Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          MbEUuaLUY5c1mNWA/ij1DPu3gAgC/g4+Pa7fsjNvmN4=
Subject key identifier:   AA:36:D3:07:D5:E0:E0:09:FF:1B:02:DA:4E:2D:97:2A:2F:49:AE:4F
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       4D260AD1F36CE89291F359FF89E7430C3F7D73FC
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:19:23 +0000
ROA not before:           Tue 09 Aug 2022 13:14:23 +0000
ROA not after:            Tue 08 Aug 2023 13:19:23 +0000
asID:                     262773
IP address blocks:        2804:9f8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:26:0a:d1:f3:6c:e8:92:91:f3:59:ff:89:e7:43:0c:3f:7d:73:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:14:23 2022 GMT
            Not After : Aug  8 13:19:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:76:b0:db:9f:08:5f:1b:b7:d1:48:9b:c8:9a:
                    d0:ca:a8:e9:e9:55:d5:ef:2e:50:61:20:0e:32:86:
                    3d:f0:3e:1a:8d:9e:2c:14:62:c9:01:c2:c7:43:3a:
                    b2:29:09:d6:33:6a:ad:19:37:03:f7:e5:43:c6:b6:
                    ca:9d:03:02:de:b9:d0:21:d5:c8:98:07:66:0a:e0:
                    8e:17:fe:00:eb:08:4f:52:91:86:05:d1:10:37:db:
                    15:da:f0:02:98:ce:64:f6:06:9d:a7:6a:4b:94:04:
                    39:32:d9:fa:fc:5e:73:51:af:c2:5d:7b:55:07:01:
                    f6:73:99:05:53:37:05:59:41:c8:19:8e:5f:f6:36:
                    a1:57:69:9a:d8:84:3a:0b:ee:91:6d:c6:08:7c:63:
                    61:33:09:bb:a0:2d:9c:94:49:b1:b4:a7:52:5a:02:
                    8b:b2:0c:d3:67:82:3c:1d:f5:01:0f:88:e4:a5:7f:
                    ea:04:33:fd:3f:b2:23:b5:d3:fb:55:50:29:98:bd:
                    9e:c0:d4:2e:44:7e:82:a7:69:db:6b:e5:88:18:49:
                    0c:64:e2:b7:cb:fc:93:db:1e:58:00:73:15:59:44:
                    59:e6:80:c6:de:48:31:46:38:7e:2f:fe:d8:db:98:
                    3c:c5:ee:ed:08:ff:82:48:34:cf:d6:2e:4f:e9:c0:
                    d3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:36:D3:07:D5:E0:E0:09:FF:1B:02:DA:4E:2D:97:2A:2F:49:AE:4F
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:37:9f:0a:bf:d1:64:57:00:3e:9d:f3:76:a2:1d:29:8e:6d:
         49:61:57:30:3c:65:d4:0e:35:f8:65:d4:70:6d:88:c3:07:5a:
         b5:29:61:d7:aa:ca:50:b5:ad:03:64:db:6a:36:a4:ac:23:21:
         12:2f:19:3f:28:82:73:ca:a3:9f:4a:f9:c0:7a:6c:df:15:55:
         17:85:d6:6b:2b:09:ed:7a:9b:c7:97:95:ab:9d:a0:99:d3:00:
         62:3d:61:22:3a:6d:7e:65:90:48:53:2d:a8:d1:5f:d0:05:d8:
         3c:a9:99:45:a4:54:e5:84:0e:6c:e4:8a:dc:b2:36:86:fc:a8:
         a1:e6:70:c2:b4:ac:44:87:26:93:b0:5d:2f:59:bb:08:37:c8:
         c1:d4:57:24:3d:dd:56:b8:c9:78:7a:2d:a5:39:1a:bf:a3:ed:
         3c:bb:14:03:ea:0b:d5:c1:31:8c:57:c2:4b:38:22:90:17:f2:
         6e:eb:49:4f:09:46:9e:a7:52:20:14:49:1e:8b:1c:00:39:fe:
         b2:94:b9:07:9b:cc:58:98:f3:1e:bb:ea:ca:8a:60:ac:45:f3:
         08:3e:94:e6:c7:ff:d2:47:d6:34:3b:da:96:a1:1c:a1:a0:16:
         9c:09:0d:a4:85:cd:66:0a:bf:60:df:87:18:db:2f:2a:35:f7:
         b7:85:7d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org