Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32322d3232203d3e20323632373733.roa
File:                     3136382e3139342e3132302e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          GeYAoYnk0VX4ii7DXmZoPN8ZKnn9zcLJySjMsvyjhYA=
Subject key identifier:   EE:36:F8:7F:E5:11:AF:51:3D:07:28:42:B2:46:33:3C:F3:C1:7A:29
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       517A32024B8B1C39D9E361085EAC18DD18DE9324
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:47 +0000
ROA not before:           Tue 19 Mar 2024 21:48:47 +0000
ROA not after:            Tue 18 Mar 2025 21:53:47 +0000
asID:                     262773
IP address blocks:        168.194.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7a:32:02:4b:8b:1c:39:d9:e3:61:08:5e:ac:18:dd:18:de:93:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:47 2024 GMT
            Not After : Mar 18 21:53:47 2025 GMT
        Subject: CN=EE36F87FE511AF513D072842B246333CF3C17A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9a:ff:96:30:c6:36:d9:dc:72:77:fd:ae:44:
                    90:61:6a:69:c8:cb:a7:43:a4:f0:c6:8a:dd:a3:06:
                    95:60:28:97:fd:4b:b6:c3:7e:39:a3:e7:cf:0f:7e:
                    10:e5:fe:70:57:85:df:23:db:48:7f:a8:2a:b5:3f:
                    51:45:35:5a:3f:92:40:cb:15:2a:7c:85:04:1d:e1:
                    96:7d:a3:ad:cf:08:d4:f5:6b:ed:db:b4:f4:61:63:
                    43:22:7c:27:23:64:f5:0c:3f:c5:ae:53:dd:08:48:
                    ff:dc:38:72:e2:67:ab:c2:b7:a0:6c:db:51:af:93:
                    9b:b0:5a:74:6b:3e:d7:b5:31:40:1c:f0:04:37:1b:
                    4c:ee:58:74:cf:99:1b:e4:5a:e6:92:8e:3f:25:ac:
                    6c:6e:f1:92:19:4d:02:41:a4:0e:86:ed:12:c1:42:
                    8a:c4:57:97:b4:76:5a:20:a5:c0:fc:3b:ec:62:89:
                    b0:d8:17:28:61:d2:b5:e7:af:01:fa:96:6a:c4:bc:
                    68:2e:d0:89:05:45:8c:9b:cc:a9:05:07:24:49:23:
                    80:5a:e9:0b:09:c4:f7:1e:45:33:db:6d:f1:d6:84:
                    1e:94:80:66:ac:27:37:82:0c:4f:62:19:d6:3b:93:
                    2b:3b:54:bf:12:db:7a:36:e7:be:b6:12:5e:11:cb:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:36:F8:7F:E5:11:AF:51:3D:07:28:42:B2:46:33:3C:F3:C1:7A:29
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:b8:4f:c5:7b:e7:3d:a1:2d:ab:2e:a5:53:7c:9a:37:f5:bf:
         4f:9b:05:90:e6:d9:45:05:bc:12:53:85:d4:18:bc:28:51:c0:
         0a:f7:af:28:06:5d:a3:69:24:32:c9:51:d6:ab:e1:5f:7b:d3:
         86:4a:b5:4a:13:ce:e2:99:4e:42:00:03:23:8b:c6:e0:88:fe:
         c4:6c:b0:5b:f9:b8:e0:78:a7:42:c5:37:da:5f:9e:53:95:6a:
         ad:79:ce:df:d2:38:c7:ec:fa:15:be:71:26:7b:65:b1:13:0e:
         8e:89:7b:1b:27:7a:3b:52:f5:74:c1:60:38:46:74:31:35:b6:
         ad:69:91:84:23:6b:ce:4f:65:ed:59:db:c9:24:7a:ee:3e:18:
         7f:58:d9:64:3d:c1:a4:15:ee:bc:48:25:d1:95:fc:40:8e:71:
         9a:aa:72:98:dc:06:1b:cf:68:6b:82:fb:3f:e4:0b:dc:57:b1:
         a3:fa:81:5b:d6:a8:f9:a7:85:1d:20:cd:01:3e:a0:0a:c4:bd:
         e2:0f:3d:77:99:04:1d:ed:90:93:11:3a:5d:77:a4:31:54:b7:
         b6:6f:d1:e9:f1:15:f6:f2:14:9a:cf:7a:d8:71:66:c9:5e:25:
         57:f7:44:6c:ed:8a:4e:e6:15:f8:1a:31:ab:c9:a3:2d:32:c1:
         e2:98:19:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org