Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f33342d3334203d3e20323632373733.roa
File:                     323830343a3966383a3a2f33342d3334203d3e20323632373733.roa (raw, json)
Hash identifier:          8tCwUC4aR8JIw1fMg8p8IKIxiBGSRenk44L0IBJivQw=
Subject key identifier:   29:A4:48:1E:5A:6F:42:8D:6F:14:D6:F5:43:17:4D:3D:6D:08:8E:B0
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       04093DA45855292D83BBC154906642AFCEA14B1D
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f33342d3334203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:29 +0000
ROA not before:           Tue 27 Sep 2022 19:14:29 +0000
ROA not after:            Tue 26 Sep 2023 19:19:29 +0000
asID:                     262773
IP address blocks:        2804:9f8::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:3d:a4:58:55:29:2d:83:bb:c1:54:90:66:42:af:ce:a1:4b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:29 2022 GMT
            Not After : Sep 26 19:19:29 2023 GMT
        Subject: CN=3082010A0282010100D8D054E0B3EBE1AD26F9E30767C1DA84A8715657BFBAF2C6D1491FB2299701BA43E3A8F52BA07253AFA8701A9952E7587C47CAEEF39EAA5FDE610357F0B6C20528325FB67486B6C87BC422A638E54A708D3BA5F39CAA89CF8EAF23C62BE0C6AC06D859CC88265F154DF5490F0D34BEE08B8C8EAFE44418E5E3A8A72867DFD5BAA7F71203B5DD89F47FB0D3F83D575A7AD35C8EB166C2E4CF8AC9D5090666F5CEC4AA1AC1DFCB1BC5B9F8DA814CA9A92F177C55AEAB7C66272DE0E208AA0B29BFF6BA2721506997D14854E1259E9AE2AB6D06EEC2D813335C3674D85000B3D20F6199670AB51A99529CB094377E8109B404D9ED3E1940AC75A6D34ABE2926BD190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d0:54:e0:b3:eb:e1:ad:26:f9:e3:07:67:c1:
                    da:84:a8:71:56:57:bf:ba:f2:c6:d1:49:1f:b2:29:
                    97:01:ba:43:e3:a8:f5:2b:a0:72:53:af:a8:70:1a:
                    99:52:e7:58:7c:47:ca:ee:f3:9e:aa:5f:de:61:03:
                    57:f0:b6:c2:05:28:32:5f:b6:74:86:b6:c8:7b:c4:
                    22:a6:38:e5:4a:70:8d:3b:a5:f3:9c:aa:89:cf:8e:
                    af:23:c6:2b:e0:c6:ac:06:d8:59:cc:88:26:5f:15:
                    4d:f5:49:0f:0d:34:be:e0:8b:8c:8e:af:e4:44:18:
                    e5:e3:a8:a7:28:67:df:d5:ba:a7:f7:12:03:b5:dd:
                    89:f4:7f:b0:d3:f8:3d:57:5a:7a:d3:5c:8e:b1:66:
                    c2:e4:cf:8a:c9:d5:09:06:66:f5:ce:c4:aa:1a:c1:
                    df:cb:1b:c5:b9:f8:da:81:4c:a9:a9:2f:17:7c:55:
                    ae:ab:7c:66:27:2d:e0:e2:08:aa:0b:29:bf:f6:ba:
                    27:21:50:69:97:d1:48:54:e1:25:9e:9a:e2:ab:6d:
                    06:ee:c2:d8:13:33:5c:36:74:d8:50:00:b3:d2:0f:
                    61:99:67:0a:b5:1a:99:52:9c:b0:94:37:7e:81:09:
                    b4:04:d9:ed:3e:19:40:ac:75:a6:d3:4a:be:29:26:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A4:48:1E:5A:6F:42:8D:6F:14:D6:F5:43:17:4D:3D:6D:08:8E:B0
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f33342d3334203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8::/34

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:05:8a:87:32:aa:55:7d:34:bf:91:37:7e:9a:0a:ab:63:
         a2:ff:64:d3:ec:bd:13:2d:57:eb:52:8c:bb:a5:4c:92:73:b3:
         24:24:ef:56:05:91:02:0e:9c:b8:44:a1:3f:75:9a:b0:11:da:
         cb:8a:01:03:c7:23:c9:ed:e3:78:69:09:89:3b:00:fa:a0:4f:
         16:d5:0a:9c:70:2a:ce:c7:6c:47:c1:b9:44:f8:7d:9d:0b:ce:
         97:5a:6e:ea:e7:ca:26:5c:a7:e1:05:5a:18:c1:46:9e:3a:48:
         7c:25:7a:f9:8c:12:0a:be:10:a2:53:92:96:ed:bc:40:34:63:
         f0:f9:fb:bd:b5:4d:bd:ec:03:b3:75:21:82:01:48:e7:5b:0a:
         d5:cd:64:8f:42:bb:2c:11:9d:68:70:0a:8e:ca:20:fb:61:5a:
         77:2e:66:51:d8:4c:7c:e5:0b:5b:01:bc:d1:08:74:0f:51:8a:
         69:6b:68:32:1f:eb:cb:32:44:59:02:0f:39:03:f4:09:ce:dc:
         4d:72:98:e2:bd:05:b6:55:4b:40:53:d2:88:cf:4b:a2:01:2c:
         cb:0d:59:4e:41:b2:da:ae:6d:f1:de:aa:ff:12:ea:09:92:dc:
         0b:62:7c:47:2c:3e:24:74:98:18:c0:42:a4:99:37:e9:92:22:
         e5:d6:21:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org