Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232302e302f32322d3234203d3e20323632373733.roa
File:                     3133312e3235352e3232302e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          j9a20LVD9veLn0Aw6rxi6/JCLYL2HKO6ArLYehNmS6g=
Subject key identifier:   E4:BD:CB:AF:61:AF:70:53:A7:1E:C3:87:0E:C7:57:FC:78:25:F3:0F
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1E515DE6AD048334284CBED834B230EFC78F2BB0
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232302e302f32322d3234203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:48 +0000
ROA not before:           Tue 19 Mar 2024 21:48:48 +0000
ROA not after:            Tue 18 Mar 2025 21:53:48 +0000
asID:                     262773
IP address blocks:        131.255.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:51:5d:e6:ad:04:83:34:28:4c:be:d8:34:b2:30:ef:c7:8f:2b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:48 2024 GMT
            Not After : Mar 18 21:53:48 2025 GMT
        Subject: CN=E4BDCBAF61AF7053A71EC3870EC757FC7825F30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:b2:ce:1e:26:5d:1a:aa:2d:c1:94:87:ff:
                    9d:62:10:aa:fe:8a:8e:6f:1d:0d:cb:a3:2f:a4:cc:
                    7c:4c:5f:e1:c6:8c:01:15:71:0c:59:35:39:a6:26:
                    7c:84:c1:e6:49:30:32:b2:9d:63:50:3e:4b:f5:b7:
                    5d:00:c9:cb:06:ff:15:fd:b5:ab:73:78:dd:8a:c4:
                    36:34:13:89:8b:2e:2b:bd:c4:22:ae:64:b8:3c:92:
                    c2:c7:e9:29:d8:86:42:0f:17:3b:c7:8f:db:a0:ab:
                    bd:a4:7a:ea:5f:f3:a0:50:54:4b:17:4d:2f:95:1f:
                    e7:74:c5:f1:a1:39:1f:06:46:0b:c0:17:d7:e7:33:
                    27:ba:58:62:bb:1b:19:15:b5:47:a8:7e:e8:af:37:
                    d3:86:98:68:7d:9d:8e:30:5e:99:27:51:6e:fb:12:
                    21:6e:86:37:43:a1:2e:c7:5f:8d:bd:98:f5:e3:b2:
                    54:75:37:fa:eb:a5:f3:a0:d2:87:23:d6:f0:9e:d6:
                    f0:43:61:da:e4:54:04:e1:67:9a:32:f2:93:b8:a9:
                    ab:83:29:93:5c:a9:ea:94:ff:5b:ce:2b:99:d9:d9:
                    10:6e:ab:f7:e3:2f:fa:02:91:01:2e:62:c3:72:d1:
                    b0:4e:cb:3a:d8:92:87:d3:dc:37:cc:06:42:e2:fa:
                    6e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BD:CB:AF:61:AF:70:53:A7:1E:C3:87:0E:C7:57:FC:78:25:F3:0F
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232302e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:f9:fc:33:1b:d4:f7:3f:55:bc:3c:e2:0a:60:f8:6b:50:23:
         81:3f:1c:93:8b:a5:82:05:5e:cd:92:67:70:ab:50:eb:67:bb:
         9b:e1:84:c8:ab:a7:2a:fe:35:77:63:39:4a:8d:43:ef:7f:ae:
         14:98:2c:2f:76:a9:51:05:d6:ed:6a:04:f8:7f:1a:97:00:11:
         d0:a4:4f:62:5b:1b:91:d7:99:59:fc:89:da:c0:2d:ac:44:02:
         51:b1:93:57:45:27:67:d1:05:20:60:ea:85:03:b2:ff:2c:b5:
         5e:24:66:42:b6:aa:84:37:da:1a:7c:75:e2:7b:4f:4b:17:d8:
         9a:5f:eb:f5:bc:fe:64:ac:e3:f0:43:25:3c:2c:8a:9e:23:e7:
         0a:be:5f:9d:40:99:fd:3b:6c:07:8f:6d:83:db:7c:ec:32:75:
         53:b3:cb:93:c8:e6:da:67:cd:90:0f:a8:df:93:85:f6:ca:67:
         ce:17:75:8e:32:11:df:ff:71:e8:c1:fa:f1:03:6d:34:51:df:
         27:11:f5:23:00:b5:0f:b1:77:4a:61:87:44:2c:64:af:09:c7:
         bb:11:ea:61:7c:f4:fa:63:22:8f:4c:03:fa:bc:44:05:4a:bd:
         aa:af:fa:42:70:c9:d3:e7:43:f9:86:a4:92:94:da:d7:60:0b:
         6c:57:dd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org