Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343032323a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343032323a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          /6CR5ri+evryXZM2RNx9l42YPCglUYyEIPfDartcSl4=
Subject key identifier:   CA:71:63:61:47:5C:3C:13:15:CF:CB:7A:0A:BA:98:F0:C1:E6:6D:8D
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       5E880E8A028D3BB6744DD68767E35FFBC1999D47
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343032323a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Mon 30 Jan 2023 21:54:22 +0000
ROA not before:           Mon 30 Jan 2023 21:49:22 +0000
ROA not after:            Mon 29 Jan 2024 21:54:22 +0000
asID:                     262773
IP address blocks:        2804:9f8:4022::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:88:0e:8a:02:8d:3b:b6:74:4d:d6:87:67:e3:5f:fb:c1:99:9d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Jan 30 21:49:22 2023 GMT
            Not After : Jan 29 21:54:22 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:6b:0f:b3:6b:b7:e2:7f:54:5a:f4:d9:b6:
                    16:52:e3:5f:d9:c3:5a:55:5a:13:69:55:39:87:b7:
                    e7:fb:87:82:72:14:92:a7:ee:18:8d:76:33:90:8e:
                    cf:19:92:96:22:54:10:33:09:33:3a:06:8e:9f:24:
                    e9:4e:17:e6:e7:1b:cb:b1:d2:b8:f6:27:39:e4:d3:
                    49:53:a4:7d:cb:ef:52:d0:f7:1a:d6:be:ef:08:4a:
                    6c:14:7e:3b:fa:9a:97:01:8b:58:e8:0c:1e:3f:ae:
                    99:10:0f:40:9b:82:fa:6d:9b:72:27:4e:47:de:0c:
                    20:7f:7d:42:64:d4:26:0b:59:f7:33:30:2f:fd:3f:
                    43:7a:da:b9:a6:65:05:f2:f2:b8:7b:d3:63:59:f1:
                    77:e6:e8:f0:d9:29:a2:90:e6:d7:8e:10:50:dd:c4:
                    ab:04:e5:83:d9:eb:a1:50:f2:ec:7a:2d:42:ee:e3:
                    86:85:41:c5:92:28:5b:16:09:7a:37:a2:4d:5a:5b:
                    42:75:19:67:69:76:6f:67:ac:f1:82:9a:81:0c:5c:
                    4d:16:9c:57:7e:a9:a3:46:26:34:d1:3a:d8:f7:db:
                    76:7f:20:9f:c1:47:82:3e:54:ab:4b:59:3d:f8:01:
                    55:63:06:ea:d8:69:80:b1:45:00:f5:ba:fe:4d:4b:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:71:63:61:47:5C:3C:13:15:CF:CB:7A:0A:BA:98:F0:C1:E6:6D:8D
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343032323a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:4022::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:6e:9d:95:44:7f:e7:13:01:ba:e6:f3:d8:4e:12:29:1d:50:
         7f:29:29:b1:28:ab:9e:de:f7:73:0d:a2:62:f0:b8:da:e6:d2:
         6c:20:cb:39:28:ee:57:db:24:70:95:f4:58:af:9c:55:0f:4f:
         e1:d8:e7:cb:71:93:33:fe:aa:14:da:85:fb:3f:89:ca:90:7f:
