Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e382e302f32322d3234203d3e20323632373733.roa
File:                     3137302e3233312e382e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          CE4zE5m9r2WEJLXk5MMjg0EKYyrQs6M1Ey3oDBzKo8Q=
Subject key identifier:   32:00:84:DA:34:1C:80:5D:0F:57:F4:F3:B9:EB:46:47:6C:A9:7A:2B
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       43FC6321333EEF08E3E8D9007E71430BB2C570D0
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e382e302f32322d3234203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:44 +0000
ROA not before:           Tue 19 Mar 2024 21:48:44 +0000
ROA not after:            Tue 18 Mar 2025 21:53:44 +0000
asID:                     262773
IP address blocks:        170.231.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fc:63:21:33:3e:ef:08:e3:e8:d9:00:7e:71:43:0b:b2:c5:70:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:44 2024 GMT
            Not After : Mar 18 21:53:44 2025 GMT
        Subject: CN=320084DA341C805D0F57F4F3B9EB46476CA97A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:16:89:88:c3:c4:08:e8:73:97:e2:24:cc:e4:
                    66:cd:64:28:9c:51:fa:f6:db:90:d7:fd:b9:8b:3d:
                    f2:99:69:d9:14:e6:21:5b:a7:4d:ff:c2:55:42:8d:
                    8f:37:b1:25:92:e6:f9:7c:b6:0a:1d:4d:5b:ff:34:
                    13:8a:3b:0c:09:f9:4b:f8:b6:db:c6:d3:99:92:2b:
                    41:90:a3:c2:6f:6c:9d:45:f5:23:28:f0:e6:8d:d8:
                    12:24:52:c1:05:69:5b:95:92:92:f5:9c:71:be:e4:
                    bb:ad:68:2d:0b:f8:17:d9:98:04:c2:67:4f:eb:6d:
                    9b:11:16:41:89:ef:b3:bf:4c:08:c1:5f:e7:65:eb:
                    77:86:52:54:fd:02:e2:b0:cf:7a:a6:d6:b2:92:e0:
                    e4:22:07:4b:38:8f:af:f1:51:ce:60:ca:80:01:57:
                    2f:0c:67:b0:53:4d:83:2b:62:35:4c:b7:02:1f:63:
                    f1:5c:f4:d8:24:b7:00:91:c4:61:a5:3c:64:15:fb:
                    cf:9e:e4:b7:1b:5a:f1:e7:3c:c5:0e:5a:5b:0b:c0:
                    ec:07:48:43:2c:0a:07:68:0f:78:b6:88:8d:b5:75:
                    10:38:ed:99:64:62:98:3f:43:2c:92:f0:ea:12:a8:
                    25:a4:c6:e5:4c:47:f9:80:fe:92:87:79:5d:6a:31:
                    7f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:00:84:DA:34:1C:80:5D:0F:57:F4:F3:B9:EB:46:47:6C:A9:7A:2B
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e382e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:fd:81:f4:e0:dd:af:20:8f:f8:2a:08:08:5e:98:04:bc:bc:
         58:f0:e3:c5:4e:25:e4:ea:3f:03:31:ee:c2:56:f4:99:56:68:
         a1:6e:2f:70:1c:cd:4b:aa:3e:0e:a9:67:7e:d0:ee:f4:db:70:
         f2:3e:1d:97:02:a5:ee:d8:ab:fa:f9:16:8d:e5:49:00:d3:fb:
         80:13:73:24:de:39:a8:12:e9:ce:59:23:38:b7:70:d4:45:e1:
         3b:6a:d7:77:bb:62:48:f7:89:07:bf:b0:56:8a:f8:33:eb:6d:
         91:12:27:a1:b7:dd:3c:a7:16:59:d4:cf:ba:27:3c:2a:e7:9a:
         95:38:89:9a:e7:09:87:6e:0d:bf:75:44:b6:3f:5e:8d:fd:b6:
         69:1b:32:80:96:95:01:ed:df:84:90:71:44:d7:38:fd:48:91:
         63:c0:04:fb:56:69:4f:51:3c:65:22:a6:44:6d:1b:f8:c0:4e:
         70:ce:c3:83:90:5b:ef:f0:f3:9c:a9:41:a2:67:c8:29:1a:45:
         b2:d5:16:4f:6c:c6:de:31:c1:39:9c:f4:81:6b:f9:54:1d:6e:
         7c:f8:50:04:4a:29:d2:b8:10:55:f9:e0:df:3b:60:62:ba:1b:
         b6:95:2e:19:1e:a7:f7:ce:2a:bf:f4:1f:3e:a4:e1:13:ba:3d:
         8d:77:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org