Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232302e302f32322d3232203d3e20323632373733.roa
File:                     3133312e3235352e3232302e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          fWcdrJxzPKlpB2I/mzgeK6vSbjNkKVTKAuVyK4zhkq0=
Subject key identifier:   0F:E9:34:23:58:B7:F5:F0:D2:D2:B9:F7:FC:4E:BB:2D:84:79:93:9C
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       5217CC29E265846FD5C55DEEA58236C28D28008E
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232302e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:32 +0000
ROA not before:           Tue 27 Sep 2022 19:14:32 +0000
ROA not after:            Tue 26 Sep 2023 19:19:32 +0000
asID:                     262773
IP address blocks:        131.255.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:17:cc:29:e2:65:84:6f:d5:c5:5d:ee:a5:82:36:c2:8d:28:00:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:32 2022 GMT
            Not After : Sep 26 19:19:32 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:0a:64:f3:c8:7f:bc:d5:b5:b4:c4:43:36:
                    96:84:62:dc:76:43:a8:ca:42:b2:3f:35:ef:22:9a:
                    b4:5c:2d:2a:70:a6:86:8b:b2:9d:a3:31:6b:47:13:
                    aa:fe:6d:9c:9c:fb:7a:fc:fc:b0:41:4c:1d:2b:38:
                    64:dc:70:b6:a4:c5:29:58:90:66:e5:1f:cd:a8:15:
                    68:ee:8f:7d:e4:f8:d2:86:7b:30:d1:f6:f4:4f:95:
                    e6:79:e3:2e:02:3d:eb:d0:de:fb:27:93:37:b8:bf:
                    41:2e:29:57:e5:28:80:3d:ce:c6:30:97:77:ac:ab:
                    0f:58:c0:e3:7e:c3:0e:6a:57:35:94:89:70:44:5f:
                    72:1c:06:0c:0f:3e:b5:10:a8:b3:8b:c3:3f:dd:98:
                    7b:ab:d1:c6:31:ba:2a:d6:b8:b4:00:91:17:43:95:
                    39:75:9a:4c:a9:06:93:fb:7a:f4:6f:1f:ef:ce:77:
                    e6:f9:96:69:83:41:4b:5d:c0:c6:b0:9b:4f:d9:31:
                    3a:c1:3e:41:70:98:d6:51:ff:31:57:55:19:1d:fb:
                    6e:c3:65:77:e7:e2:3e:07:a0:14:22:58:57:55:67:
                    d9:1a:7e:de:e8:6b:68:6d:8f:78:fa:31:cb:dd:56:
                    5d:58:d1:ec:fa:0a:82:45:94:8b:dd:43:43:3d:cb:
                    2b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E9:34:23:58:B7:F5:F0:D2:D2:B9:F7:FC:4E:BB:2D:84:79:93:9C
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232302e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:ae:5d:2e:3b:3d:8a:3b:de:2e:b9:fb:b1:c7:f9:79:ae:1b:
         d9:91:a1:8e:07:cb:0a:a5:a3:b8:8a:c1:49:be:d8:60:92:44:
         66:5b:32:d3:98:c1:8d:1f:ac:b5:26:a1:f4:aa:44:cb:96:a4:
         b1:91:3f:5c:f5:ab:cd:91:25:39:31:dd:bc:a6:d8:10:72:69:
         b0:6b:5e:ca:78:28:0e:d0:12:09:46:62:15:fb:6f:1b:92:17:
         6b:73:43:25:03:6f:5d:62:25:41:f9:37:83:23:cc:a6:9f:c9:
         cc:81:64:3f:f9:c5:a8:73:37:f0:92:e9:71:ad:dc:c7:2e:14:
         73:4b:88:d0:7c:fb:cc:51:eb:60:73:87:73:21:ad:85:5f:a2:
         b2:66:3c:35:6e:de:fe:c4:e7:04:72:26:d6:06:80:2c:2a:33:
         d9:11:88:87:e8:13:5a:a5:e6:b8:0f:11:45:fa:8c:98:7f:67:
         61:03:91:86:1b:dc:99:72:9d:40:d9:a9:f1:93:c6:65:2f:b7:
         0a:0f:be:66:ff:33:36:de:9e:7b:36:7d:2f:b7:52:c7:91:8f:
         1b:37:f7:36:b8:08:f4:cc:ee:bc:d9:1d:0e:3a:7b:86:c0:90:
         0b:4f:fc:0e:a1:a2:9c:58:3e:63:f9:82:49:36:e0:bf:9d:6a:
         0f:32:0a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org