Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37382e302f32342d3234203d3e20323632373733.roa
File:                     3133382e3132322e37382e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          sQi5k3Nroup2JNdmMHwZYInYTg/wvoG3vd6E4SxBn98=
Subject key identifier:   46:A2:F5:44:78:7B:7D:26:3D:3A:2D:43:1F:92:78:89:CD:7C:AA:62
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       516B03340C317F08AAA9254FB109C252C544B0F5
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37382e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:26 +0000
ROA not before:           Tue 27 Sep 2022 19:14:26 +0000
ROA not after:            Tue 26 Sep 2023 19:19:26 +0000
asID:                     262773
IP address blocks:        138.122.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:6b:03:34:0c:31:7f:08:aa:a9:25:4f:b1:09:c2:52:c5:44:b0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:26 2022 GMT
            Not After : Sep 26 19:19:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:a3:e5:12:9c:d3:f7:ad:6e:fd:73:bb:91:
                    47:a9:3c:98:69:90:cd:30:6e:c1:81:3c:f7:8a:7c:
                    1e:48:21:01:08:c2:41:6b:bd:10:47:c8:cc:3a:74:
                    0d:22:94:dc:e0:c5:44:f7:92:b7:20:83:e3:d9:ec:
                    17:5b:18:20:e0:72:aa:70:74:16:8d:bc:7c:d4:a7:
                    19:e6:b3:18:c2:cf:7d:74:82:50:65:51:8c:c9:57:
                    16:c8:3d:1b:ce:6a:b2:35:fd:29:d7:74:f1:05:ae:
                    1e:d2:ce:48:35:51:8f:78:a9:6c:16:e9:20:7b:9b:
                    4d:26:76:d1:5b:ee:40:4b:49:9f:7b:18:23:43:0f:
                    85:a5:82:fe:74:85:69:43:47:73:0f:43:17:dc:07:
                    8e:24:81:38:13:be:b5:59:2b:c7:89:02:f0:ce:8f:
                    de:8f:13:db:19:74:0c:51:06:e1:5e:33:fb:88:e0:
                    7d:b3:0e:2c:07:f2:ae:62:75:43:d1:3d:07:75:53:
                    85:95:39:d9:5f:b9:bd:4f:32:22:df:73:e5:76:e0:
                    0e:82:94:dd:16:80:79:ed:48:73:79:08:24:a5:c2:
                    76:8a:a1:2f:9e:d3:4c:31:f2:c3:27:f7:3f:62:9d:
                    f0:db:99:41:ea:0f:a2:9e:22:49:8c:64:c8:32:43:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A2:F5:44:78:7B:7D:26:3D:3A:2D:43:1F:92:78:89:CD:7C:AA:62
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37382e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:93:b0:01:dc:5f:a8:9e:a7:f5:36:50:63:7a:0e:b5:0d:80:
         f9:3a:6a:28:19:74:b6:37:cc:ff:1b:9f:01:cc:bc:bb:d3:1e:
         8b:a6:23:4a:47:f9:16:ab:ea:8e:90:e5:ab:cb:6e:a4:65:e8:
         30:4a:74:c4:a1:1f:77:55:e7:9d:64:a6:93:ef:16:cf:00:05:
         32:93:dc:ff:c1:b1:c8:30:05:f0:24:02:e2:36:3f:d2:bc:89:
         14:72:ec:b0:9c:50:ac:84:9c:fa:be:10:e2:dc:08:62:bf:4f:
         da:73:45:76:b2:cf:97:bf:87:21:71:68:0c:6b:c6:a2:32:6b:
         28:8f:76:bd:ee:b9:e4:60:c8:e3:09:be:1c:5c:4e:2d:d7:24:
         df:fc:33:7c:20:1f:6f:50:b9:ce:8f:d5:32:91:d2:49:37:65:
         ee:b3:15:44:f3:b1:82:59:73:10:5d:5c:1a:0d:1c:bd:15:95:
         06:29:45:4d:d8:15:85:3f:43:1b:f7:56:e3:e5:05:07:22:0a:
         09:37:37:67:c3:77:e7:88:8d:00:5f:db:01:3e:c7:88:1b:2f:
         e5:55:cb:fd:d9:a0:28:39:b6:8f:61:e0:b5:b9:ca:a1:0a:ce:
         d9:08:d9:e4:dc:2e:eb:a7:51:4c:57:d2:07:1f:b1:80:9a:ad:
         ba:f2:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org