Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f33322d3334203d3e20323632373733.roa
File:                     323830343a3966383a3a2f33322d3334203d3e20323632373733.roa (raw, json)
Hash identifier:          1tDuWzd6bBZyEfQ3OJx+XcsgzxMy2gcix3YFidfQvoE=
Subject key identifier:   22:F1:62:9B:A4:FA:1B:1B:BB:BB:51:53:C4:7D:FF:D7:BB:75:B2:31
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       5942F7AEBE575B6B3F98D403E1EC2A3A7BE5E1E2
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f33322d3334203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:52 +0000
ROA not before:           Tue 19 Mar 2024 21:48:52 +0000
ROA not after:            Tue 18 Mar 2025 21:53:52 +0000
asID:                     262773
IP address blocks:        2804:9f8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:42:f7:ae:be:57:5b:6b:3f:98:d4:03:e1:ec:2a:3a:7b:e5:e1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:52 2024 GMT
            Not After : Mar 18 21:53:52 2025 GMT
        Subject: CN=22F1629BA4FA1B1BBBBB5153C47DFFD7BB75B231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:66:cd:36:ff:c0:f1:fa:9e:24:fa:af:8a:dc:
                    0b:6b:4a:95:ea:1f:e1:e5:7b:10:64:00:64:d5:dd:
                    4d:4a:7e:64:5d:7d:aa:6a:32:c4:d3:e7:6b:1c:4d:
                    fe:dc:aa:2a:bc:88:40:0b:72:f2:c1:8d:f5:2f:47:
                    32:54:ae:a2:65:4d:c3:43:62:60:d0:3b:7a:77:c2:
                    0b:bc:44:61:c8:10:57:8a:ee:cf:cc:37:80:c5:20:
                    1d:c8:18:03:d9:a1:97:24:49:8a:66:9c:eb:eb:70:
                    a4:60:f5:44:22:40:52:0c:b9:a8:1c:2a:62:73:df:
                    cc:ce:fc:9b:22:c4:5b:e6:dd:59:93:ba:03:cc:ab:
                    57:ba:9b:14:3d:35:4f:9b:cd:0e:e6:28:61:4c:d5:
                    4c:2b:b6:fd:45:0e:2f:ac:67:83:56:53:8e:e8:5c:
                    2f:1e:3e:ce:6c:1a:5e:6f:d7:ee:e8:11:9f:c9:4c:
                    4f:cc:c1:d7:95:b9:5c:e4:b1:bc:89:15:37:02:dc:
                    b4:2b:ab:92:42:c6:96:90:fe:85:27:3f:a3:19:57:
                    4c:85:33:e6:a3:21:a2:6d:e7:0a:55:26:53:f5:bb:
                    f2:67:68:4a:f1:bb:1c:1a:4c:28:63:eb:ed:c4:94:
                    ec:62:a1:48:6f:e6:a8:c1:ce:c3:3d:51:95:65:21:
                    da:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F1:62:9B:A4:FA:1B:1B:BB:BB:51:53:C4:7D:FF:D7:BB:75:B2:31
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f33322d3334203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:dc:16:ff:00:2b:ca:e3:03:67:55:3a:cc:38:78:e8:63:9f:
         c4:b4:db:93:08:f8:96:d6:ee:47:cf:72:de:98:47:51:84:90:
         71:9d:a8:05:da:ab:d8:f0:ac:1d:88:38:2b:d5:ba:3b:de:2e:
         b4:39:5e:7a:09:61:0a:7e:07:44:41:bc:61:6b:0a:ce:7f:2d:
         73:21:8f:50:45:a8:ae:f0:0f:9c:f7:a9:2d:e6:c3:65:2e:db:
         37:96:38:6c:cc:0e:8f:25:07:81:29:c9:52:cc:35:fb:da:55:
         92:b8:ae:ca:f7:56:b2:b3:f1:e5:4a:9d:f1:fc:09:26:c9:76:
         d9:94:0c:2a:41:7a:2b:af:40:82:28:1c:3d:e1:72:cb:74:69:
         78:14:bb:97:0e:b5:d8:15:40:a6:5a:a7:a5:59:3b:23:47:8c:
         8a:30:73:0f:57:90:f1:bc:f1:f1:46:27:bf:8e:fa:59:a9:d2:
         17:7a:8f:dd:fe:70:1a:55:71:81:f9:1d:d2:87:8b:81:22:77:
         dc:39:33:14:ef:24:28:b5:15:a8:7a:6b:d0:ec:25:a3:f6:03:
         42:22:ce:84:d8:25:46:00:33:c8:7e:4c:44:0f:ae:16:cf:f1:
         5a:1f:96:3d:ee:06:8c:75:c3:64:5e:29:2a:0b:4d:43:6a:94:
         64:1d:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org