Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132362e302f32342d3234203d3e203532353638.roa
File:                     3134332e3230322e3132362e302f32342d3234203d3e203532353638.roa (raw, json)
Hash identifier:          6tKTu2vK9gAG2C+vJ+S0b/CwmUMzI1TRssppZ9sBvW8=
Subject key identifier:   34:97:8B:72:0C:84:1C:59:F1:34:6C:CB:C6:C8:14:B3:E0:6F:38:0E
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       51DFB674D1A675E2CB31BFBA9C68B5E83F4FF8DF
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132362e302f32342d3234203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:13 +0000
ROA not before:           Tue 07 Feb 2023 19:59:13 +0000
ROA not after:            Tue 06 Feb 2024 20:04:13 +0000
asID:                     52568
IP address blocks:        143.202.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:df:b6:74:d1:a6:75:e2:cb:31:bf:ba:9c:68:b5:e8:3f:4f:f8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:13 2023 GMT
            Not After : Feb  6 20:04:13 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:d7:f4:e5:e3:e9:ef:90:a5:4a:9c:11:8e:
                    4e:81:c6:37:21:41:9a:53:db:0b:15:ce:67:99:0e:
                    88:c0:04:61:44:8b:45:05:41:e1:6a:b6:48:5a:7d:
                    01:d2:56:58:48:7e:d4:5c:a3:30:af:9e:e0:98:d8:
                    bb:13:56:d1:52:4c:7b:3a:7a:40:ba:13:da:67:80:
                    7b:3e:dc:4f:a7:56:79:36:a9:3a:0e:0e:41:71:25:
                    c4:1e:57:ed:b4:22:f3:fb:8c:f0:2b:ad:2f:88:58:
                    52:9d:f4:1c:91:86:fc:5d:04:9b:07:bd:95:00:ae:
                    81:5e:c0:56:5f:ff:7d:d0:ac:89:c7:8a:1f:a3:c9:
                    a7:41:ed:a2:1f:33:73:00:0a:0b:6b:50:20:21:6e:
                    91:ee:35:5c:84:79:05:b8:08:75:c9:9d:c7:17:8e:
                    b9:a4:bf:1a:cd:e5:23:8e:a2:18:9d:84:4e:4a:14:
                    ff:e4:ff:f5:25:eb:7e:e4:36:df:0a:4d:b7:04:82:
                    9e:98:59:e4:a2:be:82:1e:bc:66:d0:29:18:35:c4:
                    b3:fb:4f:f1:96:a0:84:20:36:79:3a:29:88:17:e5:
                    db:bf:d4:a5:2d:74:4d:14:b7:7f:89:57:85:a1:9f:
                    af:8a:71:32:8d:fb:89:f1:ea:19:02:3f:6e:6f:8c:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:97:8B:72:0C:84:1C:59:F1:34:6C:CB:C6:C8:14:B3:E0:6F:38:0E
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132362e302f32342d3234203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:2a:fb:2a:fb:75:15:42:7b:79:3c:4f:cc:5b:ff:29:b3:10:
         96:6e:be:8d:74:27:57:7b:ca:bb:14:c0:e6:1f:72:26:07:00:
         86:4d:09:7f:36:e9:96:8c:10:9d:f3:51:c9:8e:d7:f7:1e:c0:
         bc:cf:4e:bf:79:2f:3f:a3:93:b7:d6:30:ed:f2:dd:6c:5a:b5:
         6a:30:04:bc:4a:ce:1a:95:c7:c4:ac:14:fa:8e:60:db:c5:4a:
         32:3b:03:4c:8c:47:19:e1:87:85:f7:0a:a6:59:0d:ba:0f:ad:
         07:05:86:07:b5:e9:11:f9:1a:3d:3a:25:26:ef:7b:97:03:da:
         b6:ef:9e:9f:db:61:65:50:72:78:45:c8:86:bd:46:3b:7f:b4:
         ee:30:ae:7c:1c:b6:c9:f2:8b:c0:ed:e6:35:05:da:17:8c:84:
         ad:2b:f6:63:e8:44:ec:b0:d6:5c:71:4b:51:23:68:3e:15:e3:
         ca:de:82:4b:b1:a2:63:cc:d8:42:88:0b:57:52:24:9f:bf:cb:
         cc:b4:a4:46:7d:89:32:61:80:fb:f0:8d:43:4a:a3:29:04:f4:
         b4:35:2f:c7:25:2d:e0:a5:4d:8f:85:a7:59:f1:c8:d1:bc:38:
         45:e8:06:81:5c:c2:ad:cc:b4:db:e9:01:d4:4b:18:88:95:d5:
         07:00:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org