Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32332d3233203d3e203532353638.roa
File:                     3133382e33362e3137362e302f32332d3233203d3e203532353638.roa (raw, json)
Hash identifier:          vxkLnk848LfFtghr1djYiKvznUJ7hWGnlIDDyTMMfCs=
Subject key identifier:   4F:4A:DD:93:0B:FE:90:5A:9A:70:01:19:C3:B9:AD:D2:DF:E5:32:5A
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       603A1177A0EDBA93FA2D82B8A3B78E7CDFFD8A9D
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32332d3233203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:11 +0000
ROA not before:           Tue 07 Feb 2023 19:59:11 +0000
ROA not after:            Tue 06 Feb 2024 20:04:11 +0000
asID:                     52568
IP address blocks:        138.36.176.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3a:11:77:a0:ed:ba:93:fa:2d:82:b8:a3:b7:8e:7c:df:fd:8a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:11 2023 GMT
            Not After : Feb  6 20:04:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:82:61:c4:a9:45:ad:56:07:ed:b7:9f:01:
                    a1:64:24:5a:15:f1:fa:d9:2e:0c:58:a9:d3:d5:d3:
                    b5:2f:6d:07:d8:bf:b0:1d:2e:68:67:98:25:4b:83:
                    2f:45:26:a3:5d:c1:66:b5:69:8c:25:23:35:f1:8b:
                    a8:d1:cd:b3:0e:00:34:9d:09:29:d8:5d:92:f8:bd:
                    d2:ce:3d:37:61:50:96:19:73:5d:26:9d:b6:45:de:
                    31:13:24:6a:71:38:3a:9c:4e:cd:86:c1:73:ab:1c:
                    b8:39:6f:7b:ca:c9:5e:93:d1:5c:d9:b8:59:6c:cc:
                    de:a1:d3:de:f5:42:d0:12:81:9b:7c:8b:a2:a4:50:
                    19:60:2c:e0:d5:59:ca:9b:0e:e6:6d:25:74:8f:0f:
                    20:c9:5e:35:1c:27:3a:a5:58:ac:5f:0f:88:d2:58:
                    fb:b4:d1:76:7a:b6:c3:19:2a:9b:0d:66:b5:0f:e6:
                    26:af:1a:ac:bf:cf:eb:2f:6c:fd:03:14:90:5c:f3:
                    87:83:1d:c9:ca:41:9b:c4:2c:bc:1c:79:9a:90:2c:
                    4d:66:c0:27:e9:45:87:2f:58:39:47:ac:97:87:94:
                    59:c8:7b:a8:ed:ff:a0:c0:29:66:4c:a6:14:41:65:
                    d9:8d:40:b2:9d:17:2c:04:e6:3b:24:d2:82:a7:ef:
                    65:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4A:DD:93:0B:FE:90:5A:9A:70:01:19:C3:B9:AD:D2:DF:E5:32:5A
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137362e302f32332d3233203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:44:d5:bc:3a:8c:3a:9c:fa:c8:59:fb:28:21:51:36:2f:cd:
         84:9f:5c:89:5e:b3:77:be:04:84:f0:9c:51:c5:5d:77:64:6b:
         bd:f8:88:d6:66:7e:2d:62:ab:f0:a4:5f:df:7c:67:59:d7:1a:
         bb:5f:31:b4:a9:31:ef:75:22:45:eb:d5:fe:d4:e3:93:0e:b9:
         6e:29:17:1d:07:61:55:d6:7a:bc:cb:61:9f:77:0c:c9:1f:f5:
         22:c8:45:3d:9e:71:08:da:64:08:d5:c5:e7:59:71:47:56:a0:
         ec:c5:d3:67:37:ea:18:a0:6c:b8:06:77:68:d4:91:df:b0:cb:
         b5:99:8e:5d:bd:83:05:b4:90:5d:ba:ef:21:54:88:87:bd:56:
         91:2a:5f:3f:a2:94:d9:30:5f:4f:3d:f7:19:7b:0e:8e:8d:b4:
         c5:1f:7f:0e:e9:8c:e6:21:5c:14:6d:cc:84:96:82:a8:76:21:
         a2:48:ba:5c:90:4e:16:20:82:c7:6f:72:77:23:33:5f:37:6d:
         9e:ad:1e:8f:94:ff:82:b1:7b:e1:25:1b:a3:56:54:b2:34:ee:
         a9:f5:75:c5:ae:76:3e:61:32:39:83:e4:bf:5c:04:97:67:4b:
         e2:a1:c9:4a:85:e5:c9:33:7f:30:57:00:28:c8:9c:bb:8b:f3:
         aa:87:86:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org