Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232312e302f32342d3234203d3e20323632373733.roa
File:                     3133312e3235352e3232312e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          zYsgbu4MP6qs5YVTIyZ5z9wdre3lcTIGbHHdJtY//vI=
Subject key identifier:   29:45:F1:20:08:F7:F9:64:D9:BD:59:7D:62:4E:98:2C:F9:01:48:2F
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       12D1CFDC1F4025A10FC6009DA8C07351AE4A382F
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232312e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:29 +0000
ROA not before:           Tue 27 Sep 2022 19:14:29 +0000
ROA not after:            Tue 26 Sep 2023 19:19:29 +0000
asID:                     262773
IP address blocks:        131.255.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d1:cf:dc:1f:40:25:a1:0f:c6:00:9d:a8:c0:73:51:ae:4a:38:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:29 2022 GMT
            Not After : Sep 26 19:19:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5d:62:89:39:f0:43:39:5b:42:76:48:82:f9:
                    17:71:a1:b9:5a:65:da:8d:49:d0:3b:94:a3:91:2a:
                    d8:22:a2:56:11:7f:fe:a9:b7:18:1d:9c:ba:0a:06:
                    7f:10:db:76:11:c1:f2:cd:d1:a2:f8:16:97:97:32:
                    c5:50:5c:8e:f7:c2:89:b2:b4:52:d3:9b:91:08:84:
                    3c:75:9c:4a:09:db:6b:dc:95:85:eb:c5:02:21:15:
                    1c:9d:d1:5c:9d:04:3c:dd:3d:a2:11:10:2c:70:45:
                    34:98:19:85:a6:07:c6:f5:41:73:cd:7e:bc:88:e2:
                    b5:42:ec:10:0b:bc:d6:9a:f4:6e:c5:9e:90:cb:6b:
                    b6:03:7e:cd:36:2c:8e:0d:f9:93:8a:f3:63:2c:59:
                    fa:c3:18:14:d0:e6:8f:cf:ea:03:ea:44:a9:45:9d:
                    9b:d7:7f:9f:74:bb:0b:51:aa:f2:86:5f:e8:f9:dc:
                    12:11:d3:55:7f:f2:39:04:21:88:0b:15:54:89:2e:
                    27:20:bc:6f:b5:e8:56:5f:6d:c7:15:45:63:03:70:
                    0d:79:2d:46:70:8d:c9:ff:6f:1d:0f:80:a3:52:6d:
                    fe:9b:b8:47:25:75:f9:3f:02:d1:9f:1e:e8:34:d1:
                    21:ac:f0:26:18:30:74:86:1e:31:92:63:58:c4:f4:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:45:F1:20:08:F7:F9:64:D9:BD:59:7D:62:4E:98:2C:F9:01:48:2F
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232312e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:76:a4:eb:13:b4:84:57:40:7c:0d:6d:10:bc:a3:b8:d1:
         36:72:38:da:01:81:6d:33:10:ec:a8:ce:64:b7:94:4b:1e:ff:
         ac:1b:ae:10:6b:fe:b6:c1:46:bd:ba:91:6e:9b:f3:8d:d8:bb:
         15:41:da:61:f3:91:49:42:33:b6:ad:09:c1:45:4b:ff:e0:16:
         fb:ec:46:86:b0:6f:b4:87:83:8d:79:7f:53:be:bd:88:75:60:
         36:58:72:fb:fa:b3:64:75:40:03:9d:f3:bc:35:8d:db:d6:f8:
         ae:93:c1:26:5b:02:a8:39:1e:1f:09:23:89:3c:d9:e7:2f:bb:
         0c:5b:31:6d:45:71:49:98:07:39:65:2a:99:e6:6b:11:30:8c:
         66:4d:e4:34:b0:25:1a:ef:cc:ed:0a:e5:47:51:dd:8e:1d:e7:
         b9:14:99:b0:58:7a:7c:b2:b6:7f:19:47:54:c9:df:2a:06:d0:
         c0:b0:1b:7b:a7:a7:61:77:d1:6e:86:64:ed:2f:bc:d7:a0:1e:
         71:2d:74:a6:b4:b7:68:25:92:22:77:84:70:8b:ec:b5:b0:d5:
         7e:04:9c:6b:12:ee:68:b3:79:5f:3e:38:28:aa:41:9e:1d:0a:
         98:53:ec:3d:ed:6e:0e:35:37:7c:5d:eb:9b:f7:4c:ee:5f:19:
         1e:26:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org