Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32332d3233203d3e203532353638.roa
File:                     3136382e3139342e3132302e302f32332d3233203d3e203532353638.roa (raw, json)
Hash identifier:          f8WFhg2hdCCAgW7nXq5/sKgrrB7vSMNlTCfPqmgjzUs=
Subject key identifier:   82:01:11:9C:C5:5B:66:88:5B:82:F5:29:61:0D:0C:27:77:31:5C:60
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       7DC9793BDDB24D6A5BF5C09E809E7C66779B5A27
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32332d3233203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:12 +0000
ROA not before:           Tue 07 Feb 2023 19:59:12 +0000
ROA not after:            Tue 06 Feb 2024 20:04:12 +0000
asID:                     52568
IP address blocks:        168.194.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c9:79:3b:dd:b2:4d:6a:5b:f5:c0:9e:80:9e:7c:66:77:9b:5a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:12 2023 GMT
            Not After : Feb  6 20:04:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:61:49:c6:9f:5e:e7:2d:5a:0b:ae:73:73:
                    59:73:99:c4:a1:67:3d:11:e5:a9:fb:fa:f0:13:fd:
                    f5:e5:b9:99:77:c4:80:ad:01:70:32:bc:32:34:4b:
                    d4:2c:34:e9:c9:0d:f1:12:5f:38:5e:75:ca:7d:23:
                    a4:61:54:33:7a:a2:84:e7:97:08:b6:d2:52:71:e1:
                    7b:2f:52:71:84:5d:ba:ae:a0:13:24:04:a0:f1:d6:
                    9a:7b:67:44:9b:bd:ba:79:c6:7c:74:cf:db:59:f1:
                    f2:4a:d7:ff:29:4f:8e:f1:b7:21:d4:63:9c:4a:e1:
                    4e:7f:4d:4d:c8:50:18:df:85:88:e8:60:fa:89:4d:
                    dc:5c:21:ce:93:24:0f:4c:af:de:74:f0:53:8e:4d:
                    1d:48:3d:be:8b:8d:c4:eb:c4:d6:81:ce:7f:7b:66:
                    86:7c:13:68:31:03:5a:e4:10:f5:f1:bd:54:c6:53:
                    3c:8c:5d:39:e7:02:65:7d:6b:1e:e8:a2:1a:8d:43:
                    4e:e7:6b:2d:a9:d1:e2:15:77:dd:d2:e6:56:20:cb:
                    a4:46:d8:a7:4d:78:b4:ee:0c:d7:ca:1d:ac:84:f7:
                    4e:39:f1:5d:04:c2:49:ad:43:74:67:45:e8:5a:b7:
                    2e:66:54:a5:13:5a:e5:1d:0f:b2:39:b4:27:7c:56:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:01:11:9C:C5:5B:66:88:5B:82:F5:29:61:0D:0C:27:77:31:5C:60
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132302e302f32332d3233203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:3d:ce:68:02:57:82:63:ac:96:30:18:51:f4:30:3f:94:e8:
         2b:c7:c3:1d:15:33:27:7b:85:a5:42:f2:a2:ec:41:57:f0:ff:
         be:c3:34:f5:3b:ef:e4:51:24:9d:3b:61:ce:6e:32:a4:6a:cf:
         55:4d:24:bc:47:f0:f9:fa:b2:33:af:18:85:6c:f1:6c:32:7b:
         83:2f:80:c7:b9:2a:ec:2c:30:8a:85:a4:81:f6:4d:4f:1a:d8:
