Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32332d3233203d3e20323632373733.roa
File:                     3136382e3139342e3132302e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          H4qCNPQmbFNxk2M9F3x4o+i4m4SHCRvB4dmH+ZBqMLI=
Subject key identifier:   1A:2C:2E:3B:A0:00:5A:D6:00:A4:51:80:0F:8C:C3:84:59:07:09:D6
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1B1CDC9AD2E7E6BFC6A0F2489226EB3850A5F26D
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:51 +0000
ROA not before:           Tue 19 Mar 2024 21:48:51 +0000
ROA not after:            Tue 18 Mar 2025 21:53:51 +0000
asID:                     262773
IP address blocks:        168.194.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1c:dc:9a:d2:e7:e6:bf:c6:a0:f2:48:92:26:eb:38:50:a5:f2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:51 2024 GMT
            Not After : Mar 18 21:53:51 2025 GMT
        Subject: CN=1A2C2E3BA0005AD600A451800F8CC384590709D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:92:37:49:e1:d1:20:a9:ab:52:16:c8:37:
                    e7:62:5f:95:cc:51:f6:59:0c:d5:68:73:02:69:ee:
                    ce:4a:83:d4:a2:1c:4e:d9:1d:15:39:7d:46:ed:53:
                    23:97:86:40:72:30:68:c4:7d:ad:d4:ba:09:48:cc:
                    77:45:ba:3e:24:cc:a9:c0:68:d0:59:e4:8f:c7:e7:
                    12:a9:a5:3e:94:32:05:03:e8:7e:c2:71:99:82:3e:
                    25:4f:27:07:aa:c4:5a:a9:c9:86:1d:31:b2:6a:42:
                    4a:ff:69:68:6b:21:b7:11:36:dd:74:e6:1b:74:0f:
                    d1:5e:5a:16:8f:11:45:79:ae:2e:af:3c:6b:e7:40:
                    09:49:bb:7b:ff:ee:22:c7:d8:8d:ef:6b:3d:61:39:
                    08:b7:73:4b:89:9a:96:c9:49:f7:a1:36:e8:6c:ea:
                    3a:5b:66:b8:79:52:4b:d4:ed:5e:7c:1b:f7:57:81:
                    5d:75:08:35:65:3e:6a:f0:b8:1b:87:71:e3:81:38:
                    cb:04:67:a1:22:d0:b3:2b:59:40:16:05:43:8c:e1:
                    a5:35:62:89:3d:80:f4:68:72:01:12:52:6d:71:b0:
                    b2:1b:f2:33:3e:0a:84:84:c9:9e:59:7d:01:ce:c9:
                    6b:7b:95:4a:7a:80:5c:f9:08:91:7e:f8:bc:e4:7b:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2C:2E:3B:A0:00:5A:D6:00:A4:51:80:0F:8C:C3:84:59:07:09:D6
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:7d:09:53:5a:d6:b4:4f:75:1c:08:44:a0:60:53:71:5e:f3:
         42:6e:9b:99:e3:19:83:ba:53:d2:0b:53:b6:e0:05:c3:b3:18:
         d9:6c:e0:21:ce:18:5d:c0:8e:db:87:f9:1a:50:28:15:2b:20:
         a8:7c:bd:59:dd:30:ea:5a:fc:c2:68:a6:12:ef:56:c3:7e:39:
         e6:0f:68:7c:b2:ed:55:6b:5d:c6:f5:75:05:d0:5e:dc:07:e5:
         d2:cb:2b:bb:bc:d5:a0:4b:6d:3d:fd:bc:f0:4b:0b:38:d7:51:
         1d:6b:a9:d9:0b:12:28:5c:a3:fb:19:4c:7b:56:6f:38:b3:dc:
         ac:5b:37:d1:a0:8d:99:4d:4d:a4:b4:5c:3e:33:d7:6f:64:fc:
         a9:80:be:8a:3c:a1:0f:74:62:37:2b:d1:01:e6:42:38:f2:02:
         1b:61:7f:61:ab:b0:1f:c0:78:4a:3c:4b:ee:5d:ce:24:05:75:
         e7:7b:96:43:26:d0:ca:2b:7e:9d:fb:8c:36:e0:d8:f5:5c:c5:
         ca:d3:44:4b:60:45:1c:82:45:3a:e0:c7:c5:d7:91:c4:4b:06:
         53:cd:06:55:50:a2:a3:94:64:81:a4:d3:fb:1c:67:d3:ec:da:
         29:4b:a8:d8:8f:9d:f4:5f:40:3a:bf:14:78:cb:e6:61:9a:50:
         64:51:7d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org