Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131322e302f32332d3233203d3e20323632373733.roa
File:                     3136382e3233322e3131322e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          3uwneiGbR75Oq3L5G9siEKscErg/GBFIo4qn0mGKNMg=
Subject key identifier:   52:7D:EF:CC:1D:C8:DB:CF:7F:1C:AF:E6:75:C7:D3:18:53:2C:FD:68
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       124851C42DCF22DA3824E819F1556A778C0EB974
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131322e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:54:22 +0000
ROA not before:           Tue 19 Mar 2024 21:49:22 +0000
ROA not after:            Tue 18 Mar 2025 21:54:22 +0000
asID:                     262773
IP address blocks:        168.232.112.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:48:51:c4:2d:cf:22:da:38:24:e8:19:f1:55:6a:77:8c:0e:b9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:49:22 2024 GMT
            Not After : Mar 18 21:54:22 2025 GMT
        Subject: CN=527DEFCC1DC8DBCF7F1CAFE675C7D318532CFD68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:f0:69:fc:1d:fe:ab:7d:9c:cc:29:cd:b5:
                    19:2a:d0:4f:22:4c:e5:22:ea:d5:d7:2f:9b:54:34:
                    80:6c:14:2c:9f:70:09:16:af:43:40:33:b8:a8:2e:
                    3f:d4:4c:45:6f:a9:6b:a3:51:ef:78:5a:de:9c:ec:
                    7a:ea:a5:f9:cb:26:5c:b2:db:28:bd:ac:08:13:e9:
                    71:87:f3:f0:5e:ca:db:26:9a:63:3d:4b:55:a3:ca:
                    e9:00:b3:71:12:ef:48:cc:c5:78:8b:a9:7e:01:fd:
                    97:8f:e7:6b:2a:0e:46:78:73:4d:28:2c:4e:04:3c:
                    10:68:3f:81:46:9c:69:88:fc:86:82:a2:06:ec:87:
                    1a:72:55:5a:d1:fa:7f:7d:4a:33:ca:b1:47:58:e3:
                    23:3d:86:6a:cf:59:46:71:c8:2c:d4:19:de:47:33:
                    44:b5:22:71:53:22:44:5b:0c:e1:98:50:7c:75:79:
                    7e:7e:64:23:7e:da:ce:ae:a2:c2:2d:9b:5f:ec:67:
                    af:e7:33:50:5e:ab:50:85:d9:2a:93:6f:a1:2f:ae:
                    69:48:4b:3c:92:83:08:04:5d:59:eb:88:e5:27:36:
                    3e:1b:7d:be:fa:cc:af:18:44:e0:6e:d4:49:db:7b:
                    9f:4c:28:19:ee:41:71:45:68:38:d0:7c:a2:94:ab:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7D:EF:CC:1D:C8:DB:CF:7F:1C:AF:E6:75:C7:D3:18:53:2C:FD:68
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131322e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:cd:ab:c3:f9:6f:b6:24:b5:09:b8:f0:8d:b2:a3:0d:d6:
         23:3c:c3:92:b0:de:63:6c:7c:61:fc:a5:66:7d:d7:80:23:c0:
         e0:89:66:ba:02:1a:e2:03:12:a6:37:c0:8d:98:a5:0f:85:ca:
         90:fb:b5:a0:68:7d:8d:b5:54:fc:8b:03:f1:b8:17:87:a9:e8:
         16:e8:a1:7b:11:a1:fa:7e:9f:b3:ec:1b:07:1c:c7:f1:fb:dd:
         2d:81:92:e6:53:44:fd:fc:a2:a9:5a:44:ff:80:0b:81:06:57:
         d3:39:be:03:73:31:5f:f2:5e:f0:7f:bb:28:bb:30:34:96:8f:
         26:ca:d4:b5:ba:4b:a9:d9:15:11:ee:4e:62:05:e7:7f:82:92:
         0c:92:4a:04:da:0c:b1:c9:35:e4:7b:bd:fa:92:cd:bb:17:31:
         ad:19:89:78:c5:79:0a:b7:63:b9:f4:bc:44:71:6a:97:a8:22:
         41:56:62:ee:26:2a:ba:8b:f8:6b:b9:07:08:bc:f5:48:5a:a5:
         0f:f7:ee:03:3e:f9:a1:37:0b:7a:e2:2e:ae:8d:6a:b9:f8:75:
         59:95:bd:7b:ed:8a:ba:b2:e8:d1:64:89:f9:15:02:b8:29:af:
         23:f3:d8:5b:1b:de:4d:1e:da:21:ff:74:99:3f:d1:1a:1a:d3:
         9d:ce:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org