Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32322d3234203d3e20323632373733.roa
File:                     3134332e3230322e3132342e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          3H1Q3XOc5VIlNUgAcyFJe+UCyApzJv0Y+NMXcxlmfls=
Subject key identifier:   C6:ED:31:82:09:BD:83:1E:C1:4C:CE:37:F5:4E:1A:5D:B1:61:39:49
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       700B387506D1B81A95E8AB9A10BD204EA008B492
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32322d3234203d3e20323632373733.roa
Signing time:             Thu 21 Mar 2024 12:40:22 +0000
ROA not before:           Thu 21 Mar 2024 12:35:22 +0000
ROA not after:            Thu 20 Mar 2025 12:40:22 +0000
asID:                     262773
IP address blocks:        143.202.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0b:38:75:06:d1:b8:1a:95:e8:ab:9a:10:bd:20:4e:a0:08:b4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 21 12:35:22 2024 GMT
            Not After : Mar 20 12:40:22 2025 GMT
        Subject: CN=C6ED318209BD831EC14CCE37F54E1A5DB1613949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:af:d7:ad:a7:93:1b:45:1c:32:42:af:92:
                    6d:26:bb:fb:16:4d:09:29:b1:20:a8:74:69:79:c8:
                    9f:b2:56:c0:9c:73:c3:48:67:d2:7d:c8:4e:bd:6e:
                    d3:db:cc:8a:55:fe:db:6f:fe:20:65:d3:92:b9:10:
                    b4:05:07:57:3c:21:80:bc:9a:c8:19:d1:06:fe:d8:
                    6c:5e:0f:da:31:44:d0:aa:cc:ad:9f:ad:2f:da:20:
                    ca:d1:b0:1c:ff:0d:c5:fc:32:94:fd:85:7f:07:f1:
                    51:56:26:60:a2:79:f4:36:60:10:cc:c0:ff:22:7f:
                    ff:b9:50:35:19:02:4b:a8:0b:e6:14:e9:3b:9b:ea:
                    41:88:f8:e4:5c:66:e3:57:15:6e:33:b6:43:61:9e:
                    7a:07:45:4d:8f:57:8d:c0:7a:65:1c:18:98:54:f5:
                    24:0b:2c:20:a1:ac:02:05:3e:9f:8e:ed:ff:1d:f2:
                    68:ae:7a:2f:cf:47:f5:db:6d:61:1b:31:a6:02:c8:
                    1f:41:d7:0a:3a:90:e7:e4:b5:67:c7:39:82:ba:40:
                    bb:83:d5:6a:86:cb:99:1f:a5:57:fb:2b:64:8b:bf:
                    00:a5:2b:ff:3b:a1:35:05:14:df:7d:c5:11:4b:a3:
                    6d:e5:d5:e8:7c:49:d6:11:58:39:7a:32:96:88:94:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:ED:31:82:09:BD:83:1E:C1:4C:CE:37:F5:4E:1A:5D:B1:61:39:49
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:76:1d:29:69:9b:b3:7c:86:ae:7f:a6:29:a1:88:f1:7e:
         36:5d:cc:14:47:91:62:89:66:24:a8:8f:b8:3a:d5:16:a1:10:
         ab:44:af:3b:7e:a3:a9:57:34:fe:df:72:d5:4e:96:f8:61:05:
         b4:9e:b3:3d:4f:96:bf:d6:91:9c:f2:8a:11:08:ac:57:9f:21:
         23:4c:37:c2:64:6e:3a:a6:bd:8f:8b:09:4a:67:c7:7c:74:00:
         1e:c8:26:01:da:68:a1:97:2f:0d:9d:c9:80:b6:09:ae:f2:b7:
         ea:bb:47:11:55:0c:59:d9:f6:17:9e:b5:2b:5c:1a:fa:50:4f:
         81:8e:4d:f1:fd:7a:f0:5f:ba:e4:f1:3b:7d:eb:7b:3f:cf:48:
         21:2e:ac:d7:8c:6c:49:86:2f:d6:7d:33:14:3f:99:27:c3:a8:
         bd:c2:1a:bf:16:dd:52:a7:19:82:0a:db:3b:27:a4:2a:f6:2c:
         6b:54:e9:9b:d3:4e:c2:d9:90:21:0c:69:21:03:05:be:db:d4:
         b8:3b:5a:2e:54:ee:ed:86:2e:33:25:e3:dd:dc:52:e5:57:d2:
         56:1c:4e:f6:1a:a5:aa:ef:78:a8:ba:9f:34:31:b1:ea:24:76:
         c3:b1:07:2e:71:21:52:0b:65:84:30:d6:2e:e4:c7:aa:14:04:
         1d:89:06:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org