Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131342e302f32342d3234203d3e20323632373733.roa
File:                     3136382e3233322e3131342e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          U6Em+Vtq1K/cy2+9emge/4pncQgcNBvGCOtCiSPLcT0=
Subject key identifier:   83:F4:B9:AB:0B:79:C1:05:69:D4:F6:C5:26:56:89:13:3F:3F:CC:DE
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1669F6C442A66A169A1BC68C68B3A60DA90DCA76
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131342e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:54:22 +0000
ROA not before:           Tue 19 Mar 2024 21:49:22 +0000
ROA not after:            Tue 18 Mar 2025 21:54:22 +0000
asID:                     262773
IP address blocks:        168.232.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:69:f6:c4:42:a6:6a:16:9a:1b:c6:8c:68:b3:a6:0d:a9:0d:ca:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:49:22 2024 GMT
            Not After : Mar 18 21:54:22 2025 GMT
        Subject: CN=83F4B9AB0B79C10569D4F6C5265689133F3FCCDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:38:1f:e9:63:32:6e:d1:36:1b:8e:14:bf:
                    49:fa:0d:4e:57:52:b6:0e:b6:5b:a6:65:0a:6e:7a:
                    97:75:56:01:a8:44:72:38:45:8a:1d:0d:4b:69:62:
                    e5:bf:09:eb:67:46:24:fa:2d:0e:99:1e:37:01:f8:
                    c6:4a:dc:6f:af:cf:47:c3:8e:ba:ca:69:ea:5e:e4:
                    78:86:92:ff:58:dd:01:b2:1b:4e:66:09:70:78:c7:
                    b5:9e:f5:66:c9:83:dc:0a:e3:20:37:bd:06:a7:a6:
                    5a:15:16:4c:c9:29:b1:43:42:11:99:7e:c5:36:6f:
                    b7:70:44:69:04:1d:8b:9f:a3:71:ae:b7:d2:13:cc:
                    b3:0d:c6:c2:f1:81:87:99:f3:1d:cf:a7:1b:ee:5d:
                    29:1e:25:a5:23:c6:5c:71:f4:33:b6:94:95:0d:2e:
                    a9:4f:62:7d:1d:ff:df:f4:15:96:d6:b7:1a:cf:06:
                    38:60:7f:7a:3d:cf:79:33:fb:23:f2:e3:ba:4a:8d:
                    54:ac:23:b6:6b:92:22:f2:17:46:7a:d4:cb:8c:39:
                    49:a5:8d:78:83:87:8c:f0:06:ea:d6:c8:b9:e6:b2:
                    b1:ad:53:b4:b1:77:97:ed:24:49:8a:a4:78:42:66:
                    89:60:f0:bb:6d:f6:83:cf:80:43:32:57:c4:14:d8:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F4:B9:AB:0B:79:C1:05:69:D4:F6:C5:26:56:89:13:3F:3F:CC:DE
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131342e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a1:e1:46:ab:d1:35:78:fb:5e:4b:ba:52:a0:09:45:8e:1c:
         72:a1:64:22:1d:ae:be:63:56:4f:b3:b8:c6:8b:2c:f4:05:23:
         89:2b:46:c3:19:b7:6b:ca:cb:89:91:78:37:54:ea:a9:b4:81:
         83:98:66:5d:4b:f8:c4:15:f6:e9:73:8a:23:ac:e7:df:12:f9:
         af:36:d0:4a:f7:5a:84:8b:48:0e:12:09:82:12:db:ab:d2:c4:
         37:b1:85:e4:6a:cd:4d:bd:4e:29:3a:55:79:70:a3:11:9c:77:
         d4:5b:5c:09:ac:94:b1:af:ae:a0:ab:7f:72:62:c1:eb:99:c4:
         15:45:b5:61:a2:92:b1:17:cb:ff:09:78:fd:fb:7f:9f:b7:ea:
         36:e1:33:e6:ec:63:f9:50:b6:0d:44:0a:99:b7:44:08:1f:92:
         7c:a0:86:19:ca:99:51:21:3e:42:23:8b:90:c6:53:95:0f:e3:
         83:16:3e:56:db:84:a6:dd:cc:ca:f6:4f:75:2c:4c:dd:05:bf:
         c2:5a:98:29:4f:dc:91:1b:fa:f9:ef:60:d9:3d:b8:37:d7:ef:
         3e:8b:33:93:88:4c:94:96:3f:60:33:58:da:4c:28:c8:a0:10:
         a1:33:7f:7c:d0:53:7e:c9:6f:73:68:b4:9f:20:c3:e0:2b:9c:
         ae:d2:16:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org