Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232332e302f32342d3234203d3e20323632373733.roa
File:                     3133312e3235352e3232332e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          t7xVLq0spUzhjdUWbomVYAQhXsTn9tQAqtNU9HBjoYI=
Subject key identifier:   BB:2D:76:C2:E7:61:62:FA:33:2C:EB:AF:5A:AA:7A:24:1C:C9:C6:F5
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1FFA777CD179B86CA4CF09993F130D169DBB7556
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232332e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:27 +0000
ROA not before:           Tue 27 Sep 2022 19:14:27 +0000
ROA not after:            Tue 26 Sep 2023 19:19:27 +0000
asID:                     262773
IP address blocks:        131.255.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fa:77:7c:d1:79:b8:6c:a4:cf:09:99:3f:13:0d:16:9d:bb:75:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:27 2022 GMT
            Not After : Sep 26 19:19:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:33:3d:26:9a:f1:ef:f5:0d:10:17:aa:9c:
                    6c:87:e6:91:43:88:ff:17:d2:29:37:a0:8f:e7:9e:
                    06:3e:4c:8a:ca:3d:37:79:bd:9a:23:5a:11:6f:db:
                    30:35:7e:5b:e1:0f:c8:01:f7:7d:e2:83:1b:c3:bc:
                    72:d4:57:95:90:05:2a:7e:ac:d9:68:47:3a:25:fd:
                    e9:a2:5c:89:75:35:e8:5c:fb:b6:ea:12:06:48:99:
                    7b:9f:5c:78:ee:fc:cd:35:d6:cd:4d:a4:a2:63:7c:
                    a3:a3:4d:5d:1a:28:74:b5:1a:a8:a5:47:d1:6f:a0:
                    82:29:f8:23:3a:ef:3b:f9:7f:a5:5d:cb:a3:a7:d4:
                    3d:cb:44:ba:78:24:ab:57:24:77:83:74:dc:8e:d9:
                    a1:5e:53:35:b5:97:1f:e5:1c:b2:f5:c1:4f:fd:33:
                    cb:3c:a9:5a:09:5a:7b:6d:eb:6b:30:78:13:a9:44:
                    e8:d1:6d:ec:8f:31:1a:a1:1f:bd:9d:b9:91:75:95:
                    61:e2:b5:1e:95:4b:3d:97:ea:f5:b1:97:1c:1f:59:
                    80:5e:28:1c:52:10:9c:80:ff:09:c8:d4:7f:5c:37:
                    ef:e5:a8:88:b7:20:b1:58:f6:28:8c:f5:c1:18:de:
                    d7:52:13:04:88:f2:55:c4:77:dc:a4:9c:4c:6f:bd:
                    52:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2D:76:C2:E7:61:62:FA:33:2C:EB:AF:5A:AA:7A:24:1C:C9:C6:F5
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133312e3235352e3232332e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:26:b7:49:f4:ac:38:13:f2:62:bd:ba:f1:e7:1e:1b:e6:3c:
         b6:9c:c8:60:f9:77:5f:76:61:95:1c:5e:0b:d9:51:64:9e:3c:
         ee:9c:a6:e5:1a:7f:e4:1b:be:c8:58:34:66:9b:0a:d9:6f:d7:
         3a:54:a5:c5:df:a8:7a:37:88:b2:79:fd:2f:74:32:73:ec:ce:
         e3:e5:70:08:9b:87:ac:a6:7b:f5:5d:1f:f9:3c:b5:e8:27:7e:
         a0:da:b4:10:95:46:6d:17:54:4b:4c:1c:01:67:45:ec:7d:e1:
         d5:be:99:d9:bb:23:a3:ff:d0:b1:0e:98:b4:64:45:ad:ae:2e:
         c6:48:63:9c:0c:7d:47:c9:5b:45:3e:9e:a2:ff:27:65:dc:79:
         29:af:23:21:8f:8c:76:31:ef:9b:1e:3e:28:94:fc:16:42:e7:
         14:65:03:58:45:8b:ca:b0:b5:6f:38:80:c2:9a:13:29:ef:cf:
         17:79:a5:cc:e2:95:4e:6c:8e:ef:6d:35:1e:31:0e:d7:04:8a:
         09:21:54:45:c1:1d:86:87:21:22:a3:19:68:ba:84:89:91:44:
         0f:de:aa:c3:39:10:4b:83:21:02:6f:a6:ab:99:64:09:e8:71:
         c8:00:ac:44:1d:85:17:a5:ab:f9:6d:51:51:5e:7f:20:2d:78:
         1f:ad:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org