Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232312e302f32342d3234203d3e20323632373733.roa
File:                     3137302e3233312e3232312e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          jVU/udqr4XZoyINaX1nA2/FRxivAN15MXBVSlTfs32g=
Subject key identifier:   29:44:D9:02:5E:51:D0:B1:68:8A:31:61:D5:22:48:A3:3F:C1:DB:3F
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       6F5D326A48632400767F68D96462F868AFAD8A9F
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232312e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:27:26 +0000
ROA not before:           Tue 09 Aug 2022 13:22:26 +0000
ROA not after:            Tue 08 Aug 2023 13:27:26 +0000
asID:                     262773
IP address blocks:        170.231.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5d:32:6a:48:63:24:00:76:7f:68:d9:64:62:f8:68:af:ad:8a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:22:26 2022 GMT
            Not After : Aug  8 13:27:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:01:96:d3:ee:24:4b:91:fc:44:98:f7:43:
                    3c:6b:a2:ea:8f:5b:bf:10:3f:63:c1:57:dc:16:28:
                    68:eb:cf:e4:43:c9:d6:5d:cb:ac:49:d9:54:32:d3:
                    60:ab:7b:57:b6:73:67:b0:ed:9d:cf:28:95:dd:f1:
                    4b:82:92:e0:78:b4:45:8d:35:4a:e0:43:22:e6:ac:
                    1a:7d:86:02:d8:db:c6:8c:e9:d5:12:d8:e1:40:33:
                    bd:a9:07:38:ae:af:1f:c3:e3:8f:00:5d:24:26:42:
                    58:1a:8c:99:e5:28:3d:9c:b1:6b:e4:9a:70:da:18:
                    73:e9:4e:41:5d:7b:a5:1d:d4:42:44:6b:3a:19:cb:
                    11:b7:58:14:e8:1b:32:dc:23:77:f2:42:61:b3:5e:
                    74:ca:b0:6d:8b:d9:b2:65:a3:b7:d1:dd:ad:5e:d5:
                    83:d7:7e:3a:6c:11:df:e4:02:8a:45:89:f1:75:f2:
                    9f:2d:4c:fb:5d:f9:a4:27:61:b8:67:a8:87:d5:b4:
                    b2:9c:19:03:5b:41:a6:16:9b:b1:9b:9b:bd:74:cb:
                    55:99:e0:4e:65:37:1f:c9:20:d2:37:c6:77:71:4b:
                    7f:32:fc:99:f3:9f:23:80:67:86:6b:05:aa:b7:eb:
                    bd:b9:2a:b0:b0:44:63:1c:57:37:c9:8d:1e:a3:aa:
                    06:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:44:D9:02:5E:51:D0:B1:68:8A:31:61:D5:22:48:A3:3F:C1:DB:3F
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232312e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d8:6a:bd:5b:6b:2e:2e:37:51:75:e4:ff:40:c5:10:65:5c:
         27:a0:2e:10:1e:d9:ff:8b:84:36:f0:9a:df:20:d4:29:42:1c:
         21:d2:e3:c5:a3:1a:08:92:f7:0b:cf:7e:87:9d:79:c7:5d:fd:
         0b:38:60:87:54:f5:76:66:2e:48:c6:9f:10:83:74:7e:6f:fb:
         ef:2e:0f:62:17:ab:d5:bd:83:b1:09:af:e9:c3:d4:20:3c:dc:
         b3:19:8a:c1:f5:71:5b:40:38:a9:ff:a0:03:8e:04:2a:59:bc:
         a3:9b:09:10:4d:1c:c1:c4:99:dd:86:78:30:bc:6e:ae:94:81:
         a5:60:3f:25:99:61:78:c9:b3:8b:b2:27:0c:30:b2:4b:8d:1d:
         2a:c1:15:9f:c8:80:9a:f0:9b:fc:b2:8f:46:a0:44:81:b3:ca:
         14:82:a0:6e:bf:29:bc:48:72:b6:3f:c8:63:f2:89:5b:df:1c:
         09:c9:01:f4:73:c4:2e:cd:67:33:a2:86:4b:e8:cf:21:82:25:
         d8:7c:1a:3b:18:26:02:45:18:a8:89:b2:aa:4d:a1:83:25:06:
         63:f5:0b:66:76:64:2e:e1:7b:cc:1c:9f:d6:4d:b8:24:97:52:
         b7:0e:d3:f7:c4:36:d0:79:da:b9:a4:4b:0e:ea:92:c8:62:bf:
         bc:74:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org