Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32322d3233203d3e20323632373733.roa
File:                     3133382e33362e3137362e302f32322d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          t7/qKkUf3wpHDokmGq+OB8HUkp8fVsPEzrs8WJjl90g=
Subject key identifier:   37:D2:7F:21:DF:1D:58:DE:35:63:72:28:25:DA:ED:FA:2B:23:DE:DD
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       184A9F763B32A0AD14F497166174FFF886887686
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32322d3233203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:50 +0000
ROA not before:           Tue 19 Mar 2024 21:48:50 +0000
ROA not after:            Tue 18 Mar 2025 21:53:50 +0000
asID:                     262773
IP address blocks:        138.36.176.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4a:9f:76:3b:32:a0:ad:14:f4:97:16:61:74:ff:f8:86:88:76:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:50 2024 GMT
            Not After : Mar 18 21:53:50 2025 GMT
        Subject: CN=37D27F21DF1D58DE3563722825DAEDFA2B23DEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:65:28:f4:33:2b:21:4d:96:06:eb:95:65:
                    81:26:64:ee:f2:ff:70:c3:61:ed:83:07:67:5f:32:
                    72:b3:e0:01:e1:68:21:6a:62:c6:54:4f:33:42:04:
                    8e:1d:42:14:37:27:f8:df:94:8f:21:4f:15:11:b1:
                    81:55:50:d6:4e:f3:11:9a:c5:4c:bb:18:ff:eb:31:
                    b4:3c:03:e2:92:7c:aa:b6:32:f4:b8:9c:a7:1c:7a:
                    a5:ab:40:1e:33:6b:af:d0:d3:67:f7:ad:74:8e:5a:
                    6c:3a:84:8f:b3:57:cd:4a:85:4a:d7:eb:11:a0:e0:
                    31:b3:ce:7b:1d:ec:af:3c:e1:7b:09:c0:57:1c:96:
                    f4:b8:1d:3f:51:7e:ba:28:11:0a:ea:62:a0:b9:7e:
                    16:a9:9c:6b:f4:04:17:e1:7d:1d:a6:1a:68:41:5f:
                    13:0c:04:19:8c:b4:cb:67:0f:49:1e:d9:20:0a:54:
                    2a:10:ba:bd:fe:05:36:f0:8f:4c:af:ed:ec:61:f4:
                    c7:04:74:44:a5:31:00:35:24:15:bf:a8:47:2d:e7:
                    5f:cf:8a:4c:71:6b:ab:e6:d0:d5:11:58:83:b1:03:
                    32:84:d6:29:5b:5b:f9:09:93:f5:07:a0:5f:2e:fc:
                    24:21:04:6a:6d:b0:f8:0c:a6:e8:4e:81:af:ff:ba:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D2:7F:21:DF:1D:58:DE:35:63:72:28:25:DA:ED:FA:2B:23:DE:DD
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32322d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:b4:50:2c:61:75:1d:92:ca:31:b3:81:f6:08:8e:3d:e4:60:
         f0:af:25:cd:18:35:38:22:2e:be:3b:d3:5c:75:6a:2b:2a:26:
         e0:78:b2:eb:e7:04:f1:73:39:ae:73:b1:b8:3f:0c:06:9e:f6:
         40:fb:67:5d:4a:05:46:e6:df:1b:b0:f5:b5:34:0e:26:e5:90:
         cf:06:fe:ff:27:f4:dd:a6:14:fe:95:0a:2e:5c:33:98:62:40:
         59:51:6a:7b:a1:31:9e:34:3d:44:f1:b4:0d:d0:55:d5:4d:10:
         f0:a5:df:e7:2b:42:06:d5:6d:56:c9:7d:94:ff:41:68:9e:65:
         53:5b:01:ab:bf:69:f2:b5:a1:a5:34:bb:5e:f8:2b:42:22:f4:
         76:3f:6d:8f:e7:f8:3d:4f:b8:7e:70:48:31:18:af:bf:06:f7:
         2a:87:1a:69:fe:54:9c:26:b3:36:ba:38:15:40:a8:8c:49:29:
         4d:bb:2f:ec:c0:22:88:99:75:a5:7b:61:35:51:a8:b7:1c:ff:
         16:86:50:c7:2d:96:18:f5:c3:e7:57:cc:0c:33:ba:eb:45:a3:
         37:3a:ff:b6:8b:a0:b9:e3:53:37:38:f0:85:03:db:37:bd:df:
         eb:22:34:f9:59:45:7d:bd:fb:64:87:29:4f:b1:0b:90:1f:27:
         da:85:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org