Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137382e302f32332d3233203d3e203532353638.roa
File:                     3133382e33362e3137382e302f32332d3233203d3e203532353638.roa (raw, json)
Hash identifier:          uCzEr9C1siuwr+rbpKiQxRrYFmX8/3Qp0QueKh7qT20=
Subject key identifier:   BA:8F:24:73:15:33:F7:DE:9E:8F:E1:00:17:F2:06:92:00:29:6B:F9
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       6407EF06971D95D9094AB54506A14D552E62298A
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137382e302f32332d3233203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:11 +0000
ROA not before:           Tue 07 Feb 2023 19:59:11 +0000
ROA not after:            Tue 06 Feb 2024 20:04:11 +0000
asID:                     52568
IP address blocks:        138.36.178.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:07:ef:06:97:1d:95:d9:09:4a:b5:45:06:a1:4d:55:2e:62:29:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:11 2023 GMT
            Not After : Feb  6 20:04:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ca:0f:c4:f7:fa:99:36:3b:b6:2d:f4:7c:61:
                    dc:81:fc:23:7c:ba:4a:94:53:4f:a9:9f:11:3e:d8:
                    5b:f5:09:1b:c2:a9:35:f4:27:7b:27:69:19:45:23:
                    0c:89:37:84:f5:a1:e6:81:09:3f:99:61:35:c8:9e:
                    b8:79:3e:2c:79:8c:95:48:eb:32:1f:02:68:30:bb:
                    ab:8e:12:36:9a:46:2b:23:05:9c:11:5e:55:80:e1:
                    a5:6d:54:39:2e:b6:d5:7b:48:8a:7c:fa:5f:d8:24:
                    a9:66:27:ae:0c:97:64:ff:4d:ed:d3:86:86:64:0a:
                    91:0a:7e:cc:88:37:d1:ef:a7:74:18:f9:45:19:4e:
                    66:c5:f5:76:44:81:41:b8:ad:17:e7:74:c6:38:e8:
                    47:bf:30:73:77:fc:4f:53:12:47:3b:85:4b:8b:da:
                    29:b0:14:46:25:1c:ae:b6:b6:91:6d:14:10:39:e8:
                    66:dc:0b:8a:a5:55:80:b8:e2:42:75:98:14:9a:9e:
                    8b:be:e1:6d:5b:b7:fb:8c:56:5c:36:5c:ca:4d:21:
                    8e:47:55:ec:01:47:a9:ef:6e:cb:ed:9d:d2:f0:52:
                    c2:8b:4f:49:a3:ea:f1:78:2e:db:2e:8b:cd:bf:96:
                    86:03:41:51:03:97:82:7f:78:f6:08:7f:d8:ab:d8:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8F:24:73:15:33:F7:DE:9E:8F:E1:00:17:F2:06:92:00:29:6B:F9
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137382e302f32332d3233203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e4:27:41:75:43:8c:19:1d:fe:95:06:7e:7e:11:f3:ab:39:5d:
         c3:55:24:1a:f6:ff:1b:f7:71:2b:26:77:d0:b2:b9:35:bd:06:
         a9:fb:07:ea:31:63:b9:51:9d:31:51:91:f8:e3:ab:e0:dd:2c:
         ca:2a:bc:da:e9:9d:73:13:34:a1:ea:ae:38:c9:9b:03:c8:a6:
         b9:c1:60:bf:9f:5e:84:19:86:ef:d9:53:07:51:38:22:3d:f0:
         85:d1:30:12:d7:f7:3f:cf:14:f0:73:c2:06:c0:68:40:8d:23:
         e2:9a:63:4d:5f:d5:72:d9:57:f0:57:d2:cf:d7:47:01:ca:83:
         f8:5e:d3:70:dd:2d:98:f7:63:c7:6f:00:d3:19:42:8c:b5:42:
         e3:0a:e6:0f:d4:46:8a:79:e9:f5:c1:86:8c:58:60:ae:3a:41:
         50:6e:2b:29:f6:d1:ab:20:95:03:b4:de:ff:1b:27:5d:35:70:
         28:4d:0b:6a:0e:27:ba:6e:de:7a:09:3e:04:fd:ce:6b:27:e3:
         e7:d7:f4:e7:85:68:96:d7:9b:f3:bb:90:e4:99:fe:f1:d6:3f:
         d8:77:7a:06:10:6b:2f:dc:f7:d5:5b:86:f3:d0:4b:2c:ad:fe:
         73:ed:04:88:4f:2e:7d:4b:2d:82:13:b7:49:21:f7:97:d9:07:
         6c:57:ad:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org