Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232302e302f32342d3234203d3e20323632373733.roa
File:                     3133312e3235352e3232302e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          9P/IeZzpvGHIcWFFE17lvtqgJb8PipM3f3pj0DtZGdo=
Subject key identifier:   AA:E6:23:32:B6:79:B9:4C:86:C6:42:57:35:0B:98:0D:21:7F:96:F6
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       4A50DF9715479A4B7C7C510940F50B6C916EBEB0
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232302e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:23 +0000
ROA not before:           Tue 27 Sep 2022 19:14:23 +0000
ROA not after:            Tue 26 Sep 2023 19:19:23 +0000
asID:                     262773
IP address blocks:        131.255.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:50:df:97:15:47:9a:4b:7c:7c:51:09:40:f5:0b:6c:91:6e:be:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:23 2022 GMT
            Not After : Sep 26 19:19:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:c9:6a:5f:c8:c7:88:40:7a:16:e3:f7:44:
                    90:fc:02:10:9e:e1:96:6f:1b:77:c9:64:68:82:03:
                    6a:34:1a:4c:8d:af:de:0f:b3:03:05:e2:8b:0d:33:
                    58:ed:7d:b0:33:6f:bc:0a:64:9b:e3:e1:a2:41:9b:
                    12:dd:d4:70:a1:57:3d:23:03:9d:61:0e:9c:72:0c:
                    5e:23:0e:f8:82:62:5f:e3:2a:4e:4a:9b:90:a6:9d:
                    0e:59:7a:81:a6:ec:02:59:60:6c:dc:6c:71:41:2f:
                    88:4d:bf:9a:7c:c3:4d:90:04:60:53:99:5a:b2:5d:
                    e1:e5:89:99:c3:06:15:80:c2:65:9b:5c:26:d1:54:
                    fa:17:55:01:75:78:87:5d:3b:03:b0:14:14:20:6b:
                    95:01:78:65:07:1a:1b:64:e5:9b:c5:f4:06:8b:de:
                    e1:90:d7:a8:68:1b:07:66:27:d8:74:db:c7:82:bb:
                    a4:13:17:33:e6:36:3e:7f:b9:6c:ca:8d:5f:0c:db:
                    a9:5d:a1:e8:a4:d0:eb:fb:65:5d:8a:32:cb:40:b7:
                    f8:ba:1a:01:66:dc:5f:ae:72:66:dc:d1:d8:8a:24:
                    e7:c3:b7:5c:28:1a:89:2c:0f:43:0d:f3:1a:ad:27:
                    52:e2:ba:07:66:15:32:9f:32:57:53:d9:aa:75:37:
                    78:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E6:23:32:B6:79:B9:4C:86:C6:42:57:35:0B:98:0D:21:7F:96:F6
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232302e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:69:1f:0e:34:75:3c:ea:df:32:19:9b:7e:9c:da:de:87:cd:
         d8:56:16:41:ca:35:8a:2f:3f:b5:fa:59:11:fd:a8:68:ec:a2:
         83:16:3c:27:83:63:21:a8:35:1b:9c:47:27:3e:7c:60:86:52:
         ab:a8:74:bb:e5:53:dd:30:44:cd:20:53:c9:5f:1d:32:4d:62:
         73:fd:9e:f4:98:eb:b5:be:c8:e0:59:9d:4b:ce:ee:12:d0:66:
         ce:f7:b9:cb:25:9a:31:ad:f8:0a:6c:21:2d:50:38:8a:97:d3:
         ec:7d:f3:6d:da:1e:a1:56:a0:cc:8b:1a:3c:b6:0b:cb:21:74:
         d2:67:0f:54:55:d9:79:55:d9:bf:e2:d7:c0:6d:f0:e3:fe:81:
         a5:a0:58:a2:59:7f:b9:2b:a6:32:7c:da:f1:08:59:b2:25:82:
         78:15:fd:0a:0d:fc:23:8f:42:87:a2:8c:2d:bb:15:e5:06:9d:
         93:34:c8:73:f5:e2:45:e2:67:77:cc:ff:e8:eb:3a:b5:b8:fa:
         e7:5b:0a:58:6d:e3:bd:13:87:b2:8a:8a:28:9d:f7:01:46:7d:
         51:1f:00:f8:c1:94:2a:dd:67:d2:88:d5:79:80:54:52:6a:00:
         31:28:3e:80:4d:f0:39:ba:0d:2c:ea:76:5d:44:51:1a:14:4e:
         54:db:02:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org