Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32322d3232203d3e203532353638.roa
File:                     3133382e33362e3137362e302f32322d3232203d3e203532353638.roa (raw, json)
Hash identifier:          J3Y7CsKzdEd/anDBxJQrg/Mp6AajF+ZMAAWRhP0oqyU=
Subject key identifier:   78:77:93:BA:69:F4:47:6C:0E:6D:71:D2:FE:F5:D1:17:B7:DE:9D:87
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       75F9777F08058EDC77DE682E14618872914B89CD
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32322d3232203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:11 +0000
ROA not before:           Tue 07 Feb 2023 19:59:11 +0000
ROA not after:            Tue 06 Feb 2024 20:04:11 +0000
asID:                     52568
IP address blocks:        138.36.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f9:77:7f:08:05:8e:dc:77:de:68:2e:14:61:88:72:91:4b:89:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:11 2023 GMT
            Not After : Feb  6 20:04:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:6b:a6:23:fe:7a:8d:fd:54:0b:75:76:46:
                    45:fc:44:17:b4:8c:d0:90:7b:63:cd:07:3c:03:e4:
                    e3:cd:f8:e3:8d:04:77:c4:af:55:ed:82:08:c1:29:
                    7d:38:c2:4c:ba:de:68:21:b6:6c:91:55:ce:97:4d:
                    9c:7a:5c:9e:37:d8:24:b1:8f:6d:6a:81:f5:f8:ef:
                    b0:04:f2:9c:33:9e:ee:fd:3e:1e:e3:9a:c3:9d:17:
                    9b:01:83:78:7d:be:dc:f4:86:f4:e3:5c:a3:4f:78:
                    e9:16:1b:d6:ff:58:42:e5:03:7b:89:cb:2b:1d:c8:
                    e4:b3:ea:13:61:cd:ed:33:bb:29:4d:fb:91:ac:fd:
                    0d:ec:fc:88:1d:2f:9f:7d:d1:fe:6c:98:de:b7:af:
                    46:08:37:94:d1:5e:d5:8d:9c:fd:cb:a5:13:a9:a1:
                    5e:b9:3c:bb:93:36:d9:ef:d6:1d:c0:49:2f:5e:83:
                    c3:4c:f1:68:46:ad:e8:ca:6a:e5:99:94:70:00:f2:
                    de:cf:4b:e2:31:69:89:a7:3b:ae:eb:67:65:f0:f7:
                    a2:4b:77:8b:4b:a7:42:e7:de:c6:0a:f5:73:7b:ea:
                    4c:bf:ce:53:42:cd:2a:ab:79:71:cb:d1:a1:3d:c2:
                    51:f8:fa:01:77:e0:22:14:5f:11:2c:f0:cb:86:e4:
                    38:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:77:93:BA:69:F4:47:6C:0E:6D:71:D2:FE:F5:D1:17:B7:DE:9D:87
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32322d3232203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:4e:d6:10:5f:27:a7:69:5f:c3:1f:e0:6b:3f:c8:33:34:b8:
         2f:1d:39:57:b3:8f:82:2b:7d:84:fa:66:25:32:15:81:04:b4:
         fb:a1:00:05:b0:9b:99:b5:d2:5a:91:cb:12:a8:e4:48:b4:21:
         2f:b8:72:01:69:3f:7e:ac:25:d6:a1:e5:97:35:3a:2a:ff:60:
         e5:4b:52:7d:5f:97:35:27:b6:e8:b4:4b:fd:a9:7b:7d:c1:47:
         32:13:64:6a:45:64:72:b3:7a:18:37:e0:24:d0:48:c0:e0:c0:
         ce:76:a0:6d:f2:6b:8c:c4:df:af:f1:6b:ec:dd:b3:8e:07:dd:
         c9:7d:80:92:93:eb:40:06:7e:e0:f3:a3:d8:11:42:da:bc:07:
         46:00:95:c5:23:33:ef:2c:ce:87:0b:a5:c1:03:3c:a6:36:b4:
         0e:19:70:52:21:2b:32:86:cf:7f:13:9d:b6:ef:22:bb:e7:83:
         10:ba:45:77:0d:d9:b2:e1:cd:59:30:dc:54:11:0f:21:5d:70:
         8b:33:f7:d6:15:9f:fd:09:11:c6:0c:fb:ea:12:4d:8d:8d:11:
         c1:21:51:db:e2:ba:37:63:b1:29:32:79:f1:b6:42:ce:4b:c5:
         f3:29:50:88:e4:f3:31:d0:c7:8d:41:64:72:06:b2:d9:d1:0c:
         c0:ed:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org