         9c:1f:58:67:e0:f9:42:0f:e0:85:98:e4:aa:66:d4:81:e7:f7:
         94:4c:ca:30:62:25:c3:59:10:b9:88:b7:63:34:42:25:e0:b1:
         7a:d6:aa:51:c6:df:53:86:7b:a7:52:bf:e1:9d:25:8d:e0:63:
         d3:ed:70:b0:42:06:80:c3:5d:ac:8a:d8:fb:fd:d4:b8:f4:e1:
         0f:e9:84:5a:8d:2f:b2:9d:7a:01:db:30:a9:20:a3:86:f1:9d:
         f5:37:59:c0:47:e1:c6:5d:28:a0:3a:b8:7f:3c:18:67:e3:d8:
         6a:2b:56:08:0a:f4:d9:80:f1:03:29:ad:56:08:a3:ab:59:0a:
         c3:4c:68:e3:5a:68:a9:c6:4b:2c:f6:ab:3f:e3:c9:1a:ec:24:
         1e:79:51:56:2c:88:58:c2:0d:49:ed:bb:48:3c:a6:40:3b:50:
         76:c9:ad:9d
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUfcl5O92yTWpb9cCegJ58ZnebWicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMzAyMDcxOTU5MTJaFw0yNDAyMDYyMDA0MTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzhGNTYxNDlDNjlGNUVFNzJE
NUEwQkFFNzM3MzU5NzM5OUM0QTE2NzNEMTFFNUE5RkJGQUYwMTNGREY1RTVCOTk5
NzdDNDgwQUQwMTcwMzJCQzMyMzQ0QkQ0MkMzNEU5QzkwREYxMTI1RjM4NUU3NUNB
N0QyM0E0NjE1NDMzN0FBMjg0RTc5NzA4QjZEMjUyNzFFMTdCMkY1MjcxODQ1REJB
QUVBMDEzMjQwNEEwRjFENjlBN0I2NzQ0OUJCREJBNzlDNjdDNzRDRkRCNTlGMUYy
NEFEN0ZGMjk0RjhFRjFCNzIxRDQ2MzlDNEFFMTRFN0Y0RDREQzg1MDE4REY4NTg4
RTg2MEZBODk0RERDNUMyMUNFOTMyNDBGNENBRkRFNzRGMDUzOEU0RDFENDgzREJF
OEI4REM0RUJDNEQ2ODFDRTdGN0I2Njg2N0MxMzY4MzEwMzVBRTQxMEY1RjFCRDU0
QzY1MzNDOEM1RDM5RTcwMjY1N0Q2QjFFRThBMjFBOEQ0MzRFRTc2QjJEQTlEMUUy
MTU3N0RERDJFNjU2MjBDQkE0NDZEOEE3NEQ3OEI0RUUwQ0Q3Q0ExREFDODRGNzRF
MzlGMTVEMDRDMjQ5QUQ0Mzc0Njc0NUU4NUFCNzJFNjY1NEE1MTM1QUU1MUQwRkIy
MzlCNDI3N0M1NjlDMjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyPVhScafXuctWguuc3NZc5nEoWc9EeWp+/rwE/315bmZd8SArQFw
MrwyNEvULDTpyQ3xEl84XnXKfSOkYVQzeqKE55cIttJSceF7L1JxhF26rqATJASg
8daae2dEm726ecZ8dM/bWfHyStf/KU+O8bch1GOcSuFOf01NyFAY34WI6GD6iU3c
XCHOkyQPTK/edPBTjk0dSD2+i43E68TWgc5/e2aGfBNoMQNa5BD18b1UxlM8jF05
5wJlfWse6KIajUNO52stqdHiFXfd0uZWIMukRtinTXi07gzXyh2shPdOOfFdBMJJ
rUN0Z0XoWrcuZlSlE1rlHQ+yObQnfFacIwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FIIBEZzFW2aIW4L1KWENDCd3MVxgMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzYzODJlMzEzOTM0MmUzMTMy
MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMyMzUzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
qMJ4MA0GCSqGSIb3DQEBCwUAA4IBAQC4Pc5oAleCY6yWMBhR9DA/lOgrx8MdFTMn
e4WlQvKi7EFX8P++wzT1O+/kUSSdO2HObjKkas9VTSS8R/D5+rIzrxiFbPFsMnuD
L4DHuSrsLDCKhaSB9k1PGticH1hn4PlCD+CFmOSqZtSB5/eUTMowYiXDWRC5iLdj
NEIl4LF61qpRxt9ThnunUr/hnSWN4GPT7XCwQgaAw12sitj7/dS49OEP6YRajS+y
nXoB2zCpIKOG8Z31N1nAR+HGXSigOrh/PBhn49hqK1YICvTZgPEDKa1WCKOrWQrD
TGjjWmipxkss9qs/48ka7CQeeVFWLIhYwg1J7btIPKZAO1B2ya2d
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org