Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131322e302f32342d3234203d3e20323632373733.roa
File:                     3136382e3233322e3131322e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          KQY8ChAkk58F94RKAUTfVCmvsN6ieZtqmGxjhmsfOhA=
Subject key identifier:   C6:51:1F:4A:FE:73:2B:00:A8:F7:F6:EA:0B:D4:99:B8:48:02:20:DE
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1D80CE57C95580CA87952D0C3C3C6C90B1DC1453
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131322e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:30 +0000
ROA not before:           Tue 27 Sep 2022 19:14:30 +0000
ROA not after:            Tue 26 Sep 2023 19:19:30 +0000
asID:                     262773
IP address blocks:        168.232.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:80:ce:57:c9:55:80:ca:87:95:2d:0c:3c:3c:6c:90:b1:dc:14:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:30 2022 GMT
            Not After : Sep 26 19:19:30 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:20:8b:da:8a:8e:39:54:f5:25:fc:cb:c6:
                    6c:25:41:b7:75:6c:67:fd:fe:8d:f0:2f:46:c5:19:
                    48:d6:63:71:21:f3:73:e0:c8:f0:37:da:57:67:36:
                    b6:67:5b:83:f3:25:fd:d1:db:6f:76:5e:74:0c:95:
                    86:d4:95:21:4c:99:d8:02:0c:5b:97:cc:ea:df:9d:
                    af:b3:98:6a:cf:cc:0c:29:00:27:1b:7e:f2:84:4f:
                    7c:6a:de:e1:ba:f9:da:f7:84:c5:f1:fd:94:5c:93:
                    03:3c:02:c9:be:e1:80:ae:2b:c3:b2:79:6d:05:cf:
                    32:60:4f:23:d9:98:96:af:8b:b1:1b:0d:ea:a3:52:
                    74:d8:6c:e1:4a:8d:aa:51:7f:a3:e6:d2:31:9a:1a:
                    3f:be:63:db:4b:9d:a7:8c:7b:90:41:62:0b:7d:38:
                    59:fa:e1:76:f2:71:03:0d:bb:73:be:b5:16:66:f7:
                    83:88:5c:7a:9a:6a:05:19:e5:bd:72:e1:a9:f7:0f:
                    cd:94:50:62:c2:d3:46:86:80:8e:e5:8a:58:24:d4:
                    39:2d:7d:55:f9:08:14:5c:c8:d8:b6:68:85:44:fa:
                    37:df:9d:fa:8c:c3:64:d2:1e:ed:f9:dd:9c:32:b1:
                    bf:1b:9f:11:9e:1e:03:13:1d:68:55:e4:25:15:9e:
                    0d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:51:1F:4A:FE:73:2B:00:A8:F7:F6:EA:0B:D4:99:B8:48:02:20:DE
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131322e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:49:fb:92:f0:39:a0:e6:4d:d4:65:dc:5c:a2:cf:d7:3a:47:
         10:9e:15:94:2d:7d:53:c2:d2:ca:99:92:2f:81:11:88:97:bd:
         67:ef:d0:06:89:08:5e:17:f2:bc:93:f2:d9:d2:b2:e3:a4:00:
         2e:1f:73:a9:69:03:b2:6f:50:81:7b:4b:87:10:e5:bb:29:77:
         08:44:e4:5a:35:52:59:11:7c:05:d4:f8:83:2d:1f:15:67:cd:
         41:04:55:7f:17:26:f1:aa:57:77:b5:d6:10:83:a4:bb:8f:8f:
         fa:d0:16:fe:63:22:a5:74:fb:4c:de:3e:dc:17:59:e8:6d:70:
         a7:7c:eb:47:d2:56:1c:cb:de:83:11:2b:17:27:3a:0a:9b:9e:
         3e:10:29:0a:61:3f:31:d3:66:dc:3a:44:9a:74:3e:4d:5c:e6:
         ca:04:55:5b:37:89:07:b4:ae:fa:df:b3:9e:82:4c:40:4c:4e:
         fa:1a:96:87:db:1e:81:f3:15:0b:4d:a6:da:ec:47:b3:5d:95:
         16:f5:7f:c4:a3:57:07:ba:00:0d:42:b7:3e:9e:f2:c5:04:21:
         2b:68:d5:dd:b3:a6:30:17:e6:86:fd:f1:4a:49:36:55:cc:0c:
         ed:23:22:fa:47:ed:99:27:93:e3:c3:52:94:98:2f:5b:a8:2c:
         fb:93:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org