Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32342d3234203d3e203532353638.roa
File:                     3134332e3230322e3132342e302f32342d3234203d3e203532353638.roa (raw, json)
Hash identifier:          gov4RUNqdKXWNFBEuPKClDgKHSpVMW0S3xaQjM2wX9o=
Subject key identifier:   85:30:0D:FC:10:3A:A0:93:F2:D6:A1:8F:E4:DD:FF:45:FB:5A:D0:BB
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       6B1F5C74716FF3812427CE2A7FEAD7417411E088
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32342d3234203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:10 +0000
ROA not before:           Tue 07 Feb 2023 19:59:10 +0000
ROA not after:            Tue 06 Feb 2024 20:04:10 +0000
asID:                     52568
IP address blocks:        143.202.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1f:5c:74:71:6f:f3:81:24:27:ce:2a:7f:ea:d7:41:74:11:e0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:10 2023 GMT
            Not After : Feb  6 20:04:10 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:39:d3:90:51:d0:51:10:e5:83:c8:9d:43:
                    fd:26:56:0a:80:51:a4:e5:48:8a:0a:52:b1:30:b6:
                    d8:c0:2b:6c:b6:e7:a8:4c:e0:0d:00:0a:bb:56:8d:
                    00:c4:55:1c:8d:25:f4:38:13:71:e4:41:16:89:50:
                    40:00:9f:56:fb:30:8c:a6:07:1d:d6:10:a4:70:30:
                    e2:10:f2:46:d9:66:a8:89:f2:0e:47:0d:13:6e:71:
                    3e:fa:b2:46:fa:f8:bf:7a:c2:60:f9:9e:01:d3:b1:
                    e8:71:41:e6:c1:96:1e:42:84:58:03:c3:04:b3:38:
                    da:9d:8b:c0:38:27:3e:46:df:21:b5:68:78:f8:40:
                    a7:5c:35:9b:9c:29:9c:55:c4:a1:67:58:90:08:26:
                    ed:f3:8e:a9:25:d6:44:4e:24:0e:f5:72:40:89:f7:
                    01:49:51:75:93:6e:51:4b:1b:c0:e7:85:3c:2e:25:
                    70:ec:28:fb:81:3a:92:bb:50:3e:31:46:01:aa:9f:
                    8c:73:bd:cb:c5:f1:ec:49:3d:31:30:49:34:bb:9c:
                    42:18:ee:62:31:76:c3:b6:d7:0f:b3:c2:80:3f:19:
                    d4:df:b2:3f:03:cb:aa:9a:bd:d3:06:30:99:c2:04:
                    bd:46:9d:a7:07:4a:16:4c:43:af:46:c4:1e:6a:f6:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:30:0D:FC:10:3A:A0:93:F2:D6:A1:8F:E4:DD:FF:45:FB:5A:D0:BB
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32342d3234203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:14:6f:01:94:35:52:ac:65:64:24:e9:f0:48:86:c9:f4:65:
         f4:b1:a0:bf:d0:e3:d5:58:bc:81:e6:51:7c:2e:fe:3c:09:af:
         4b:87:2a:10:d7:de:7b:8c:a0:96:1d:c3:e5:de:9b:b9:d9:ea:
         e3:1e:ae:91:dd:f8:6f:07:c5:d3:dc:f5:b4:bb:06:ef:51:12:
         43:b0:e5:09:23:e0:7f:75:f9:c0:79:be:88:bf:8a:e6:f8:de:
         91:c1:d1:aa:6d:2c:d8:53:ec:12:ea:19:7a:e2:9e:8c:1d:1b:
         e1:7f:97:08:c4:ae:c1:f9:39:93:8b:ad:94:3c:c1:4b:8c:e3:
         7c:7c:8f:84:6f:aa:b2:5d:f2:aa:19:e9:46:ce:84:9f:05:08:
         40:6b:33:84:36:15:c6:7d:f8:95:87:c9:bd:a0:c4:ce:04:7b:
         b1:7b:06:c0:e2:63:aa:13:ea:99:8e:03:50:d3:7e:07:e5:ad:
         05:ba:75:0d:06:ca:84:7b:db:67:e6:56:0f:74:e9:64:69:8f:
         bb:a5:fa:89:ed:9d:9c:0d:68:75:b3:99:5f:49:6f:80:1b:d0:
         80:c3:b8:d9:ea:66:f8:28:89:f0:af:7d:16:c4:52:60:ac:26:
         e4:45:13:20:f6:61:31:17:ad:02:a1:28:93:e6:04:f1:e9:c0:
         82:89:49:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org