Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37362e302f32342d3234203d3e20323632373733.roa
File:                     3133382e3132322e37362e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          ffg/yBVlEPIajq3IGe3bjUX7HQK5AJ4m5neSvQIkCUQ=
Subject key identifier:   7F:66:56:07:BF:E0:C1:4D:4D:DD:66:D9:FE:87:41:AF:9E:78:23:89
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       7EF458CE826FCAB2280BB6A62EAF5955136FBAF6
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37362e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:31 +0000
ROA not before:           Tue 27 Sep 2022 19:14:31 +0000
ROA not after:            Tue 26 Sep 2023 19:19:31 +0000
asID:                     262773
IP address blocks:        138.122.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f4:58:ce:82:6f:ca:b2:28:0b:b6:a6:2e:af:59:55:13:6f:ba:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:31 2022 GMT
            Not After : Sep 26 19:19:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:91:8d:8e:b8:8c:13:b1:75:46:1a:35:3a:ff:
                    b3:ee:a3:03:35:a6:42:46:9f:13:a9:f9:59:66:7f:
                    5d:8d:d5:0a:8a:54:a9:13:d7:a1:5b:61:a3:a9:d9:
                    96:a7:c9:83:f7:38:d8:54:b0:2a:6e:d2:c4:12:ff:
                    0c:ea:1a:51:f1:52:31:af:d4:29:88:ab:15:4c:29:
                    63:d0:33:ff:6b:b1:e4:fc:68:4f:89:0d:a3:cf:67:
                    6a:84:9b:a1:46:ea:c5:7b:6b:1c:65:73:bb:1e:e1:
                    b8:65:51:74:f0:a2:5d:fa:ee:57:88:21:39:48:63:
                    65:23:38:3e:92:50:50:c1:9c:7e:06:e2:02:29:c5:
                    e5:88:10:4c:59:cd:46:a0:a7:ff:5b:0f:73:ae:e2:
                    63:c5:f3:46:05:a9:02:7d:8c:8f:b6:be:7d:8b:9e:
                    f8:33:df:02:66:da:68:2c:68:81:d6:23:c4:22:68:
                    ee:55:c4:f5:8b:98:36:4b:d0:e6:ce:94:26:c9:2e:
                    e7:82:80:4f:0a:ea:d7:f1:bf:41:0f:8d:35:45:95:
                    4f:10:1d:25:fb:ec:b8:87:b9:af:d7:a9:f3:3a:dc:
                    4a:cb:05:42:20:48:a9:f6:e5:4e:58:40:42:c5:4f:
                    84:fb:39:b9:b2:7d:bd:8b:98:51:08:12:21:93:7f:
                    f6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:66:56:07:BF:E0:C1:4D:4D:DD:66:D9:FE:87:41:AF:9E:78:23:89
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37362e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e7:72:10:27:cf:6e:69:00:47:28:ea:f1:3c:3f:f6:aa:ea:
         63:57:42:b8:de:1c:c2:69:9f:df:97:02:6b:49:37:a6:fd:5a:
         82:65:b0:01:9d:5a:ab:5c:ee:0f:92:bd:8f:7b:32:1a:e5:d5:
         79:78:e1:4c:a8:57:01:d8:02:02:d6:19:3d:7c:79:e1:19:f5:
         4b:c4:70:bc:39:16:8f:2b:fb:89:8e:50:f2:a8:86:cf:37:13:
         d3:29:dc:a3:b3:96:10:05:21:68:78:40:9f:2e:06:f1:dd:29:
         bb:e1:66:2f:e7:6d:ae:26:9e:52:49:8b:fd:17:ea:66:73:2d:
         c9:e1:8c:6c:71:4b:99:4e:56:6e:41:42:ec:16:a4:f5:65:4b:
         2c:6b:4d:1a:80:ec:dd:9b:79:b3:84:27:5b:43:00:25:ed:1e:
         17:56:33:a6:93:42:23:0f:46:fe:6d:19:55:0d:7f:77:71:e3:
         26:27:5e:46:ab:6d:46:de:0d:03:47:41:a7:1c:88:38:66:a1:
         a8:64:c5:95:9c:8b:a9:03:02:0d:e4:cc:37:d3:f4:e1:6a:b2:
         1d:fb:52:97:bb:13:5b:68:ed:d5:aa:40:a2:98:80:ce:fc:ff:
         99:5c:5e:a2:8b:02:a2:3d:13:24:6d:ac:7f:08:bb:3b:b4:63:
         d3:f8:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org