Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a633030303a3a2f33342d3334203d3e20323632373733.roa
File:                     323830343a3966383a633030303a3a2f33342d3334203d3e20323632373733.roa (raw, json)
Hash identifier:          ah8lgO9Kc/DRSgl+aGwT60YYth5wp7mdMlOw0SNRFa4=
Subject key identifier:   83:61:C6:36:95:A8:D7:33:B5:4D:87:C4:37:E8:87:39:34:D3:A2:B5
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       6ED1D307DC47B877724C2FFCD870DCF77FEE7F29
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a633030303a3a2f33342d3334203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:19 +0000
ROA not before:           Tue 27 Sep 2022 19:14:19 +0000
ROA not after:            Tue 26 Sep 2023 19:19:19 +0000
asID:                     262773
IP address blocks:        2804:9f8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d1:d3:07:dc:47:b8:77:72:4c:2f:fc:d8:70:dc:f7:7f:ee:7f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:19 2022 GMT
            Not After : Sep 26 19:19:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:da:33:99:03:79:70:ef:e7:a6:3e:84:f3:30:
                    41:a7:35:7b:00:7a:3f:2f:ac:16:dd:f6:6c:e2:6f:
                    68:e3:94:33:bc:77:6b:de:7f:e0:57:d1:32:ab:3b:
                    d7:3b:1a:1d:1d:d3:a3:de:fa:ac:c2:58:6a:ad:97:
                    7a:1b:d2:eb:29:f4:c0:5d:3a:f8:a3:0e:81:78:69:
                    4c:c1:fc:af:5c:41:9e:c3:d6:d7:a5:5f:89:12:f0:
                    6a:9d:f3:ac:21:87:54:1f:ee:5f:b6:eb:a0:01:35:
                    85:45:55:c4:b1:68:dc:5a:36:4c:26:71:d1:23:a8:
                    86:56:df:5e:75:3c:45:03:37:bf:f1:d2:e9:a7:99:
                    64:9e:68:aa:58:4e:38:ea:c3:77:51:29:a4:86:dc:
                    29:8b:0f:f7:2d:ac:fc:ac:d3:a7:ce:6b:51:da:37:
                    f7:0f:b9:7c:87:fb:80:f1:ee:91:60:d3:bc:5c:81:
                    69:c0:93:9c:74:a7:bf:d0:9b:ee:10:37:5d:42:05:
                    af:9e:8e:8d:a3:c1:ce:af:2c:4d:4d:aa:90:66:91:
                    73:5e:d3:19:84:52:13:2c:34:66:b5:36:e8:48:a9:
                    d0:8c:f0:9a:cf:e9:ea:a1:f3:ce:f2:11:93:7b:25:
                    db:17:4f:0d:df:43:08:c0:3e:5d:99:be:a1:22:97:
                    75:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:61:C6:36:95:A8:D7:33:B5:4D:87:C4:37:E8:87:39:34:D3:A2:B5
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a633030303a3a2f33342d3334203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b3:f5:68:4b:56:a4:a4:f6:85:ef:00:1a:62:d2:c3:c2:c5:91:
         3e:bb:f2:79:5d:3a:22:e6:99:f8:fa:68:ec:6e:29:95:7c:60:
         e5:ac:97:3b:a0:ca:b2:8e:6d:23:21:e7:6f:b0:c9:91:36:99:
         f3:2b:0e:77:a1:7b:3b:c5:91:54:60:1c:0b:fc:e2:43:d5:60:
         d8:56:80:6e:5f:69:e6:bc:4a:8b:32:4d:78:98:4e:42:09:2b:
         3a:49:af:7a:de:59:e9:ea:a2:64:7a:8c:5e:02:dc:91:73:d4:
         31:a8:6d:27:7c:32:33:17:38:3c:60:4d:5d:03:41:cb:40:4a:
         d0:3c:aa:0e:b5:59:26:97:26:0a:e0:8a:73:96:8f:b8:53:98:
         95:bd:ef:53:4b:50:c2:be:64:c5:14:af:ce:96:2f:12:8f:61:
         0e:87:86:e7:4f:90:dc:eb:8e:27:1f:e9:30:eb:80:ec:47:ed:
         9c:1d:c4:d3:77:41:03:45:54:3b:e7:71:55:cc:9e:3a:8a:2d:
         d3:29:49:cc:48:16:12:48:b7:72:2a:4f:91:9b:b4:01:a2:c2:
         5f:d9:e3:50:66:2d:33:cd:71:fe:31:83:d0:91:a3:e4:7e:67:
         99:be:5e:2b:dd:4d:59:9c:12:5c:b1:a0:e9:88:75:66:51:85:
         38:8a:7c:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org