Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132352e302f32342d3234203d3e203532353638.roa
File:                     3134332e3230322e3132352e302f32342d3234203d3e203532353638.roa (raw, json)
Hash identifier:          g95SmM58qGOVaS0z1JuFdNbTMJ95BmdmrapYffhy8P4=
Subject key identifier:   28:A5:8C:89:04:D0:17:2A:6E:73:CF:2B:D7:ED:A7:D4:27:7E:31:8C
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       6704CD259B7A732D7ECBF1AE05E385F7970E472A
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132352e302f32342d3234203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:11 +0000
ROA not before:           Tue 07 Feb 2023 19:59:11 +0000
ROA not after:            Tue 06 Feb 2024 20:04:11 +0000
asID:                     52568
IP address blocks:        143.202.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:04:cd:25:9b:7a:73:2d:7e:cb:f1:ae:05:e3:85:f7:97:0e:47:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:11 2023 GMT
            Not After : Feb  6 20:04:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9b:f8:fa:1e:9a:9f:a2:09:af:ea:ef:5d:93:
                    fe:5c:5f:c3:6f:75:ef:25:96:52:31:c3:08:01:e1:
                    88:4b:aa:66:05:a8:5d:b6:5d:01:0b:bc:10:8b:fb:
                    a9:b2:d5:17:34:96:9f:37:77:fc:4c:49:a6:e2:97:
                    61:7d:40:7e:ee:44:f2:88:70:bf:57:96:54:50:64:
                    4e:b3:44:60:3c:6e:af:67:5e:c3:f0:d5:54:a2:23:
                    e9:9d:e1:9a:4e:a6:a4:75:aa:0f:c2:cd:7f:f1:80:
                    8d:00:0c:1a:ac:2b:71:9e:e9:27:82:06:a0:f8:21:
                    31:8f:7d:dc:9c:ae:55:64:50:19:fa:70:c0:b0:2b:
                    0e:fe:6f:ad:6f:c4:d6:d9:dc:3d:bb:3a:bb:4c:72:
                    ee:55:86:21:60:37:94:6e:3c:3d:46:a8:c4:39:79:
                    19:56:fc:15:09:a4:13:02:ff:e7:0a:0f:da:33:1a:
                    1d:5a:24:64:64:c3:c6:9f:1a:ba:8c:27:e9:4b:9a:
                    45:a0:f6:23:d5:d7:62:73:10:c2:52:29:5c:25:19:
                    02:1c:21:f2:93:23:06:1f:21:5d:1a:20:5e:8e:ee:
                    d8:d4:e3:86:34:79:75:8d:b5:23:4a:8b:9f:cb:95:
                    4b:e5:34:11:92:45:53:e8:f8:55:e1:bc:0e:d0:79:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A5:8C:89:04:D0:17:2A:6E:73:CF:2B:D7:ED:A7:D4:27:7E:31:8C
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132352e302f32342d3234203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:e5:d0:b9:44:da:6c:d8:1d:df:24:4a:f8:01:3f:d1:b8:4a:
         1c:33:7e:aa:7f:f9:ce:d0:0f:ad:8b:46:5f:fe:a7:a6:b9:d5:
         a4:48:4e:7e:42:73:39:31:3f:61:f8:62:f7:88:66:4c:9b:22:
         b0:9f:54:e7:32:0e:61:31:d8:a0:88:fc:0d:31:1e:d0:53:b5:
         a6:6e:2d:e9:17:23:09:07:79:92:7b:67:d3:c4:50:f5:cb:d4:
         87:5d:45:d0:df:6b:a4:2b:3b:55:71:43:79:d1:c0:47:0d:be:
         f6:c5:93:63:17:21:c4:e5:11:b1:27:f4:45:3b:86:0a:7c:df:
         c8:c5:40:fb:e4:ae:49:d3:66:86:8d:49:d8:cc:b1:03:c0:60:
         89:a5:99:39:30:bc:f4:07:33:18:37:12:b7:48:28:fe:c8:52:
         a6:4b:07:03:53:2d:89:10:24:f6:02:41:08:f0:db:a4:92:24:
         91:36:18:d9:1b:8a:6e:2c:9f:b4:91:c9:02:11:9e:1f:b3:27:
         8c:79:7a:2e:e6:77:2f:0c:d4:da:93:fb:18:d2:d7:6e:58:91:
         06:3a:48:0e:0b:34:4b:ee:e1:ca:99:21:ca:27:21:7e:45:ad:
         4e:aa:90:50:10:11:79:a4:84:13:71:aa:f6:25:89:c0:d9:32:
         b4:43:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org