Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131342e302f32332d3233203d3e20323632373733.roa
File:                     3136382e3233322e3131342e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          G+BL0ciN7tNqAByTKfy4uzCNMbL6ZpvQbZ7ZkOMWFhQ=
Subject key identifier:   A1:AC:00:BD:AB:64:81:0C:CF:F3:87:62:33:19:79:56:73:36:B9:9A
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       21930DA0CF418E6DB5836BC2017DA2A7E45E2543
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131342e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:22 +0000
ROA not before:           Tue 27 Sep 2022 19:14:22 +0000
ROA not after:            Tue 26 Sep 2023 19:19:22 +0000
asID:                     262773
IP address blocks:        168.232.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:93:0d:a0:cf:41:8e:6d:b5:83:6b:c2:01:7d:a2:a7:e4:5e:25:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:22 2022 GMT
            Not After : Sep 26 19:19:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:c9:64:31:40:37:f9:08:a3:ee:97:fe:b3:
                    04:3c:c7:4a:ad:a3:33:96:7d:a6:87:35:39:47:41:
                    99:c1:c4:b6:98:96:9c:9f:dd:7f:64:a6:35:24:0d:
                    27:4b:2b:6d:1d:c6:1b:2e:a0:99:96:5c:eb:59:91:
                    2f:3b:cc:90:9c:44:6f:4a:f8:7d:3e:ff:02:1c:dd:
                    e7:67:88:4b:f5:8f:4b:e5:b8:5d:74:8b:cc:01:c2:
                    d7:97:84:7d:23:02:c4:8b:de:a8:17:9e:ab:ba:a0:
                    cd:86:73:3f:2f:2b:92:d8:54:54:ea:79:c1:d5:93:
                    d8:6b:e2:0d:41:26:21:5d:4e:94:4e:3f:bf:7f:91:
                    29:ed:2c:3e:a3:14:36:c2:01:1d:71:fa:76:47:42:
                    40:9c:0d:24:f6:a4:37:9d:ab:4c:57:f2:18:dd:55:
                    76:c9:93:c3:25:8e:e4:42:11:23:32:82:0d:67:a4:
                    93:4e:d3:a5:64:30:be:e7:7a:03:ac:01:84:e1:32:
                    2f:24:aa:88:34:7e:1f:11:69:a5:d2:a8:44:fe:26:
                    24:13:d0:aa:e6:7b:41:65:00:3a:e8:e6:57:39:36:
                    82:18:d0:ec:95:15:bd:37:de:95:6e:41:82:22:ce:
                    48:8c:d0:48:af:e6:d5:8e:73:89:bf:4a:8c:4e:4e:
                    d5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AC:00:BD:AB:64:81:0C:CF:F3:87:62:33:19:79:56:73:36:B9:9A
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131342e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:05:77:22:35:ac:25:2f:89:4f:be:3c:f1:6e:e0:3a:3a:46:
         2c:47:6c:31:3e:99:d2:0a:97:27:46:99:33:a2:33:e5:c1:51:
         18:7d:5f:ee:6b:6c:ba:9b:3c:43:da:e6:ba:7e:1a:2d:a9:74:
         32:b3:2e:d4:31:55:84:3c:ef:11:e7:17:68:b9:1c:cf:88:0a:
         55:a4:94:48:df:73:68:0a:dc:01:b6:74:0c:65:59:b1:fb:10:
         d5:ae:ee:59:c9:48:3f:1c:c0:de:da:e8:4c:84:d1:e8:10:f6:
         52:4e:cb:f7:ad:51:c8:77:30:be:ab:18:5a:58:ae:59:06:4c:
         59:bb:d4:9d:d0:15:ec:e2:79:66:6e:a1:a4:9a:50:ee:17:97:
         71:04:5f:11:7f:88:2f:37:a3:0e:b0:28:59:2e:97:77:f5:23:
         a6:d7:46:c0:31:1d:02:fb:f8:b6:4b:3c:9f:43:b7:ce:75:ca:
         6f:c6:4f:1c:33:a2:62:56:ec:b2:0e:ac:2c:7d:01:9c:f8:86:
         6e:86:e2:8c:29:f5:0b:66:db:f8:10:e5:5a:11:36:51:60:02:
         60:08:e8:a8:ff:b7:85:47:ba:07:1d:80:fc:25:4b:29:21:ed:
         9e:cc:34:88:ce:00:d0:88:5c:a1:e7:2a:b0:a0:b8:6d:dc:1f:
         4e:7e:6e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org