Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37362e302f32322d3232203d3e20323632373733.roa
File:                     3133382e3132322e37362e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          QYCBqUOmUDdlU9qHFVCMV/HFq9vUpU+jPsrKuUu1xy4=
Subject key identifier:   D4:78:52:75:29:EF:87:B6:37:86:99:70:03:53:65:49:15:D7:80:BD
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       644B1644E6018E48EE92D596E8270F451880D8D8
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37362e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:31 +0000
ROA not before:           Tue 27 Sep 2022 19:14:31 +0000
ROA not after:            Tue 26 Sep 2023 19:19:31 +0000
asID:                     262773
IP address blocks:        138.122.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4b:16:44:e6:01:8e:48:ee:92:d5:96:e8:27:0f:45:18:80:d8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:31 2022 GMT
            Not After : Sep 26 19:19:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:73:b9:e6:cb:69:dd:39:b5:38:8b:65:68:
                    a6:2c:cc:59:37:6e:97:d9:b2:dd:bd:aa:18:a5:c8:
                    d5:40:7d:96:0b:6c:f1:64:59:8b:59:14:6f:d8:aa:
                    2d:3e:7e:27:8e:75:b9:e2:da:f3:18:d3:46:97:f2:
                    1d:bf:24:7e:dd:49:64:eb:9b:18:d8:27:ee:85:50:
                    bc:64:ca:93:09:e0:27:5e:ca:94:a1:ab:07:ca:24:
                    1a:ac:bc:5b:ba:b0:60:69:e5:f8:0b:09:e9:2a:55:
                    04:4f:4f:9c:5b:d8:31:7f:45:54:b0:64:b5:bd:6b:
                    73:f1:21:a7:4a:6f:79:39:a1:65:e4:c8:fb:d5:49:
                    61:f7:53:9f:d5:65:b2:e3:6a:b3:1b:3c:c1:61:34:
                    03:14:33:83:32:bf:7f:23:c3:65:fe:f4:29:eb:f7:
                    87:9a:e9:e4:b5:7b:3e:2b:80:29:a0:ac:35:d9:48:
                    58:9c:73:9b:1a:54:dd:b3:a4:af:88:48:95:d3:68:
                    f1:92:c6:9e:ea:84:44:69:27:82:90:b2:a7:22:48:
                    07:d7:c3:6a:1f:d9:e8:d9:29:88:c0:33:b5:d7:93:
                    fc:b5:33:d5:5c:f0:0e:eb:2d:bd:d7:a5:18:dd:c8:
                    a9:09:65:64:32:82:60:f0:d3:11:65:72:ff:d3:3b:
                    79:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:78:52:75:29:EF:87:B6:37:86:99:70:03:53:65:49:15:D7:80:BD
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37362e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:f9:7c:1a:fe:d4:d0:cd:9d:ba:6b:ae:8d:f8:f9:94:f3:7f:
         1c:30:c4:f5:62:cd:88:48:e5:73:7f:92:b7:c5:d4:b3:f2:ec:
         c4:01:84:e4:a9:bc:77:6d:93:76:bd:dc:1e:8f:68:3f:e1:a5:
         a2:e4:de:73:bb:83:4c:ba:2d:b2:97:92:bf:e9:53:5f:da:d7:
         c7:36:73:49:7f:f1:68:31:a8:4e:23:ec:49:e2:38:43:5a:b7:
         1d:d6:19:b7:1f:10:53:2e:a4:3e:b8:05:aa:08:07:67:13:ac:
         8c:30:3b:f9:d0:48:39:cc:ef:92:a3:e5:b0:4c:44:82:ce:be:
         3e:e4:79:84:a6:45:f0:db:da:55:86:75:ed:dc:c7:21:28:0c:
         b3:e2:08:27:58:b5:bb:40:25:a5:fb:89:cc:5f:ef:71:9f:52:
         19:44:ba:6e:51:72:60:d7:5c:80:ce:bd:d9:13:8d:2d:20:75:
         38:f9:a0:18:21:c9:60:29:a7:b1:9d:0a:a7:85:04:ab:ca:1e:
         86:6e:25:f6:2f:3a:a1:aa:94:43:56:b7:9b:55:3d:b6:38:4a:
         00:23:5e:e0:90:d5:30:7f:63:1d:36:54:d3:33:c8:0f:55:bf:
         b4:04:b1:3f:e7:1d:42:3e:4c:7f:e7:95:f4:7a:e3:df:33:83:
         d7:9c:7d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org