Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e382e302f32322d3232203d3e20323632373733.roa
File:                     3137302e3233312e382e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          tgB2KMvyndGQJ+Z0mhiLG8I54uMZrgZyEewVaHXrUxE=
Subject key identifier:   BD:3D:84:70:54:DF:CF:8D:22:03:A1:7C:16:7D:D8:BD:46:DE:6C:62
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       55A04655CF475CD4C5325AA59DE3F57E3F0A234F
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e382e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:19 +0000
ROA not before:           Tue 27 Sep 2022 19:14:19 +0000
ROA not after:            Tue 26 Sep 2023 19:19:19 +0000
asID:                     262773
IP address blocks:        170.231.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a0:46:55:cf:47:5c:d4:c5:32:5a:a5:9d:e3:f5:7e:3f:0a:23:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:19 2022 GMT
            Not After : Sep 26 19:19:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:e0:28:f2:d8:9b:1c:d0:92:52:bf:5f:f8:
                    08:00:53:22:8d:0b:48:18:63:24:11:af:1d:8f:42:
                    02:2e:a9:20:7b:fc:e8:be:af:86:be:dc:24:54:f9:
                    e4:dc:22:79:43:92:7b:20:44:31:0d:13:c1:84:c1:
                    9b:49:b9:6c:98:e0:4a:2b:04:15:12:c6:c3:f3:34:
                    a3:e6:a3:9d:89:f3:73:77:04:c7:a9:73:5d:7d:01:
                    30:12:23:67:79:47:f2:39:84:29:99:e1:0a:8b:ac:
                    0a:28:b9:a9:2b:2c:7e:9b:13:9b:85:42:6d:1d:f7:
                    bf:60:b9:23:f4:15:31:d1:02:4f:4d:2e:f1:96:e4:
                    da:a7:0d:99:dd:6a:b0:ff:9a:a2:f0:94:66:88:e0:
                    e2:4b:7c:ea:21:2c:3d:ec:de:2f:42:12:e7:f0:28:
                    dc:54:6f:f0:69:06:ae:1c:90:95:5f:69:b1:90:28:
                    ce:bf:5c:6a:bc:50:89:e7:99:eb:4e:09:73:43:8b:
                    6d:a1:98:78:e1:22:d9:d4:f0:a8:90:46:a2:e6:ad:
                    76:55:18:b8:ce:ca:91:b7:67:94:18:ed:4c:f8:5b:
                    2e:38:45:7b:01:eb:a9:dd:ae:ce:62:bb:b2:dd:c5:
                    e9:2b:38:5e:00:f3:e3:fd:fb:0d:0c:8c:c9:62:c8:
                    35:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3D:84:70:54:DF:CF:8D:22:03:A1:7C:16:7D:D8:BD:46:DE:6C:62
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e382e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:e2:d1:50:5e:46:a2:8e:06:f8:ef:6d:cf:7e:e4:9f:8e:64:
         46:3a:0c:3f:4a:63:81:59:be:2b:0c:66:cb:9b:0a:4b:ae:d8:
         30:64:70:9c:1d:80:4a:73:bb:2a:77:00:ba:0f:b5:db:31:93:
         1f:65:0f:b6:ea:4e:59:a1:58:23:fa:f6:13:13:b3:46:45:df:
         b9:b4:39:79:28:97:e7:31:47:b4:91:81:25:30:96:7d:91:a8:
         9f:86:3e:e1:38:50:3b:44:d8:b9:de:72:cd:c3:10:12:f5:90:
         fe:67:b0:86:5a:a2:37:36:dd:60:6a:ed:f9:22:85:3c:08:d9:
         9d:f6:3c:eb:87:4c:14:8b:63:47:61:a4:25:a2:6b:75:ea:d5:
         a7:00:f4:9b:8f:99:68:dc:c8:5d:f9:34:16:55:71:b4:a7:53:
         b8:2e:18:6f:02:a2:df:6f:f5:d4:4f:34:db:63:e1:fb:3d:79:
         0e:44:04:88:04:72:35:72:2f:a1:2a:aa:4b:5f:7d:d5:d2:8e:
         4d:16:a7:86:34:f0:6e:cf:3c:5c:38:6f:30:be:30:04:02:f8:
         f7:1a:75:3d:b0:86:e9:c5:b0:dc:72:cd:34:60:fb:d4:6c:27:
         1f:96:39:ed:57:96:5d:f1:79:6d:50:17:4a:bf:91:1b:63:5d:
         16:aa:e3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org