Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32322d3232203d3e203532353638.roa
File:                     3134332e3230322e3132342e302f32322d3232203d3e203532353638.roa (raw, json)
Hash identifier:          JPV8EM4EnaIKfRoEwBxT/ER/plANZz7lqhC3Jeg875c=
Subject key identifier:   A1:8A:BE:FD:AA:09:BF:A9:7D:EF:2E:A2:59:0E:9D:8B:F1:AD:34:2A
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       572E775437A5EE157348A249BC77D6867FEFB0F4
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32322d3232203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:13 +0000
ROA not before:           Tue 07 Feb 2023 19:59:13 +0000
ROA not after:            Tue 06 Feb 2024 20:04:13 +0000
asID:                     52568
IP address blocks:        143.202.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2e:77:54:37:a5:ee:15:73:48:a2:49:bc:77:d6:86:7f:ef:b0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:13 2023 GMT
            Not After : Feb  6 20:04:13 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:e5:93:da:c2:00:6f:35:2e:6d:76:df:2d:
                    df:d2:16:9a:83:2c:44:c1:a2:74:8a:45:f1:e0:52:
                    32:a3:a5:90:7d:f9:d7:ff:0c:26:42:c7:c0:98:7c:
                    2b:df:f5:9c:dd:e7:2e:15:ee:62:bb:58:a7:0c:ca:
                    d4:dd:31:15:56:a8:e7:bf:19:67:bb:fc:68:66:a7:
                    4f:3b:77:30:07:f7:08:12:97:35:06:30:0e:7c:91:
                    19:0e:3c:e1:e6:59:b1:3c:1c:57:65:a8:98:d0:c2:
                    74:9c:62:39:54:f9:a6:81:df:5b:ab:8a:3b:0e:5f:
                    e0:b8:48:b6:ee:3a:bd:ec:82:e5:a0:7c:f3:cf:6f:
                    65:41:d8:f5:c0:82:7b:18:85:58:91:15:7f:21:f5:
                    3a:07:3d:ee:d3:b0:14:d3:a9:e0:22:c4:3b:4c:77:
                    b4:1e:cf:37:1f:2d:ae:8c:f8:87:c5:27:fa:c2:48:
                    2c:01:74:66:94:25:ed:06:1a:09:ea:45:fc:34:d7:
                    e8:cb:de:51:e7:51:88:fc:e9:51:63:d7:a4:55:65:
                    7b:1b:e8:55:c1:fe:16:53:fd:2f:78:5c:d8:ca:91:
                    e0:a0:04:21:a4:d9:79:18:53:ef:79:f2:9e:3e:5d:
                    fd:2b:c0:ac:d4:52:af:82:7a:b9:77:07:32:49:e8:
                    1b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8A:BE:FD:AA:09:BF:A9:7D:EF:2E:A2:59:0E:9D:8B:F1:AD:34:2A
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32322d3232203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:55:ed:77:14:15:b4:1d:de:60:f0:65:b8:69:ea:42:e0:74:
         7d:57:b0:cc:52:ee:ce:d7:49:69:98:74:36:44:1a:f7:1d:3d:
         ea:3b:ee:45:b5:8f:fa:99:51:fd:07:91:56:ae:95:e6:c8:1a:
         e2:43:20:56:c3:06:0a:d3:86:12:a4:bf:3d:cf:86:85:ef:75:
         6f:5b:77:76:fb:c2:76:05:4f:29:d9:ce:df:d1:f9:cf:cc:a0:
         63:33:47:be:37:0b:03:ed:1c:19:c6:01:15:30:d2:e8:16:9b:
         cd:31:57:7d:f5:cf:a7:b0:c3:0b:be:35:f1:86:6f:52:a7:20:
         f6:d6:ef:dc:f2:40:48:11:b9:fc:c8:a1:19:be:66:be:53:0b:
         bd:eb:14:fe:b5:ee:f7:12:d0:d1:31:58:95:0d:03:d1:f8:e1:
         6f:aa:c6:01:39:74:9e:be:2a:25:53:08:7b:95:3d:1f:3b:44:
         c1:5b:ae:a7:ec:7c:a4:60:42:d6:f9:d9:bb:81:a3:02:29:b5:
         44:41:96:03:14:87:32:fb:ac:10:ca:0e:64:93:f8:9a:25:25:
         0f:95:f0:e1:3a:bc:9b:b9:7a:86:2f:e3:39:64:05:93:67:2c:
         b5:e3:b1:93:53:e1:59:a2:24:ea:25:d0:f4:d3:27:d7:67:04:
         16:c6:30:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org