:26:6f:0c:56:71:9c:98:a1:8e:06:76:d6:73:c7:15:f0:95:
         5c:bf:0a:fa:b5:e0:16:c5:bc:14:5c:c9:a0:54:34:72:8a:cc:
         55:a5:c5:90:ea:8f:e0:dc:22:f4:b3:ae:e4:e9:b4:8d:c9:62:
         73:90:ab:4e:73:f2:4d:1a:dd:01:15:6f:1d:df:8c:7e:2a:eb:
         8a:7b:1b:8e:67:03:b6:63:c2:05:0b:12:39:03:ac:13:60:d2:
         6c:af:c6:9d:6d:78:b1:29:d5:c4:67:ef:66:5c:03:57:8e:c8:
         83:8a:8a:ef:69:2f:2b:6d:d2:f0:a0:50:2b:dd:f5:b6:08:c1:
         33:f5:b3:d9:e4:3d:8c:30:7b:3a:79:76:37:45:64:4d:a3:8d:
         d8:da:ca:df:fc:16:47:40:78:9a:9e:d5:0f:87:04:0e:bd:6e:
         51:18:d2:c2:b8:2a:a7:e0:eb:a0:a0:a3:9d:8a:9f:c4:bb:93:
         ca:bf:32:84:90:6d:1d:e3:9f:d0:ab:7d:6e:0a:38:93:41:21:
         9a:32:e2:a7:db:a8:11:9b:6d:cd:3f:e8:b6:f5:e7:a4:08:64:
         3b:de:23:15:94:9c:c1:f5:f6:43:2b:05:4d:3d:41:11:2a:e3:
         64:d2:67:7d:5b:1a:68:01:cc:e5:35:b4:a2:91:55:39:46:31:
         ae:7a:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org