Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32322d3232203d3e203532353638.roa
File:                     3136382e3139342e3132302e302f32322d3232203d3e203532353638.roa (raw, json)
Hash identifier:          xRY016oU14wMY4ZGmH9DsbfPtHyyrPcTs5Z+GVvlKdc=
Subject key identifier:   DA:4B:F5:AA:24:4C:7A:65:33:11:06:5B:DF:41:52:23:8C:43:06:17
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3549C13999AF7B2FE995B65F742EC314CA4A7C7A
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32322d3232203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:12 +0000
ROA not before:           Tue 07 Feb 2023 19:59:12 +0000
ROA not after:            Tue 06 Feb 2024 20:04:12 +0000
asID:                     52568
IP address blocks:        168.194.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:49:c1:39:99:af:7b:2f:e9:95:b6:5f:74:2e:c3:14:ca:4a:7c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:12 2023 GMT
            Not After : Feb  6 20:04:12 2024 GMT
        Subject: CN=3082010A0282010100DA348606A6E6250AC093F813DF79D3A87809D51D3CB6342284082EAA0065CEFA4E66BAF9DC5157A1226997F7FD386EDD7480679BBE6550EC18AE0452C688F9D72760B4599FFAB98BEDFC709324586C2BA915B35251DDE235A7B8DF122D4347F3E41602AE842ECE374C677AEE365FD04C6C8917C63E6E3FE4A11262C80E347D0C2589D8DEB0BAB319AA961EA78575EAFBA998F7394CB4C08BF9CEE896E29CA2322B078A6B303145D092E1FD471D56215D0C282AB962FB7615371E810841B938E04CC17ED329327440164A5FD36200358B02EEE5C73AEF37FC755B81331F5C5D3FF337EF79179DB7945174BC2D5C1E4C2263158F1B3439141A328B5E9AD369172D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:86:06:a6:e6:25:0a:c0:93:f8:13:df:79:
                    d3:a8:78:09:d5:1d:3c:b6:34:22:84:08:2e:aa:00:
                    65:ce:fa:4e:66:ba:f9:dc:51:57:a1:22:69:97:f7:
                    fd:38:6e:dd:74:80:67:9b:be:65:50:ec:18:ae:04:
                    52:c6:88:f9:d7:27:60:b4:59:9f:fa:b9:8b:ed:fc:
                    70:93:24:58:6c:2b:a9:15:b3:52:51:dd:e2:35:a7:
                    b8:df:12:2d:43:47:f3:e4:16:02:ae:84:2e:ce:37:
                    4c:67:7a:ee:36:5f:d0:4c:6c:89:17:c6:3e:6e:3f:
                    e4:a1:12:62:c8:0e:34:7d:0c:25:89:d8:de:b0:ba:
                    b3:19:aa:96:1e:a7:85:75:ea:fb:a9:98:f7:39:4c:
                    b4:c0:8b:f9:ce:e8:96:e2:9c:a2:32:2b:07:8a:6b:
                    30:31:45:d0:92:e1:fd:47:1d:56:21:5d:0c:28:2a:
                    b9:62:fb:76:15:37:1e:81:08:41:b9:38:e0:4c:c1:
                    7e:d3:29:32:74:40:16:4a:5f:d3:62:00:35:8b:02:
                    ee:e5:c7:3a:ef:37:fc:75:5b:81:33:1f:5c:5d:3f:
                    f3:37:ef:79:17:9d:b7:94:51:74:bc:2d:5c:1e:4c:
                    22:63:15:8f:1b:34:39:14:1a:32:8b:5e:9a:d3:69:
                    17:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4B:F5:AA:24:4C:7A:65:33:11:06:5B:DF:41:52:23:8C:43:06:17
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32322d3232203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:0b:8b:78:4a:98:99:65:80:54:22:d7:95:5c:c5:4f:5c:1e:
         05:d9:83:07:7e:d9:0d:7d:4f:e1:89:86:bb:5a:eb:5a:0b:10:
         bc:61:c4:ad:6d:f2:e8:a9:26:ef:85:a2:f9:11:47:d9:a9:8d:
         18:5a:b7:0e:ed:64:75:11:7e:44:56:59:6e:34:22:0c:ff:3b:
         ee:74:b1:fa:8a:de:1c:5f:5e:66:57:37:f8:ba:b0:26:b8:58:
         b5:e3:f6:b1:92:1f:1e:86:5f:b9:60:50:1e:02:8c:21:7d:cc:
         28:a9:1c:a0:42:16:c8:45:80:85:13:cf:74:63:50:be:2a:30:
         66:04:86:f1:17:9f:5c:c4:18:71:9b:02:5a:31:92:90:f6:8a:
         90:11:2e:91:65:3c:78:e2:7d:dc:af:4b:09:72:28:47:39:0d:
         82:88:fd:8c:00:dd:a2:c9:46:d1:72:89:c6:88:da:c5:31:68:
         49:0a:a3:82:87:6a:9c:e1:8c:a7:4d:78:f7:85:39:fe:fa:df:
         a7:bf:55:5b:5f:02:56:53:45:dd:e5:17:ca:be:77:e4:95:33:
         29:64:0e:69:7e:31:f1:11:1b:37:84:dd:12:66:57:f0:c5:e8:
         a4:9c:b2:10:eb:d5:8b:18:fe:11:5a:d8:5c:e7:0d:38:e0:f4:
         3c:cd:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org