Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e39342e3135362e302f32332d3233203d3e20323632373733.roa
File:                     3133382e39342e3135362e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          YfeoJQ+RlK30dfILxSUXoopllJDaKN/0c6uJrJRXLqM=
Subject key identifier:   14:51:43:41:32:19:92:DE:CA:DD:66:A4:10:75:DD:4F:47:D9:1D:09
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       433F126AED5F533B1FC64BDB4BA2945A97E400CD
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e39342e3135362e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:26:32 +0000
ROA not before:           Tue 09 Aug 2022 13:21:32 +0000
ROA not after:            Tue 08 Aug 2023 13:26:32 +0000
asID:                     262773
IP address blocks:        138.94.156.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3f:12:6a:ed:5f:53:3b:1f:c6:4b:db:4b:a2:94:5a:97:e4:00:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:21:32 2022 GMT
            Not After : Aug  8 13:26:32 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:03:a8:3f:4f:2f:c7:db:15:25:67:61:a5:d4:
                    b5:8c:57:b0:80:0b:20:23:13:0d:97:2c:3f:3f:06:
                    ec:d9:f3:31:93:98:c3:7f:18:de:01:e3:9e:a4:40:
                    ef:7e:bb:42:e6:2c:0c:c5:91:37:2b:0d:14:42:41:
                    09:67:fc:98:b7:9a:3c:8f:31:6e:7d:ca:fd:b7:31:
                    10:78:77:19:fc:9b:20:44:39:d1:e2:4a:c0:f9:a7:
                    ff:13:36:7c:6a:76:ff:78:aa:ca:73:c7:24:35:9c:
                    1c:6b:3d:12:25:9a:fb:33:2e:bd:7c:fc:49:8b:7e:
                    ce:a3:8e:81:03:d1:1e:95:c3:2f:a2:46:07:14:0e:
                    5c:8c:7d:bd:b1:34:2b:95:ad:5f:9f:47:d7:76:a0:
                    f1:a5:e0:f2:1b:23:34:41:9e:38:ba:bf:fa:d3:68:
                    f5:a4:e4:89:f7:0e:b4:6e:af:99:6b:1f:ed:72:64:
                    49:c7:5a:34:b8:e6:b3:8d:7d:5d:4c:9d:8a:d4:11:
                    07:ca:c7:4b:f1:37:39:de:3f:43:6f:4a:db:38:6d:
                    d7:bf:ba:2a:f5:f3:13:85:f4:23:7e:e7:67:a1:da:
                    7c:02:b9:cf:80:68:7d:7e:fa:e2:b3:08:3e:b6:8a:
                    fd:c8:8b:3f:ff:70:04:0f:92:9f:09:9f:c0:45:5d:
                    15:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:51:43:41:32:19:92:DE:CA:DD:66:A4:10:75:DD:4F:47:D9:1D:09
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e39342e3135362e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:45:40:53:5e:37:5f:9f:a7:56:63:50:21:3a:cc:e9:00:
         ec:0a:3c:e4:76:c7:9b:87:b1:0a:9d:0c:e4:55:c5:ed:7a:6f:
         cd:52:75:51:46:77:bd:ea:ac:f8:ee:99:29:43:1b:59:82:77:
         3e:6d:93:12:e5:6a:33:76:2c:cb:cc:f0:7f:d7:db:57:55:09:
         6e:f6:6e:e2:a1:fa:76:e0:bd:44:d0:df:ea:53:2e:07:5d:ca:
         e3:26:db:87:47:38:53:3b:02:9f:8f:f7:2e:d5:cb:75:b0:77:
         1e:07:fc:95:53:fa:33:e4:14:80:aa:3c:44:b1:35:e5:87:9d:
         78:62:e7:a9:9c:d9:f2:be:71:06:82:92:d5:13:ab:f3:dd:a0:
         16:ae:11:22:64:93:54:0e:e8:9c:10:79:b9:4a:58:a6:63:df:
         89:5d:26:a4:ae:ec:0c:ad:b2:7e:99:9a:ef:a0:cb:71:ed:08:
         dc:7c:35:ad:6c:5e:c0:f7:04:0c:4a:bd:42:9c:1c:e3:9b:0f:
         a0:c2:4c:2b:e9:89:9a:9c:90:e1:40:63:b1:87:81:3e:5f:4d:
         cb:ad:d5:a1:35:58:99:e3:80:ea:d8:93:c5:8b:d1:47:d7:0d:
         c3:eb:bf:fe:ce:61:83:4a:da:4c:79:16:5d:a2:a7:c8:cc:2d:
         09:9a:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org