Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e39342e3135362e302f32322d3232203d3e20323632373733.roa
File:                     3133382e39342e3135362e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          MJVyYQs+d5gvd1NCb2vtE/tH5A4md5LGS4r/Syti/XI=
Subject key identifier:   79:3E:47:9B:AB:C7:46:0E:BE:3F:D2:A0:EF:22:D4:2B:B5:3C:77:24
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3FDCDA5D63D7081A75CB4A5F6FE34B8E6C5FFAB8
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e39342e3135362e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:50 +0000
ROA not before:           Tue 19 Mar 2024 21:48:50 +0000
ROA not after:            Tue 18 Mar 2025 21:53:50 +0000
asID:                     262773
IP address blocks:        138.94.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:dc:da:5d:63:d7:08:1a:75:cb:4a:5f:6f:e3:4b:8e:6c:5f:fa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:50 2024 GMT
            Not After : Mar 18 21:53:50 2025 GMT
        Subject: CN=793E479BABC7460EBE3FD2A0EF22D42BB53C7724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:06:d3:ea:3f:69:cf:a0:ae:6d:85:39:5f:
                    82:83:01:0d:dd:3e:e1:25:2a:e2:2e:ee:2b:d9:81:
                    e5:58:64:34:0e:cf:7e:93:5a:f2:9b:54:48:16:bd:
                    68:d0:d3:55:44:dd:99:e0:13:d2:07:d5:92:28:c2:
                    a0:99:f0:09:ed:d5:b5:a8:1a:d3:b4:25:55:a3:3c:
                    09:21:10:9f:27:cf:ed:83:fa:54:e5:6f:f9:78:43:
                    eb:47:dd:7d:d6:e0:35:13:ce:20:2c:1d:a8:cf:d0:
                    fa:60:61:05:81:fd:c1:6c:23:60:c0:68:40:d8:12:
                    14:00:8c:ff:66:34:ca:a5:63:32:6d:72:96:9f:91:
                    64:c8:33:e5:86:60:85:cb:2b:4f:28:73:d9:52:0f:
                    61:d4:fd:83:d4:92:73:b2:5c:1e:0c:7f:c7:7b:70:
                    c5:37:26:d2:b6:89:c8:a5:78:38:99:85:83:ef:7c:
                    93:83:a2:39:71:5c:00:cc:87:52:a6:d0:6b:5d:73:
                    d9:5c:28:03:81:cf:56:4f:86:b5:b6:bc:c2:88:f5:
                    4f:e7:a2:c7:1e:b6:14:b0:50:c3:47:78:6e:af:ec:
                    ec:af:59:0e:06:b8:74:00:00:10:b2:31:31:93:31:
                    ec:3e:f3:3d:e6:92:a2:88:8c:64:38:fe:f8:b6:36:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3E:47:9B:AB:C7:46:0E:BE:3F:D2:A0:EF:22:D4:2B:B5:3C:77:24
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e39342e3135362e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:f9:df:5e:e6:dd:b5:cd:af:3f:4e:1f:5a:8e:25:e8:74:d1:
         dd:25:08:03:8a:1c:1a:31:82:94:ad:76:a5:ba:d8:8c:65:cb:
         cb:32:f9:0d:38:b1:5a:4d:d0:76:b2:89:56:3c:4d:4c:fd:0b:
         10:11:e3:53:ee:8f:c6:f3:0c:37:5e:78:34:95:d1:e3:f5:8b:
         f6:e4:36:2e:e9:5e:93:02:04:59:49:b3:d7:15:e6:34:06:ec:
         b4:7f:2a:0f:54:43:ed:59:ac:d1:21:d1:5b:cc:bc:97:1f:93:
         8e:c7:01:7b:6a:c7:7a:2c:3e:b9:4f:c3:59:4a:07:7e:74:04:
         22:2a:7f:ee:d6:34:a8:c3:84:7d:c9:33:5e:bc:98:12:2f:d0:
         a7:ae:ac:13:3b:0e:4a:81:95:b8:61:63:53:50:ac:61:19:46:
         2a:eb:d4:ba:e4:5b:79:3d:e4:af:a5:52:61:3e:ce:ca:5f:03:
         e8:5f:0e:dc:08:6d:99:7b:dc:6c:ee:7c:a9:14:c9:43:e8:c7:
         ba:4a:c9:2a:88:1e:dc:99:f5:24:87:51:1d:0f:c9:d2:14:82:
         e2:02:be:3b:0b:c7:07:fa:b1:96:e2:ec:e1:01:6c:b8:f6:b2:
         a6:09:c6:00:19:dd:74:62:3c:87:9d:af:3f:de:98:ff:4d:16:
         e0:47:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org