Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32322d3232203d3e20323632373733.roa
File:                     3133382e33362e3137362e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          GlAZ9/xXlbhQjHbY82BDQ4CLKhpN2qKDY+eJlSfIhk8=
Subject key identifier:   01:18:DB:1D:0B:52:C8:70:A4:13:92:48:A0:D7:B7:EE:0E:55:26:F4
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       44FD32F7A99393AE600A1616AA71766B1EDCCD0E
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32322d3232203d3e20323632373733.roa
Signing time:             Thu 09 Feb 2023 07:06:54 +0000
ROA not before:           Thu 09 Feb 2023 07:01:54 +0000
ROA not after:            Thu 08 Feb 2024 07:06:54 +0000
asID:                     262773
IP address blocks:        138.36.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fd:32:f7:a9:93:93:ae:60:0a:16:16:aa:71:76:6b:1e:dc:cd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  9 07:01:54 2023 GMT
            Not After : Feb  8 07:06:54 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:36:dc:a8:3f:51:ee:4b:d8:56:a5:ed:51:
                    c0:c4:15:60:2a:d4:dd:cd:75:10:38:b5:6a:87:c5:
                    68:f1:ae:fe:4d:c1:5d:11:d2:50:06:df:e7:cf:8c:
                    d3:8c:9f:ef:fb:53:0f:68:f2:6f:a1:2b:98:94:44:
                    c7:0e:03:7c:dd:f3:03:33:fa:dd:cb:37:49:06:63:
                    b6:db:14:ff:d5:4a:49:df:1e:92:09:90:34:fc:0e:
                    c0:3a:9d:e8:09:4e:a2:83:3b:24:3d:69:56:9c:7f:
                    88:24:05:76:6e:29:81:11:04:e4:fc:bd:71:6d:30:
                    56:77:3c:aa:9d:85:a9:aa:f1:c7:83:ea:04:b2:b1:
                    fe:85:0c:e0:a0:69:cb:b7:8f:3c:dd:52:cd:9d:91:
                    3b:1e:34:48:86:1d:9f:26:b0:a3:21:f0:3d:57:34:
                    be:54:97:eb:7e:70:e4:9d:7e:10:9e:36:2f:39:28:
                    e4:ac:47:e7:a1:bd:b8:5e:83:27:37:38:18:44:f2:
                    6b:a4:0a:cb:5f:93:82:e6:56:e2:92:2e:26:2b:a2:
                    58:ed:ae:9a:54:28:6b:56:1b:9b:4d:ed:01:47:64:
                    a4:20:45:b5:d7:4a:4e:ae:a6:33:7d:53:bb:85:18:
                    88:47:2a:a8:be:f6:e3:35:a8:bf:3f:3f:aa:a2:fe:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:18:DB:1D:0B:52:C8:70:A4:13:92:48:A0:D7:B7:EE:0E:55:26:F4
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:1b:f3:bd:b8:24:37:9b:54:c5:52:72:c0:03:8b:f2:f5:cb:
         32:4f:67:b1:38:d1:ed:a8:ce:51:cd:b7:79:33:9e:a1:fe:a5:
         d0:61:1d:d1:9f:bb:d6:da:3a:0e:2f:28:b7:c5:44:7a:07:d6:
         56:7f:d6:df:38:e2:f3:f7:79:0f:67:d2:24:b0:71:25:e7:74:
         98:e5:36:25:e8:6e:d2:e3:d6:ed:b0:8d:73:5d:e3:27:a7:d8:
         a7:e8:3e:42:ca:a4:db:3e:0b:01:1f:31:26:5a:59:6f:92:39:
         8f:a1:a6:55:c9:0d:ea:cf:bd:4f:cc:c6:20:b7:16:2a:2d:3a:
         26:88:2c:f6:3d:c5:f6:ba:91:57:cf:6d:b3:89:74:13:07:65:
         c3:62:8e:6e:01:f2:4c:52:84:61:fb:4c:e5:f8:29:31:63:90:
         fa:2a:34:87:d4:2d:22:b9:57:c2:e2:d6:9e:3d:97:4f:c0:9f:
         10:34:f6:7f:c3:69:03:92:c2:66:5a:73:cb:16:34:c7:44:ca:
         87:82:e8:30:74:47:63:6d:db:78:ad:e9:a4:9e:41:08:b2:6c:
         0e:55:a5:5f:ce:4d:3e:28:be:ee:25:f6:f0:96:37:31:0f:e3:
         4a:75:8a:92:f5:54:ca:f6:34:f6:d3:9d:85:1d:be:cd:67:5f:
         2f:91:97:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org