Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232302e302f32342d3234203d3e20323632373733.roa
File:                     3137302e3233312e3232302e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          vXo5yDfkw03QGVWNaK0aQd4EUE5VpdwwFQRYOqMVEds=
Subject key identifier:   3F:88:CA:38:FB:53:3E:4C:08:5B:D5:D7:14:5D:A5:60:07:4A:55:40
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       40BADD9464D8900BE95B52B4B333EF6FE169E2EE
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232302e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:27:26 +0000
ROA not before:           Tue 09 Aug 2022 13:22:26 +0000
ROA not after:            Tue 08 Aug 2023 13:27:26 +0000
asID:                     262773
IP address blocks:        170.231.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ba:dd:94:64:d8:90:0b:e9:5b:52:b4:b3:33:ef:6f:e1:69:e2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:22:26 2022 GMT
            Not After : Aug  8 13:27:26 2023 GMT
        Subject: CN=3082010A0282010100BBAB099FA0BC96D0104437CD32128C747BDDC77B3B2E5B74F37065B0DEEA85D78BED349606DF8119099E10A496C9723C8A01AACE33F393DCBFDF61E8D496646615ABC2DEF2433B6C5CF32C1CC9366B0980BC430182BB0FFEF9CB873B7BA0B5F0E7DCA603D03361712D5A9D11D22E869EA2BABD60489C93FAA926541DABB4D246B713F2D897CB2EB10B1E7A5B5C6C75E9D7159773DE3F169250ADAAF66FAF9E5D2F1C5A94CEBFADA195E01DBF9697686CDAB72D18A27A9D2DCFE48EC771A55442531F3556D61657CDE0F5B59E588E562BACB638E879B790F4E7F477560F9E28AF74CBA36F0B4286D42CB1613E33A21EEF845FB2B49D989A595F5DC761729160350203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:09:9f:a0:bc:96:d0:10:44:37:cd:32:12:
                    8c:74:7b:dd:c7:7b:3b:2e:5b:74:f3:70:65:b0:de:
                    ea:85:d7:8b:ed:34:96:06:df:81:19:09:9e:10:a4:
                    96:c9:72:3c:8a:01:aa:ce:33:f3:93:dc:bf:df:61:
                    e8:d4:96:64:66:15:ab:c2:de:f2:43:3b:6c:5c:f3:
                    2c:1c:c9:36:6b:09:80:bc:43:01:82:bb:0f:fe:f9:
                    cb:87:3b:7b:a0:b5:f0:e7:dc:a6:03:d0:33:61:71:
                    2d:5a:9d:11:d2:2e:86:9e:a2:ba:bd:60:48:9c:93:
                    fa:a9:26:54:1d:ab:b4:d2:46:b7:13:f2:d8:97:cb:
                    2e:b1:0b:1e:7a:5b:5c:6c:75:e9:d7:15:97:73:de:
                    3f:16:92:50:ad:aa:f6:6f:af:9e:5d:2f:1c:5a:94:
                    ce:bf:ad:a1:95:e0:1d:bf:96:97:68:6c:da:b7:2d:
                    18:a2:7a:9d:2d:cf:e4:8e:c7:71:a5:54:42:53:1f:
                    35:56:d6:16:57:cd:e0:f5:b5:9e:58:8e:56:2b:ac:
                    b6:38:e8:79:b7:90:f4:e7:f4:77:56:0f:9e:28:af:
                    74:cb:a3:6f:0b:42:86:d4:2c:b1:61:3e:33:a2:1e:
                    ef:84:5f:b2:b4:9d:98:9a:59:5f:5d:c7:61:72:91:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:88:CA:38:FB:53:3E:4C:08:5B:D5:D7:14:5D:A5:60:07:4A:55:40
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232302e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:1c:d2:b1:cf:cb:e4:0f:f0:50:b6:b1:91:fa:6f:67:2c:1b:
         b8:88:56:00:1f:0d:46:de:9c:47:8a:fd:d5:f4:bb:81:01:b1:
         0e:36:0a:f2:69:cf:b1:d4:d2:60:a1:4f:84:48:af:c7:d0:20:
         2f:46:d1:e2:61:be:a7:21:7d:fa:7e:85:0f:30:0c:cc:d4:20:
         73:24:06:95:aa:3b:2d:df:b4:58:e7:24:bb:02:e7:bb:20:5c:
         e8:2e:54:2b:55:f1:29:de:96:78:ac:ba:2c:11:16:cf:a6:e7:
         d1:da:94:30:3f:32:63:3e:b6:ef:98:fb:ca:cb:92:90:93:4a:
         53:c7:77:2b:9e:46:17:08:3b:84:a9:ff:ae:38:74:8e:81:01:
         46:be:1b:0d:5c:1d:53:d1:de:c8:f0:74:b9:28:46:b1:db:67:
         b6:19:39:5e:b1:95:4d:f4:3b:3c:a3:a6:cd:4b:b0:d1:48:cb:
         e8:ff:54:3a:95:c2:08:2a:1b:4f:fb:c0:e3:18:b5:91:c3:a0:
         90:4b:52:36:ae:58:af:3d:5d:5f:3a:fe:5c:5e:3d:dd:7f:b7:
         92:25:4d:35:e0:6a:06:2f:4e:7e:a8:b2:e7:79:d8:79:29:00:
         a1:55:03:1e:fd:e7:03:2b:fc:a3:ab:68:ea:01:fb:a9:95:4d:
         56:df:8d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org