Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137372e302f32342d3234203d3e203532353638.roa
File:                     3133382e33362e3137372e302f32342d3234203d3e203532353638.roa (raw, json)
Hash identifier:          sfEccfd7+DZCKkspX4T+/TR8ffdF/tWFouivDrh8lJY=
Subject key identifier:   00:3D:C6:5A:1F:7F:72:3D:61:68:8A:E6:77:7A:71:EE:45:50:18:A7
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       0953B05EA0B17252D5455134E008873ECCCE2D64
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137372e302f32342d3234203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:11 +0000
ROA not before:           Tue 07 Feb 2023 19:59:11 +0000
ROA not after:            Tue 06 Feb 2024 20:04:11 +0000
asID:                     52568
IP address blocks:        138.36.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:53:b0:5e:a0:b1:72:52:d5:45:51:34:e0:08:87:3e:cc:ce:2d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:11 2023 GMT
            Not After : Feb  6 20:04:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:59:21:a4:ab:6f:6c:8c:98:c8:0a:e3:54:38:
                    5c:85:b2:9e:83:50:ad:4c:d8:c7:3d:01:3b:95:8a:
                    d4:19:3e:c9:9d:ba:16:3f:d1:2b:68:b9:10:22:c2:
                    2b:77:ba:39:f8:bf:5f:70:ee:da:d8:29:e0:02:2b:
                    e4:df:eb:86:bd:ac:22:03:d1:cb:1d:ab:41:ad:7c:
                    b6:7b:62:74:f3:db:a3:77:5e:82:14:f6:65:6c:df:
                    6e:b0:1d:cf:64:01:77:43:be:6d:1f:50:d7:1e:99:
                    e9:4c:48:5a:c1:5e:86:70:62:58:23:96:64:fa:b2:
                    85:95:10:70:5c:13:35:ab:cb:18:1e:3a:6b:1a:62:
                    32:6c:46:67:7d:0a:31:e2:5f:d5:82:e4:76:26:ae:
                    9a:c5:c6:2d:0e:6c:de:9d:cd:f9:95:83:4d:a7:48:
                    c6:29:bc:a4:e0:83:07:67:77:cb:c6:b0:6b:01:ff:
                    5e:32:6c:16:15:dd:f2:c8:e9:f5:af:50:94:aa:25:
                    0d:f2:13:87:a2:82:5d:ab:2a:c9:0e:f4:d9:cb:83:
                    8a:4f:38:b2:2a:c2:64:da:44:5d:25:84:7d:65:5c:
                    80:17:ec:99:8a:e3:12:86:a4:d7:d9:e7:d0:ae:60:
                    36:70:d4:18:c8:24:95:2a:83:9d:06:d3:57:bc:9b:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3D:C6:5A:1F:7F:72:3D:61:68:8A:E6:77:7A:71:EE:45:50:18:A7
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137372e302f32342d3234203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:32:75:79:88:ff:7a:43:d7:e0:72:de:81:f1:ce:a3:61:df:
         fa:5d:74:07:a7:34:e4:ec:78:1a:07:80:27:9f:1f:91:ae:ce:
         7b:21:7c:b0:59:26:42:eb:ab:2d:40:a9:64:fa:d4:a7:7a:c1:
         5d:0c:ed:34:6e:e7:47:eb:4d:25:ce:e6:9c:33:c7:c4:9f:c4:
         a5:8a:55:ab:e1:20:88:8d:1f:fb:50:68:db:96:df:d1:b9:55:
         ad:9e:23:ca:44:8b:6d:3d:df:66:cd:7b:f5:79:ea:ad:18:60:
         39:45:82:cb:3c:1c:4b:d6:bf:3c:3d:3e:59:b9:01:f7:08:08:
         07:4f:1e:70:f2:70:db:b7:1a:6e:99:b5:77:c0:03:87:2a:96:
         ca:a8:da:83:52:cd:96:ed:40:11:3a:b5:f8:c5:f1:f9:29:eb:
         81:c8:8e:e3:56:db:35:78:9a:c8:68:ef:6a:a8:ad:f4:1a:17:
         ca:95:cd:8e:ba:74:4f:15:77:91:51:90:07:95:3c:b3:6b:9d:
         81:ea:9f:17:20:80:2f:6d:c2:84:93:d2:8e:ea:82:7f:be:55:
         6c:95:67:bb:02:4c:b1:72:18:16:54:9b:bd:04:0a:92:4d:84:
         d6:3e:0e:24:be:d4:80:8c:7c:69:0e:2e:38:8e:1c:8e:66:c0:
         b0:06:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org