Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131322e302f32322d3234203d3e20323632373733.roa
File:                     3136382e3233322e3131322e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          RxfnTbPZzkGB6mZCDZ2sQfHUD27I5Scx7JI8whxVVP0=
Subject key identifier:   AE:94:4A:3B:87:55:27:BF:2C:9C:2A:25:C2:6F:3D:97:B3:B1:34:92
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       20A255570659BED0B92705A63F12BAD5BA45B531
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131322e302f32322d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:01:14 +0000
ROA not before:           Tue 09 Aug 2022 12:56:14 +0000
ROA not after:            Tue 08 Aug 2023 13:01:14 +0000
asID:                     262773
IP address blocks:        168.232.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a2:55:57:06:59:be:d0:b9:27:05:a6:3f:12:ba:d5:ba:45:b5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 12:56:14 2022 GMT
            Not After : Aug  8 13:01:14 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:22:d2:11:65:32:92:c4:1e:78:5c:4e:f8:
                    51:6e:7f:14:0b:48:85:50:63:fb:22:ed:14:8a:0b:
                    ef:39:72:4f:f2:54:9e:04:92:15:67:bb:66:d9:e2:
                    22:4b:92:08:20:cd:44:0f:fc:b9:8c:06:d1:44:4f:
                    ec:46:1a:c3:f8:fe:c7:22:af:32:20:ab:52:d8:55:
                    3c:77:94:fd:3a:8b:9a:8b:47:86:42:24:0f:df:55:
                    0b:0a:56:76:96:67:a0:4c:90:7c:8a:94:42:9f:3e:
                    20:58:19:f0:33:16:60:eb:f7:c7:ca:68:64:4b:47:
                    07:57:92:83:bf:ef:c7:af:16:19:6f:d7:37:b9:14:
                    a3:ac:10:47:7c:4c:8e:0a:c1:83:f1:3f:2a:53:9a:
                    e1:9d:36:4c:ee:b9:df:6b:b6:c0:20:7b:83:ab:b2:
                    98:c8:27:77:09:bb:a2:0f:f3:a2:c3:3a:c5:8d:4b:
                    14:0d:33:7b:48:91:07:14:de:66:a3:c6:77:f4:9c:
                    f2:80:e9:61:0f:18:f9:9b:b7:ee:d8:a2:53:de:9c:
                    89:db:94:2b:8c:94:ae:e3:8e:69:51:5f:25:5d:59:
                    bc:78:a3:1f:65:4d:04:b7:e7:76:66:ba:57:8c:c6:
                    d6:73:db:bf:31:47:f2:90:75:05:51:83:91:14:5d:
                    c8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:94:4A:3B:87:55:27:BF:2C:9C:2A:25:C2:6F:3D:97:B3:B1:34:92
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131322e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:d6:88:6c:49:8d:04:ce:5e:95:2e:4e:bf:70:1a:37:51:98:
         bd:01:46:2e:77:22:64:25:b0:a3:92:60:17:7b:70:af:1a:56:
         b6:9b:d0:a8:09:ba:82:79:71:ae:20:21:80:d3:ce:64:c6:bd:
         8e:fd:be:2b:0b:2c:52:de:04:2c:07:4c:0c:31:10:a8:da:51:
         8d:50:28:61:41:0e:c1:f1:66:59:28:b6:4d:d2:0f:f7:6b:73:
         41:14:6e:6b:2e:1b:ac:51:2e:76:73:39:31:78:a8:82:4b:d1:
         2c:77:50:8c:6b:a9:f2:62:22:99:1b:77:68:05:41:14:d3:19:
         9e:a6:ec:70:c0:e4:56:6e:50:b2:88:28:54:77:d3:2b:85:24:
         56:0e:cc:ab:31:3e:28:39:a8:ee:f3:01:6b:9a:b7:8c:2e:44:
         8e:fc:f6:c3:23:7c:12:a1:63:12:66:55:7c:11:a9:2b:4d:a8:
         72:06:ac:19:50:8d:1e:89:2a:ed:c8:94:40:7d:7e:9b:65:94:
         35:4b:99:84:69:fd:ef:57:70:7b:4e:73:71:5c:55:27:07:8c:
         8c:5e:8b:15:ab:0b:1c:39:a1:c3:f4:4b:b5:a2:eb:2b:95:38:
         24:c5:47:1d:90:d3:53:06:07:33:23:ed:d1:2c:4a:2c:33:6c:
         32:89:bd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org