Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a383030303a3a2f33332d3333203d3e20323632373733.roa
File:                     323830343a3966383a383030303a3a2f33332d3333203d3e20323632373733.roa (raw, json)
Hash identifier:          9xR77tDsMIeGHJLhE0O6oPOncTGztbUt/1mGqem8Xnc=
Subject key identifier:   70:E6:18:2E:A5:FC:4D:96:AE:5F:8A:66:10:35:A0:ED:C1:5A:A0:24
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       38485235BB1834CEB164F5AF6CE7705B2B08ED90
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a383030303a3a2f33332d3333203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:33 +0000
ROA not before:           Tue 27 Sep 2022 19:14:33 +0000
ROA not after:            Tue 26 Sep 2023 19:19:33 +0000
asID:                     262773
IP address blocks:        2804:9f8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:48:52:35:bb:18:34:ce:b1:64:f5:af:6c:e7:70:5b:2b:08:ed:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:33 2022 GMT
            Not After : Sep 26 19:19:33 2023 GMT
        Subject: CN=3082010A0282010100C183853746A64579147D03C9F6F1172B449E6157F77D40520C3009CB0BD442ECA2D36B6D6CEC7EEC7A7FA43132422F3782DE8E752281C04F3B98AB87F1F64AA2F9FC72B4A3F1DEF928790327DE37AEFD12278DF51ED2A25EF52BA15C7B2F6AE71CD0139C31278133E267769ED65A6C6A7C1E7209AD9F023EF2A6B7A96D311817C2A73470401CE60D8ECBE8B3EB82B1FF3CDABCA0DBBE21C2D37FB86834FF64330BFA1EF44773DEFB54F3351F73BCC6FD8EB300CB066A6E83A2D66D1C14045EACC0016C73B9542106B6382AE3751D364CBA9B9DB2ACD2523B3B2125C16AD46A46145BAD832BAD10C04F66767C2C6310E285B8F2AAB9D05D7F0A8081E797ACD2DF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:85:37:46:a6:45:79:14:7d:03:c9:f6:f1:
                    17:2b:44:9e:61:57:f7:7d:40:52:0c:30:09:cb:0b:
                    d4:42:ec:a2:d3:6b:6d:6c:ec:7e:ec:7a:7f:a4:31:
                    32:42:2f:37:82:de:8e:75:22:81:c0:4f:3b:98:ab:
                    87:f1:f6:4a:a2:f9:fc:72:b4:a3:f1:de:f9:28:79:
                    03:27:de:37:ae:fd:12:27:8d:f5:1e:d2:a2:5e:f5:
                    2b:a1:5c:7b:2f:6a:e7:1c:d0:13:9c:31:27:81:33:
                    e2:67:76:9e:d6:5a:6c:6a:7c:1e:72:09:ad:9f:02:
                    3e:f2:a6:b7:a9:6d:31:18:17:c2:a7:34:70:40:1c:
                    e6:0d:8e:cb:e8:b3:eb:82:b1:ff:3c:da:bc:a0:db:
                    be:21:c2:d3:7f:b8:68:34:ff:64:33:0b:fa:1e:f4:
                    47:73:de:fb:54:f3:35:1f:73:bc:c6:fd:8e:b3:00:
                    cb:06:6a:6e:83:a2:d6:6d:1c:14:04:5e:ac:c0:01:
                    6c:73:b9:54:21:06:b6:38:2a:e3:75:1d:36:4c:ba:
                    9b:9d:b2:ac:d2:52:3b:3b:21:25:c1:6a:d4:6a:46:
                    14:5b:ad:83:2b:ad:10:c0:4f:66:76:7c:2c:63:10:
                    e2:85:b8:f2:aa:b9:d0:5d:7f:0a:80:81:e7:97:ac:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E6:18:2E:A5:FC:4D:96:AE:5F:8A:66:10:35:A0:ED:C1:5A:A0:24
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a383030303a3a2f33332d3333203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:bf:e3:08:07:33:dd:24:6c:7f:6d:69:5d:1b:cb:28:f1:20:
         b9:ac:b1:57:c4:23:97:f0:d4:47:c7:f1:ae:83:f5:2b:ab:f7:
         27:3f:75:de:43:7d:00:32:29:91:06:a9:4b:36:e7:3d:50:c0:
         25:3d:ae:c6:28:3c:91:95:dc:cc:ee:9a:c7:14:00:ce:bf:f9:
         e7:e4:11:4d:fa:e7:8a:23:e2:34:cb:df:66:37:86:e8:fb:1a:
         2a:71:b4:d4:e0:6d:98:5a:80:4f:22:bc:b3:e7:d6:6c:17:65:
         52:97:c3:a3:0f:79:03:9d:8c:c5:47:42:0f:af:49:b1:a2:85:
         bc:1d:43:8f:ed:7d:0e:3a:e0:96:e5:9a:af:f4:53:53:c5:4c:
         5b:85:f5:2e:1e:5e:dc:80:48:e1:f0:26:53:a1:64:ac:e3:d3:
         78:ba:d0:24:68:60:02:8f:a1:5b:31:9f:99:21:32:66:49:ab:
         08:a0:7f:94:8b:76:8f:94:03:cf:46:07:d9:7e:88:e3:4b:59:
         4b:90:49:28:c0:44:12:57:d5:d5:38:11:b9:26:ef:87:06:db:
         74:46:16:65:99:aa:0a:dd:04:74:9a:49:9a:3a:a4:83:37:43:
         f0:82:f0:af:70:b7:2a:e1:b0:cc:7c:94:6a:27:d1:19:dc:31:
         f9:f8:bc:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org