Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37392e302f32342d3234203d3e20323632373733.roa
File:                     3133382e3132322e37392e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          +LMfW3RbMZB960xbjtzXDQVsJAcB49HZrbZnt1jAhPE=
Subject key identifier:   2E:6B:8A:EB:CD:43:03:F2:6D:03:81:18:01:39:01:1F:22:76:D8:B9
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1D3BF2284B1CB00C4D5E7F5FDDB5D8067E9A670F
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37392e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:34 +0000
ROA not before:           Tue 27 Sep 2022 19:14:34 +0000
ROA not after:            Tue 26 Sep 2023 19:19:34 +0000
asID:                     262773
IP address blocks:        138.122.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3b:f2:28:4b:1c:b0:0c:4d:5e:7f:5f:dd:b5:d8:06:7e:9a:67:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:34 2022 GMT
            Not After : Sep 26 19:19:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1c:07:4c:39:c6:b7:87:69:30:20:91:81:61:
                    37:6e:58:f8:c0:66:ab:66:5f:01:49:a3:f0:ad:49:
                    3c:20:14:86:b5:0d:1b:8b:1a:d5:f3:ab:37:a9:c9:
                    54:27:f8:b7:6c:94:bd:42:9d:9a:e7:40:af:79:22:
                    3c:21:66:9c:91:a4:18:73:87:38:a8:24:8b:56:b9:
                    6f:a3:25:ae:05:da:19:be:17:45:3d:de:cb:ca:1e:
                    ab:cf:8b:01:7b:62:70:41:ce:f6:4d:f7:c4:73:02:
                    36:72:ee:bd:d7:f3:34:6d:6e:59:50:ef:72:e9:af:
                    d1:2f:0f:26:07:91:0f:a3:c3:38:cf:fe:53:aa:f7:
                    3c:96:c5:a3:20:76:f1:93:e7:83:15:24:ef:51:93:
                    84:70:13:44:2f:0f:19:e4:57:b3:80:a1:ca:84:74:
                    22:f2:5f:b0:fe:12:b4:90:1e:b7:bc:68:57:03:48:
                    5d:0a:b1:da:5c:f6:8b:3d:9e:4c:fb:12:90:67:a6:
                    be:90:d7:f2:51:20:db:b8:6d:9b:62:c2:fb:b0:5f:
                    c3:34:c0:ea:e9:be:22:40:c9:92:39:e2:38:0a:3a:
                    b2:27:0c:c3:e2:85:f7:d9:d5:26:10:dc:21:99:3c:
                    fd:96:71:ed:eb:f0:59:1b:c5:1d:d6:bb:e5:3b:b0:
                    8d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6B:8A:EB:CD:43:03:F2:6D:03:81:18:01:39:01:1F:22:76:D8:B9
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37392e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:76:66:78:02:c1:a1:31:26:ce:d3:13:fe:4e:6d:44:96:02:
         ef:86:dd:75:3e:e5:af:c8:e0:01:73:5e:87:24:bc:c1:c2:28:
         03:7c:21:f8:fc:8a:9d:5b:c5:b0:db:4f:db:c4:b5:72:60:7c:
         87:37:4b:0b:89:4f:a8:7a:40:23:bd:56:09:c9:12:df:6a:cc:
         b5:b2:93:80:5d:a7:da:8c:73:6c:db:59:0c:50:69:65:78:bf:
         f4:74:0c:e9:20:66:53:3d:91:3c:ee:bf:1c:b3:b7:1b:fb:29:
         55:e9:08:27:e9:29:42:c0:10:25:ef:32:88:d3:22:a1:40:b4:
         cf:15:e8:ae:7d:01:54:dd:77:c7:f3:ee:88:a7:ff:df:18:69:
         87:73:f0:96:62:90:d4:81:97:69:f8:f1:ec:c3:b0:a5:8c:c8:
         af:10:cb:a0:04:72:72:08:4e:52:a4:ab:42:5f:76:ba:53:fb:
         07:2d:28:86:b4:78:dd:8d:cd:0b:de:dc:4d:54:84:53:91:3b:
         85:28:4f:83:b7:99:3f:06:97:bb:f4:b0:02:b6:a6:05:4a:78:
         21:56:1c:34:53:55:61:7f:88:c3:9e:7e:0b:ce:3b:ff:c3:0e:
         3d:8a:98:27:4b:ba:4b:01:10:e0:f8:35:1d:cf:5e:ed:ec:ab:
         8c:85:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org