Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a6164303a3a2f33322d3332203d3e20323632373733.roa
File:                     323830343a6164303a3a2f33322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          YzjFACpUhJr7ocYaxGNhNJ/skrDfgAYgCc4dR9OS29Y=
Subject key identifier:   8A:C9:CD:E5:64:17:80:6B:15:AA:18:95:B9:58:C6:C8:CB:85:BA:0D
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       13AFC27D14CE1806719B8DA50E9C0C54A1B55FD6
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a6164303a3a2f33322d3332203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:18 +0000
ROA not before:           Tue 27 Sep 2022 19:14:18 +0000
ROA not after:            Tue 26 Sep 2023 19:19:18 +0000
asID:                     262773
IP address blocks:        2804:ad0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:af:c2:7d:14:ce:18:06:71:9b:8d:a5:0e:9c:0c:54:a1:b5:5f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:18 2022 GMT
            Not After : Sep 26 19:19:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:87:84:ff:df:c0:d6:c8:2c:b3:4b:90:e3:02:
                    15:b0:7e:2a:67:a2:e6:80:56:3a:a6:88:bd:c5:de:
                    2c:87:96:9b:33:d9:ac:c0:af:b9:3b:9c:e2:ad:47:
                    81:b8:7c:b1:5d:ef:26:38:1c:bd:4b:b7:8f:1c:cb:
                    13:d3:96:dc:06:3c:0a:4b:c7:fb:09:fa:48:b6:9a:
                    93:f0:80:3e:f6:e5:4a:a8:ff:6b:af:06:33:01:05:
                    32:8d:de:c9:d4:08:4e:71:2d:86:0b:61:63:83:b9:
                    04:0c:1b:a0:8c:6f:76:15:fe:a5:85:2d:47:b2:d3:
                    15:d1:95:c4:70:99:58:b9:52:40:27:57:9f:5e:72:
                    98:58:d8:4c:95:be:c3:7e:e1:54:88:a9:47:23:66:
                    30:83:1b:2f:54:86:8c:2a:09:fa:f9:6b:87:7a:6b:
                    ef:94:c7:f4:81:a3:a7:c6:20:bf:d5:fb:73:c4:44:
                    b3:19:f0:ea:de:1a:b9:69:1f:12:49:3c:69:61:23:
                    e3:64:97:ef:34:79:a4:15:10:18:5f:6a:33:a3:81:
                    53:90:ef:2f:dc:c6:33:5d:73:f6:b6:71:34:41:7c:
                    d2:cf:f4:90:77:b7:33:2b:20:ac:b8:d3:1d:02:39:
                    a4:76:86:38:f3:d6:14:87:47:5b:48:cf:52:b5:b2:
                    ff:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C9:CD:E5:64:17:80:6B:15:AA:18:95:B9:58:C6:C8:CB:85:BA:0D
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a6164303a3a2f33322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad0::/32

    Signature Algorithm: sha256WithRSAEncryption
         de:dd:ed:5d:da:26:b1:0b:87:72:e6:7b:65:ba:19:36:1f:36:
         79:60:52:5b:9d:25:78:9a:39:76:1f:c6:b2:e4:a3:b5:85:05:
         af:63:5f:83:31:23:6a:e9:da:a8:eb:32:07:d9:6c:7e:87:24:
         ac:74:6c:34:f2:b4:0c:fd:a0:1e:86:b8:fb:1d:67:ef:b3:18:
         a5:b0:54:b7:23:be:b6:a2:69:35:24:f6:2d:4f:0b:dd:e9:81:
         3f:39:00:b8:f1:ed:28:a9:a2:c2:db:b7:88:8f:58:95:da:c4:
         1f:ae:12:9d:97:d0:01:76:d4:66:7f:cd:5f:be:8c:3d:7c:9a:
         48:af:a1:1a:1e:ec:ab:88:28:4d:6f:2e:c0:3a:0d:d8:dc:74:
         19:1b:03:77:b2:e0:55:dc:54:e2:d6:7f:1b:55:ce:e0:c2:60:
         42:92:ad:a4:94:99:97:31:18:47:ee:f6:1f:5a:bf:03:37:b8:
         c8:97:13:c6:54:14:40:da:a6:e2:67:97:e5:78:2a:db:49:0b:
         05:ed:4c:bf:8a:40:5e:7f:0c:bf:36:d4:be:cb:16:f3:58:2f:
         10:43:12:ec:c3:fa:c9:8d:8d:2c:f2:eb:ba:ba:cd:b5:a1:d1:
         82:c3:ce:e6:ea:64:7e:71:04:c5:95:88:6e:f8:72:be:0d:6e:
         17:e5:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org