Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a383030303a3a2f33342d3334203d3e20323632373733.roa
File:                     323830343a3966383a383030303a3a2f33342d3334203d3e20323632373733.roa (raw, json)
Hash identifier:          i2yltCMpfCENO98oXd2vL2Bcdx+//e8NSKOXsy9TZ8I=
Subject key identifier:   89:9B:DB:69:34:5B:B9:60:01:5C:90:E7:77:C5:DE:60:46:EA:78:C3
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       6483C92CB6F2A760E7272E050CD30EE84EED9142
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a383030303a3a2f33342d3334203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:32 +0000
ROA not before:           Tue 27 Sep 2022 19:14:32 +0000
ROA not after:            Tue 26 Sep 2023 19:19:32 +0000
asID:                     262773
IP address blocks:        2804:9f8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:83:c9:2c:b6:f2:a7:60:e7:27:2e:05:0c:d3:0e:e8:4e:ed:91:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:32 2022 GMT
            Not After : Sep 26 19:19:32 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:86:60:3e:a4:18:86:10:1d:71:b4:20:d1:
                    bf:57:bd:a2:8b:be:9d:60:dc:60:19:f5:e0:2a:15:
                    e5:d2:2d:7d:06:19:2b:6d:2a:d6:bf:f8:b5:fb:04:
                    3f:a4:91:48:a2:c9:61:90:33:ef:d7:f4:ed:65:0f:
                    3e:2d:37:31:0d:f8:90:67:6d:72:20:17:d8:95:ea:
                    73:ca:62:df:27:2d:86:13:ce:be:6e:fe:4d:86:56:
                    2d:d4:bb:99:68:11:c6:32:9e:da:7a:a3:ed:10:06:
                    4e:20:15:c1:ca:d5:15:6b:43:83:8b:29:61:1c:d2:
                    8e:12:4b:2a:34:3a:4d:47:f2:2c:43:a5:17:92:6c:
                    04:15:6b:37:da:d7:bb:cf:9e:05:b0:58:8b:c6:c2:
                    5e:31:67:e6:5d:84:0d:0c:ae:bd:8e:f2:12:c8:a0:
                    4f:1d:61:78:8b:78:8c:0a:91:66:40:d3:a1:b4:f7:
                    1c:f4:e0:df:dd:ee:56:dd:95:df:b1:7e:3a:0f:92:
                    e8:77:17:6b:0a:b3:6a:72:de:69:84:8d:35:50:66:
                    43:03:d2:a1:8e:b3:38:3a:55:5b:02:3a:07:5e:e7:
                    62:d9:07:f0:19:5c:9f:f9:47:d5:fd:ba:54:cc:fa:
                    e4:65:5f:bc:05:65:52:78:fc:5f:d3:8b:72:db:32:
                    83:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9B:DB:69:34:5B:B9:60:01:5C:90:E7:77:C5:DE:60:46:EA:78:C3
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a383030303a3a2f33342d3334203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         83:35:ac:95:8c:50:60:bd:43:b6:75:3e:8e:cd:d5:f8:14:e8:
         7f:5f:37:bf:6c:c8:68:2b:6f:64:4b:e6:62:c0:b7:90:4e:c0:
         13:b5:a3:08:cf:cf:d6:3f:34:7f:01:ae:46:74:92:89:7c:a4:
         85:f2:ab:68:67:51:58:5f:d9:34:17:02:e0:48:c0:a8:78:db:
