Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132352e302f32342d3234203d3e20323632373733.roa
File:                     3134332e3230322e3132352e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          D8BtPdJKASfdS2kae610iSo3e6c8ZeyYdTnrRnBvGVU=
Subject key identifier:   81:D7:DE:09:38:C7:C5:E6:E6:51:7B:22:B1:D2:F5:70:DC:EA:4F:EA
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       5910365FFED6CE9EB420C7EDC882F13833FDB308
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132352e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 20 Mar 2024 19:20:14 +0000
ROA not before:           Wed 20 Mar 2024 19:15:14 +0000
ROA not after:            Wed 19 Mar 2025 19:20:14 +0000
asID:                     262773
IP address blocks:        143.202.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:10:36:5f:fe:d6:ce:9e:b4:20:c7:ed:c8:82:f1:38:33:fd:b3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 20 19:15:14 2024 GMT
            Not After : Mar 19 19:20:14 2025 GMT
        Subject: CN=81D7DE0938C7C5E6E6517B22B1D2F570DCEA4FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:1b:d6:3a:32:8d:2b:46:22:2d:43:0d:06:
                    cc:e6:9a:36:83:03:82:ed:8b:f7:e6:9b:44:bc:0c:
                    82:60:df:f5:04:00:41:84:14:39:40:c1:08:eb:90:
                    65:60:cf:7b:e6:39:e3:36:1b:dc:01:c2:ed:08:1f:
                    34:3d:01:0b:ca:2e:c8:2a:05:31:50:4a:02:bf:c7:
                    59:38:7a:bb:af:67:a1:b8:df:0f:48:41:e5:f4:bb:
                    d0:62:b6:50:e7:0a:1e:97:82:a4:92:d0:a9:dd:61:
                    0a:d6:7e:19:36:a6:85:ea:8f:5f:68:f6:5a:34:fe:
                    2f:dd:7a:c4:93:8b:c1:0f:aa:e3:4d:09:33:27:11:
                    66:f6:9e:ce:2e:42:11:97:ff:fe:3c:f8:9c:4a:bb:
                    69:7d:4a:71:c9:28:c1:47:a4:ab:aa:da:ca:66:81:
                    03:b2:cd:e3:88:a8:3f:89:72:13:bf:45:e7:7f:e1:
                    55:a0:39:b6:d8:72:49:66:6c:21:61:98:74:92:a8:
                    fd:6d:79:d9:cf:2e:e6:3c:a6:f2:a4:8a:96:04:fd:
                    21:17:68:a8:0c:72:4f:0d:7e:d8:a7:4b:77:4f:f5:
                    eb:0f:04:b0:a9:09:ee:6d:c4:df:71:10:ad:9c:a7:
                    21:d7:eb:93:1b:ed:06:b8:10:2d:7a:f8:f0:c3:be:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D7:DE:09:38:C7:C5:E6:E6:51:7B:22:B1:D2:F5:70:DC:EA:4F:EA
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132352e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:d6:61:c1:ad:ac:83:4e:ad:f4:95:7f:33:82:9e:83:ae:6d:
         ef:f9:10:c2:2e:ee:70:37:a8:a8:73:76:51:15:09:61:5f:d4:
         59:97:20:63:4d:1c:1b:79:e3:50:05:a1:b2:a3:17:b9:68:13:
         d8:08:c7:1d:09:c5:3f:7d:ff:03:a6:11:d1:ab:2f:a2:21:c0:
         67:de:cf:c8:6c:9e:66:ae:fb:f1:48:47:e6:94:48:61:97:4a:
         7f:c7:51:de:cd:d4:d1:66:98:1a:b0:36:52:62:eb:47:b6:b0:
         7d:98:e0:eb:3f:c8:07:53:1d:2b:80:e5:16:d6:9a:5e:28:c8:
         df:d3:ed:2f:61:5a:8f:df:cb:d7:14:d8:ea:2a:5d:0c:53:c8:
         30:c5:37:2a:4c:16:2f:1c:1d:87:2b:5d:0d:98:d6:21:87:48:
         5d:23:cb:02:b1:9b:84:6e:fc:0b:3b:7e:a1:bc:ad:41:da:8b:
         39:82:83:a0:63:f6:fe:ed:c1:13:85:e0:3a:e3:e3:a9:79:bd:
         7e:83:2f:3b:b5:bb:18:23:a6:5d:8f:a5:5e:a4:75:ff:c1:1d:
         d8:b7:cd:a4:29:db:d6:5f:4b:ec:80:45:fd:22:60:3f:08:6e:
         e3:3c:20:81:d0:16:b5:03:67:6d:75:03:c2:3a:a5:1f:6d:fa:
         71:14:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org