         ff:93:c6:3c:d1:6c:98:e2:ff:e7:26:3d:42:53:c3:51:5f:94:
         23:48:84:96:56:66:fb:fe:d1:13:8e:2b:13:37:f7:68:2b:e2:
         c2:d7:62:ec:9a:8e:05:93:6a:c3:bb:50:3e:d4:58:25:26:7d:
         78:0c:de:8e:80:79:7d:16:32:2e:33:40:47:aa:cd:ed:d1:10:
         4a:46:55:3c:e6:e9:13:68:16:e4:4f:7b:d2:2c:a8:42:de:1f:
         1b:71:e9:f7:32:3e:67:ea:61:d1:68:f5:99:cc:88:28:92:5e:
         b6:99:76:bd:d5:91:c4:e0:76:d5:23:c4:43:75:10:22:75:a6:
         06:c3:0b:64:79:71:20:59:e0:fb:7b:98:fd:9f:cf:cc:3a:f9:
         ac:5e:fa:4c:9b:a4:aa:6b:e7:82:1d:22:fa:d9:4a:ab:32:07:
         85:69:9f:ca:c4:b9:c0:b8:c7:e9:0f:dc:9c:8c:97:dc:9d:e4:
         ec:17:20:dc
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUXogOigKNO7Z0TdaHZ+Nf+8GZnUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMzAxMzAyMTQ5MjJaFw0yNDAxMjkyMTU0MjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkExNTZCMEZCMzZCQjdFMjdG
NTQ1QUY0RDlCNjE2NTJFMzVGRDlDMzVBNTU1QTEzNjk1NTM5ODdCN0U3RkI4Nzgy
NzIxNDkyQTdFRTE4OEQ3NjMzOTA4RUNGMTk5Mjk2MjI1NDEwMzMwOTMzM0EwNjhF
OUYyNEU5NEUxN0U2RTcxQkNCQjFEMkI4RjYyNzM5RTREMzQ5NTNBNDdEQ0JFRjUy
RDBGNzFBRDZCRUVGMDg0QTZDMTQ3RTNCRkE5QTk3MDE4QjU4RTgwQzFFM0ZBRTk5
MTAwRjQwOUI4MkZBNkQ5QjcyMjc0RTQ3REUwQzIwN0Y3RDQyNjRENDI2MEI1OUY3
MzMzMDJGRkQzRjQzN0FEQUI5QTY2NTA1RjJGMkI4N0JEMzYzNTlGMTc3RTZFOEYw
RDkyOUEyOTBFNkQ3OEUxMDUwRERDNEFCMDRFNTgzRDlFQkExNTBGMkVDN0EyRDQy
RUVFMzg2ODU0MUM1OTIyODVCMTYwOTdBMzdBMjRENUE1QjQyNzUxOTY3Njk3NjZG
NjdBQ0YxODI5QTgxMEM1QzREMTY5QzU3N0VBOUEzNDYyNjM0RDEzQUQ4RjdEQjc2
N0YyMDlGQzE0NzgyM0U1NEFCNEI1OTNERjgwMTU1NjMwNkVBRDg2OTgwQjE0NTAw
RjVCQUZFNEQ0QjVERDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuhVrD7Nrt+J/VFr02bYWUuNf2cNaVVoTaVU5h7fn+4eCchSSp+4Y
jXYzkI7PGZKWIlQQMwkzOgaOnyTpThfm5xvLsdK49ic55NNJU6R9y+9S0Pca1r7v
CEpsFH47+pqXAYtY6AweP66ZEA9Am4L6bZtyJ05H3gwgf31CZNQmC1n3MzAv/T9D
etq5pmUF8vK4e9NjWfF35ujw2SmikObXjhBQ3cSrBOWD2euhUPLsei1C7uOGhUHF
kihbFgl6N6JNWltCdRlnaXZvZ6zxgpqBDFxNFpxXfqmjRiY00TrY99t2fyCfwUeC
PlSrS1k9+AFVYwbq2GmAsUUA9br+TUtd0wIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FMpxY2FHXDwTFc/Legq6mPDB5m2NMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMyMzgzMDM0M2EzOTY2MzgzYTM0
MzAzMjMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQJ+EAiMA0GCSqGSIb3DQEBCwUAA4IBAQAwbp2VRH/nEwG65vPYThIp
HVB/KSmxKKue3vdzDaJi8Lja5tJsIMs5KO5X2yRwlfRYr5xVD0/h2OfLcZMz/qoU
2oX7P4nKkH//k8Y80WyY4v/nJj1CU8NRX5QjSISWVmb7/tETjisTN/doK+LC12Ls
mo4Fk2rDu1A+1FglJn14DN6OgHl9FjIuM0BHqs3t0RBKRlU85ukTaBbkT3vSLKhC
3h8bcen3Mj5n6mHRaPWZzIgokl62mXa91ZHE4HbVI8RDdRAidaYGwwtkeXEgWeD7
e5j9n8/MOvmsXvpMm6Sqa+eCHSL62UqrMgeFaZ/KxLnAuMfpD9ycjJfcneTsFyDc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org