Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232302e302f32332d3233203d3e20323632373733.roa
File:                     3137302e3233312e3232302e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          PZ/zbu+16lK0nejjiO3Si5H8f48E4SuH4qT5rx35/OQ=
Subject key identifier:   D3:B3:4C:C4:7E:D1:5D:D6:A0:1E:7B:34:25:F3:9A:A7:63:4D:06:C9
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1C20A2D0A0EE76F8ADF979ED32A020F0F90F6443
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232302e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:44 +0000
ROA not before:           Tue 19 Mar 2024 21:48:44 +0000
ROA not after:            Tue 18 Mar 2025 21:53:44 +0000
asID:                     262773
IP address blocks:        170.231.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:20:a2:d0:a0:ee:76:f8:ad:f9:79:ed:32:a0:20:f0:f9:0f:64:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:44 2024 GMT
            Not After : Mar 18 21:53:44 2025 GMT
        Subject: CN=D3B34CC47ED15DD6A01E7B3425F39AA7634D06C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:31:41:36:1d:c3:be:8a:11:82:1e:74:bd:
                    b2:a6:12:a1:64:ef:da:59:68:57:41:63:f5:2a:6e:
                    a5:03:cb:5a:ed:5d:15:8a:21:08:e0:02:77:a9:12:
                    fb:3b:2f:73:77:07:09:49:f7:95:66:d2:df:6c:6d:
                    55:71:4a:80:b9:3c:9c:3e:e4:d3:c2:7e:d3:c1:8d:
                    75:e7:24:75:9e:fd:e2:88:e8:1b:f6:d8:58:cc:18:
                    a6:fc:34:0f:06:c5:69:1b:c2:ba:4c:20:a2:66:be:
                    dc:ae:9b:de:da:90:97:9a:86:4f:83:86:46:89:9d:
                    10:1e:43:c6:6b:03:1e:e6:7a:52:a1:55:45:54:c4:
                    4c:d2:82:a3:e1:7e:88:b7:43:44:2c:c1:4f:58:74:
                    51:45:c2:14:e0:e1:9d:56:95:ed:90:8f:1d:83:d3:
                    6b:48:38:74:60:c8:c6:60:36:3c:71:af:92:a4:da:
                    de:7f:1c:6d:e8:dd:81:17:ae:b4:43:5c:e7:3b:bb:
                    36:5b:c5:2d:ab:d4:d0:35:d5:bd:13:5e:7a:9a:a1:
                    e6:aa:8a:8d:a1:88:9a:e3:75:ca:a4:5c:7c:66:dc:
                    9f:3c:08:b4:aa:23:d1:7e:37:31:25:8c:0a:ff:ee:
                    52:0d:a6:11:b8:f9:5a:c9:f2:0f:a1:de:c4:f6:50:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B3:4C:C4:7E:D1:5D:D6:A0:1E:7B:34:25:F3:9A:A7:63:4D:06:C9
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232302e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:59:ce:e3:1a:07:09:44:9d:1b:d4:1a:47:2c:b3:5a:e2:f2:
         92:d0:89:7a:d5:5c:b9:c1:ee:ef:b6:a0:f1:41:54:e9:2d:d8:
         34:13:e1:a0:05:a2:a2:30:af:96:a3:d9:2b:26:ba:5a:32:5d:
         6e:ca:42:52:a2:6c:c6:c0:dc:9d:85:93:c1:49:73:0f:71:f6:
         9d:9b:39:53:f6:2b:cf:1d:28:9a:b6:06:f7:ed:ca:04:eb:d6:
         ad:13:c8:4d:66:2f:66:c4:02:ff:3c:3e:99:ec:b2:9e:52:8a:
         8e:a7:8d:ed:da:83:5e:c1:73:c3:d4:89:2e:ba:da:e0:6a:53:
         d9:82:e3:ed:e9:d6:17:10:ee:05:96:fe:ea:e7:58:d1:08:03:
         3b:25:56:7f:26:ce:e3:f7:14:19:c1:d7:e7:d8:de:f9:53:b3:
         9d:97:be:04:c4:5e:51:9f:13:78:aa:2c:5c:8d:fd:dd:63:01:
         6e:aa:10:1d:41:e1:d5:fc:00:03:e6:11:b4:5a:7d:8b:40:15:
         6c:8d:51:8d:75:95:b2:34:11:6c:96:5c:89:f2:25:f5:77:01:
         97:ef:c6:17:76:6b:7f:92:67:fc:69:89:6f:4b:b8:5b:67:83:
         da:67:5a:cf:72:35:97:25:bc:61:28:9d:15:ea:4b:d3:55:01:
         3c:a0:b0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org