Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132362e302f32332d3233203d3e20323632373733.roa
File:                     3134332e3230322e3132362e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          Glep3gEdUVXnGCpYXddusOWDfFb3MlfV7L8MDmPhUF0=
Subject key identifier:   75:21:36:FF:12:45:DF:6E:9E:DB:EA:7A:4D:B3:4C:0A:D2:45:91:40
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       4BDA4637F7F7054F526C5EB077A3338198CA48A5
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132362e302f32332d3233203d3e20323632373733.roa
Signing time:             Fri 10 Feb 2023 14:05:17 +0000
ROA not before:           Fri 10 Feb 2023 14:00:17 +0000
ROA not after:            Fri 09 Feb 2024 14:05:17 +0000
asID:                     262773
IP address blocks:        143.202.126.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:da:46:37:f7:f7:05:4f:52:6c:5e:b0:77:a3:33:81:98:ca:48:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb 10 14:00:17 2023 GMT
            Not After : Feb  9 14:05:17 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5a:77:6d:cd:63:63:8f:72:cd:14:40:34:e2:
                    ce:34:ff:ac:cd:3b:cd:c3:95:82:f8:b4:0f:ea:68:
                    59:9c:87:d4:50:a8:39:5b:7e:2a:51:fc:b0:92:fa:
                    04:a0:79:f6:3e:91:53:42:65:d0:91:5b:69:17:ce:
                    0c:e7:c4:b0:e2:18:6b:b2:8e:e0:b1:61:c7:05:40:
                    4d:7b:f5:23:95:47:b4:7f:e6:4c:32:ed:3e:e5:d2:
                    f4:32:d1:a2:c5:76:4d:05:df:11:ae:29:f6:9e:29:
                    4e:b3:77:d6:08:8f:20:be:63:3e:66:2d:67:9a:b7:
                    da:d8:64:59:9d:24:0b:f5:cf:33:c4:7f:87:1d:b8:
                    07:a2:5b:36:67:2f:c4:d3:e3:9e:ea:f8:73:5f:f2:
                    24:95:f0:48:ff:69:e2:2c:25:e5:5d:de:7a:d9:d3:
                    4d:78:47:54:e1:d8:cb:c9:48:30:dc:f1:f9:97:b6:
                    5c:ec:07:31:c2:e4:70:82:7b:76:49:b2:f8:bb:34:
                    6f:6c:80:18:60:4b:4a:97:7e:98:c1:7e:6e:73:0b:
                    42:29:21:1f:b5:d3:96:47:29:be:c3:78:68:00:da:
                    b6:fb:b5:77:39:f3:35:85:db:ef:99:81:84:27:6f:
                    84:bd:b9:3f:d5:6c:cf:b8:9c:17:85:fe:5e:d9:69:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:21:36:FF:12:45:DF:6E:9E:DB:EA:7A:4D:B3:4C:0A:D2:45:91:40
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132362e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:ca:fb:d0:09:c8:c5:08:3b:0d:df:ed:3e:5f:ff:36:12:a1:
         8b:1a:97:22:85:fa:de:8b:1c:7e:a9:17:7e:f1:ee:b3:51:ae:
         6b:5b:1f:56:42:9f:9c:43:4d:cf:51:ab:ca:42:ac:6c:37:4b:
         1e:aa:8f:cb:15:9c:cd:7c:ac:62:a7:52:67:d6:99:aa:a4:ee:
         ba:3c:19:db:7c:5f:e6:38:44:a8:d6:bd:d5:67:33:81:c6:2c:
         4e:35:12:36:45:08:8b:5c:b9:14:b1:fd:27:b2:8d:97:6f:8f:
         31:90:3a:ee:44:69:d9:06:2d:8b:85:48:73:7e:6c:fb:af:24:
         fe:37:b0:87:f6:18:78:2a:7b:21:54:98:65:7b:84:b3:25:98:
         26:55:29:e8:56:38:c2:83:17:fc:63:3e:3e:a3:10:b8:1e:c8:
         e6:b5:7e:53:c7:7e:7c:8a:41:c8:e7:63:63:e8:71:e2:f4:4e:
         e3:23:cf:ee:f3:7f:c2:d1:d4:4d:10:7a:b2:8a:6f:ea:19:ad:
         98:88:65:33:92:11:a4:7c:c9:01:30:b8:d1:7c:46:9b:75:ad:
         0f:0f:cc:b4:60:c8:1a:49:4e:36:ee:c0:be:79:56:54:3f:a0:
         5a:ee:7a:2b:a4:4c:a1:66:53:42:9b:ac:4c:99:4d:e4:45:be:
         57:27:21:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org