Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132322e302f32332d3233203d3e203532353638.roa
File:                     3136382e3139342e3132322e302f32332d3233203d3e203532353638.roa (raw, json)
Hash identifier:          lt8/BygKC1Gs17nuvdFIA8cYQZOwv6OVzfPt5HQ8F5k=
Subject key identifier:   B5:B5:C4:36:12:53:18:56:41:76:78:56:47:1B:1E:95:FA:AC:E0:2F
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       18AFB6001CCB381CC94020953F9C8443565810EB
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132322e302f32332d3233203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:11 +0000
ROA not before:           Tue 07 Feb 2023 19:59:11 +0000
ROA not after:            Tue 06 Feb 2024 20:04:11 +0000
asID:                     52568
IP address blocks:        168.194.122.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:af:b6:00:1c:cb:38:1c:c9:40:20:95:3f:9c:84:43:56:58:10:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:11 2023 GMT
            Not After : Feb  6 20:04:11 2024 GMT
        Subject: CN=3082010A0282010100BBA240B0E1CAA24F7C18AB4D541C79C85EC220D0F25A46FF8A3F75074FD1669D5178154FDACBEA11C2646183D426416FFED45EF239A01E1C7F0B8E1161AB18BAEEB4B40FE43322CE8D6257C9F47167DFAE6F7A4582283C3F751355F2579F61613C1B625DE61F163CB36A7E0D4444728D6CCD375D7DEEAA4E0280BD0F8A5F60F496278F97E9A8E91F1151ACC214104C17CD8E1CC51B04C32C50348286470C0BF82DC9DC61020E3F277537CE1D5A685799BA3D98275321BDF3F7EB27641504684E359AF8F13901ECC86B506FFD7033CA0938D0F83FF2998F4F44FBE56A6879D5D6EE93DDCCCAF3BA9B297BCD21B8FF41150EB3DD048ECE6C818A465943897CE1E10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:40:b0:e1:ca:a2:4f:7c:18:ab:4d:54:1c:
                    79:c8:5e:c2:20:d0:f2:5a:46:ff:8a:3f:75:07:4f:
                    d1:66:9d:51:78:15:4f:da:cb:ea:11:c2:64:61:83:
                    d4:26:41:6f:fe:d4:5e:f2:39:a0:1e:1c:7f:0b:8e:
                    11:61:ab:18:ba:ee:b4:b4:0f:e4:33:22:ce:8d:62:
                    57:c9:f4:71:67:df:ae:6f:7a:45:82:28:3c:3f:75:
                    13:55:f2:57:9f:61:61:3c:1b:62:5d:e6:1f:16:3c:
                    b3:6a:7e:0d:44:44:72:8d:6c:cd:37:5d:7d:ee:aa:
                    4e:02:80:bd:0f:8a:5f:60:f4:96:27:8f:97:e9:a8:
                    e9:1f:11:51:ac:c2:14:10:4c:17:cd:8e:1c:c5:1b:
                    04:c3:2c:50:34:82:86:47:0c:0b:f8:2d:c9:dc:61:
                    02:0e:3f:27:75:37:ce:1d:5a:68:57:99:ba:3d:98:
                    27:53:21:bd:f3:f7:eb:27:64:15:04:68:4e:35:9a:
                    f8:f1:39:01:ec:c8:6b:50:6f:fd:70:33:ca:09:38:
                    d0:f8:3f:f2:99:8f:4f:44:fb:e5:6a:68:79:d5:d6:
                    ee:93:dd:cc:ca:f3:ba:9b:29:7b:cd:21:b8:ff:41:
                    15:0e:b3:dd:04:8e:ce:6c:81:8a:46:59:43:89:7c:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B5:C4:36:12:53:18:56:41:76:78:56:47:1B:1E:95:FA:AC:E0:2F
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3132322e302f32332d3233203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:5e:70:aa:19:83:45:32:76:2d:f9:09:cd:cd:51:fe:8f:c7:
         d5:24:63:bc:57:f5:b1:af:bc:6b:75:78:4e:01:c1:16:63:3b:
         58:8e:a9:b7:4c:45:bc:5b:d5:3d:62:7a:e7:5c:fe:54:2b:88:
         75:0e:22:d8:09:23:32:fa:1e:86:7d:1f:43:c9:43:3e:48:dc:
         b0:eb:c2:b2:45:44:c4:99:17:d5:6d:b5:3e:85:3d:04:5a:d8:
         b8:04:f1:e2:c8:ba:05:42:b7:5f:af:8b:01:3d:67:2f:bc:d1:
         d7:e8:d5:29:17:17:07:87:6e:29:32:bf:f6:df:68:e1:37:e0:
         01:79:50:70:11:29:e1:2f:9e:8d:a1:cc:89:08:03:fd:15:0b:
         41:3a:26:11:2d:9f:9d:32:12:21:de:d9:a0:0f:cb:14:5f:51:
         48:60:e3:2b:f2:f9:07:f8:09:f2:bf:34:2d:05:85:60:2a:5c:
         36:d7:71:d7:6a:42:22:db:34:24:6e:20:68:e7:5e:b7:6b:4e:
         c4:70:a2:66:20:37:ab:94:1d:ee:df:72:c9:38:da:f8:55:08:
         a1:61:b7:b3:d9:25:73:b7:17:22:54:80:0c:22:9a:15:a3:28:
         aa:74:f7:cf:49:67:95:48:38:00:65:41:31:8f:43:4d:3f:45:
         8a:b9:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org