         c0:5a:12:d2:56:ee:45:e9:41:1b:4f:4c:4e:c9:c8:d3:ae:32:
         17:ac:86:f3:0a:8d:f3:40:d2:fe:ef:dc:7f:32:76:74:28:fc:
         12:3a:6e:51:54:d1:93:96:ce:3b:2b:6b:72:53:e5:70:ab:ed:
         6b:d5:35:7b:9c:6a:4e:23:13:43:0f:e4:3b:d8:e7:3e:0a:ff:
         67:16:7a:53:cd:55:6a:89:2c:c1:92:fe:7d:4b:04:ee:21:6c:
         0a:ed:a8:d4:c1:8e:56:a1:4c:f3:71:50:31:b9:3a:e4:b3:31:
         86:01:5c:97:a2:06:8c:e1:d1:53:5c:92:98:15:b4:b4:8e:3c:
         78:cb:c7:0e:88:6a:9d:3e:8a:a3:f0:b6:34:83:fb:b2:5a:e6:
         c4:72:92:ef:7b:d4:d3:29:46:ea:51:4f:39:2f:42:e9:c1:ac:
         f0:4d:c0:09:a5:fb:88:5e:35:2e:e7:cb:bc:61:28:30:a0:a0:
         58:31:2d:fa
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUZIPJLLbyp2DnJy4FDNMO6E7tkUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA5MjcxOTE0MzJaFw0yMzA5MjYxOTE5MzJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjlGODg2NjAzRUE0MTg4NjEw
MUQ3MUI0MjBEMUJGNTdCREEyOEJCRTlENjBEQzYwMTlGNUUwMkExNUU1RDIyRDdE
MDYxOTJCNkQyQUQ2QkZGOEI1RkIwNDNGQTQ5MTQ4QTJDOTYxOTAzM0VGRDdGNEVE
NjUwRjNFMkQzNzMxMERGODkwNjc2RDcyMjAxN0Q4OTVFQTczQ0E2MkRGMjcyRDg2
MTNDRUJFNkVGRTREODY1NjJERDRCQjk5NjgxMUM2MzI5RURBN0FBM0VEMTAwNjRF
MjAxNUMxQ0FENTE1NkI0MzgzOEIyOTYxMUNEMjhFMTI0QjJBMzQzQTRENDdGMjJD
NDNBNTE3OTI2QzA0MTU2QjM3REFEN0JCQ0Y5RTA1QjA1ODhCQzZDMjVFMzE2N0U2
NUQ4NDBEMENBRUJEOEVGMjEyQzhBMDRGMUQ2MTc4OEI3ODhDMEE5MTY2NDBEM0Ex
QjRGNzFDRjRFMERGRERFRTU2REQ5NURGQjE3RTNBMEY5MkU4NzcxNzZCMEFCMzZB
NzJERTY5ODQ4RDM1NTA2NjQzMDNEMkExOEVCMzM4M0E1NTVCMDIzQTA3NUVFNzYy
RDkwN0YwMTk1QzlGRjk0N0Q1RkRCQTU0Q0NGQUU0NjU1RkJDMDU2NTUyNzhGQzVG
RDM4QjcyREIzMjgzMzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAufiGYD6kGIYQHXG0ING/V72ii76dYNxgGfXgKhXl0i19BhkrbSrW
v/i1+wQ/pJFIoslhkDPv1/TtZQ8+LTcxDfiQZ21yIBfYlepzymLfJy2GE86+bv5N
hlYt1LuZaBHGMp7aeqPtEAZOIBXBytUVa0ODiylhHNKOEksqNDpNR/IsQ6UXkmwE
FWs32te7z54FsFiLxsJeMWfmXYQNDK69jvISyKBPHWF4i3iMCpFmQNOhtPcc9ODf
3e5W3ZXfsX46D5LodxdrCrNqct5phI01UGZDA9KhjrM4OlVbAjoHXudi2QfwGVyf
+UfV/bpUzPrkZV+8BWVSePxf04ty2zKDMwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FImb22k0W7lgAVyQ53fF3mBG6njDMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMyMzgzMDM0M2EzOTY2MzgzYTM4
MzAzMDMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYGKAQJ+IAwDQYJKoZIhvcNAQELBQADggEBAIM1rJWMUGC9Q7Z1Po7N1fgU
6H9fN79syGgrb2RL5mLAt5BOwBO1owjPz9Y/NH8BrkZ0kol8pIXyq2hnUVhf2TQX
AuBIwKh428BaEtJW7kXpQRtPTE7JyNOuMheshvMKjfNA0v7v3H8ydnQo/BI6blFU
0ZOWzjsra3JT5XCr7WvVNXucak4jE0MP5DvY5z4K/2cWelPNVWqJLMGS/n1LBO4h
bArtqNTBjlahTPNxUDG5OuSzMYYBXJeiBozh0VNckpgVtLSOPHjLxw6Iap0+iqPw
tjSD+7Ja5sRyku971NMpRupRTzkvQunBrPBNwAml+4heNS7ny7xhKDCgoFgxLfo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org