Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137372e302f32342d3234203d3e20323632373733.roa
File:                     3133382e33362e3137372e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          BwrvE+p44+/ZE+vNNvsVGT6nhxf46Ztw2VUd7ZUU/S0=
Subject key identifier:   0A:E1:FF:25:AF:0C:89:BC:57:E5:64:26:02:85:C4:B1:B0:85:38:FC
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       0173F19AF84DBAFC3ECF988433363E18477F7FF1
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137372e302f32342d3234203d3e20323632373733.roa
Signing time:             Thu 09 Feb 2023 06:48:31 +0000
ROA not before:           Thu 09 Feb 2023 06:43:31 +0000
ROA not after:            Thu 08 Feb 2024 06:48:31 +0000
asID:                     262773
IP address blocks:        138.36.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:73:f1:9a:f8:4d:ba:fc:3e:cf:98:84:33:36:3e:18:47:7f:7f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  9 06:43:31 2023 GMT
            Not After : Feb  8 06:48:31 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:44:8f:5a:1e:ac:a9:92:cc:4c:7f:5a:22:
                    f0:77:00:ec:64:e1:0d:8c:2f:9d:ae:4a:9b:8e:02:
                    aa:09:e0:1d:5b:2a:8c:7c:4e:d2:03:45:01:40:1b:
                    96:f5:86:9f:c9:d4:f8:a6:80:13:42:a0:1a:47:7d:
                    c5:ff:f6:b5:cf:1e:a3:a7:dd:60:94:52:e2:78:f0:
                    b3:3d:25:11:d0:46:64:b5:9b:f1:3a:aa:b3:29:15:
                    a0:d7:be:63:08:00:7c:e9:5a:55:0d:f5:ab:ba:82:
                    f4:a2:46:20:f6:89:67:2a:29:99:f1:cd:d8:ec:2f:
                    38:9b:a0:1d:65:95:4b:93:7d:4e:4d:a2:da:13:62:
                    5c:94:6e:c9:6f:d1:ea:07:5d:08:14:45:9f:58:b8:
                    e9:fd:5d:77:61:eb:47:56:73:59:cc:a7:c8:1e:8f:
                    9e:f7:f7:34:15:65:83:19:b9:25:f6:18:d7:86:31:
                    22:87:ae:61:7d:34:37:83:e3:4b:ec:cb:66:f6:4e:
                    50:4c:48:3a:62:d2:4a:f5:24:92:b6:73:dd:f5:32:
                    73:70:e5:27:98:76:84:fb:e5:ed:3e:f6:33:5a:5b:
                    a9:ad:3c:5b:1e:0c:f7:dc:c0:6f:e0:fc:81:97:0a:
                    95:4e:ca:2f:3d:ec:d6:e8:c9:9c:e0:94:a9:34:f7:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E1:FF:25:AF:0C:89:BC:57:E5:64:26:02:85:C4:B1:B0:85:38:FC
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137372e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:8d:7f:bb:77:06:e0:87:a5:70:44:97:51:bc:ef:05:2a:97:
         be:3a:1f:c5:65:1b:f5:cd:10:d1:2d:24:63:96:de:e1:f2:8c:
         3c:52:ae:65:e4:d6:5b:6c:f1:46:b4:57:81:c2:a2:94:1f:a1:
         39:21:0e:0e:18:8e:ab:0f:fd:20:3b:09:3a:40:50:0c:c5:2a:
         69:45:46:e6:4a:f9:ef:9a:ff:77:10:11:74:5e:b8:aa:9f:1f:
         09:b3:64:28:07:b5:ff:82:09:de:e9:0b:42:15:6d:fc:7f:92:
         2b:6c:27:7a:b5:05:cc:7d:fa:a4:88:29:03:7f:cf:2c:a5:e5:
         58:6e:11:c1:e5:48:bf:11:a2:a2:b8:6f:9e:1d:75:fc:05:82:
         80:6a:05:2e:20:6d:4d:b6:63:88:e4:9c:f9:e8:36:06:b9:7f:
         12:fa:bb:b8:05:54:f5:f3:aa:1b:7a:36:5c:a0:d6:da:e1:71:
         ca:c2:af:e0:f7:1e:95:49:5d:02:f3:24:cf:05:1d:10:da:ee:
         11:bb:12:17:d9:c9:68:0b:b9:75:1c:2c:94:a1:05:27:e8:dd:
         ca:41:ea:77:50:dd:75:4f:32:f5:cd:86:9d:19:bd:44:a5:01:
         6d:67:5a:29:ee:7c:05:ce:25:62:14:68:b1:29:b0:51:32:bc:
         1b:b3:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org