Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e37392e34382e302f32322d3232203d3e20323632373733.roa
File:                     3137302e37392e34382e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          QYlHEHGSzoM7PwKC8Trc6ZtAM65LtBGvIZ0YrQB1ONA=
Subject key identifier:   A2:05:5A:40:43:1A:5F:20:A7:44:27:4D:A8:4B:2C:3B:2F:43:1D:3C
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       019A140C4ADC762EBE86FF8BE666AAC89AD493F5
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e37392e34382e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:27 +0000
ROA not before:           Tue 27 Sep 2022 19:14:27 +0000
ROA not after:            Tue 26 Sep 2023 19:19:27 +0000
asID:                     262773
IP address blocks:        170.79.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:14:0c:4a:dc:76:2e:be:86:ff:8b:e6:66:aa:c8:9a:d4:93:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:27 2022 GMT
            Not After : Sep 26 19:19:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:36:10:bd:7c:a0:ed:4a:31:de:eb:66:47:83:
                    47:0e:72:db:9c:05:65:52:de:08:67:5b:ed:a1:8f:
                    25:b5:fb:66:ec:e6:82:a6:2d:b4:53:c7:dc:a4:ff:
                    a3:a1:4e:32:f3:e7:93:fc:e4:a5:18:60:42:a4:49:
                    08:9f:b6:96:90:24:42:59:1d:c3:cb:01:76:7e:af:
                    d1:86:20:14:da:f2:b6:01:32:4c:8e:cd:2b:dd:aa:
                    18:41:c4:77:ce:7f:09:e5:eb:37:74:0d:38:c7:33:
                    ac:ab:e8:dd:94:c2:28:a8:51:44:c8:27:c9:83:5e:
                    8f:5e:13:29:a9:a2:59:66:22:25:dc:b5:4f:fc:cd:
                    81:18:1f:8c:22:ec:91:12:1d:e9:42:91:cf:3d:c9:
                    fa:43:0e:17:4a:59:ef:4c:a4:fc:08:fe:77:c9:60:
                    79:21:ae:f2:cd:6a:d0:c0:86:65:42:4b:7a:61:fd:
                    61:6a:9e:21:f6:69:30:8e:81:41:61:75:f0:bf:ef:
                    34:a7:db:9a:37:07:0e:46:96:2b:aa:0c:5f:73:b3:
                    bc:ee:a8:61:13:e2:d7:49:e1:bb:a1:86:7a:6a:1f:
                    81:af:44:fa:b2:8a:56:24:78:61:7b:91:9d:31:69:
                    09:12:7f:60:42:58:f5:1f:69:f7:4c:0a:44:f7:c2:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:05:5A:40:43:1A:5F:20:A7:44:27:4D:A8:4B:2C:3B:2F:43:1D:3C
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e37392e34382e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:72:47:71:8a:90:de:3d:8d:7e:70:76:f2:b4:ba:e4:e1:17:
         a6:21:c6:ed:e6:5c:e3:c0:a3:97:ee:1d:7d:1a:c6:25:a2:02:
         d5:c5:ac:50:b1:d9:16:11:d0:a8:44:8f:dc:62:eb:30:91:67:
         1a:65:76:47:61:97:07:5a:d4:05:42:cd:d5:cc:ec:a3:12:ae:
         88:6c:1a:99:af:8b:30:95:4d:e8:8c:40:2f:b0:62:9e:bb:2c:
         ed:84:1b:51:f8:6f:9d:9d:6e:36:13:79:6a:08:84:7a:4e:b4:
         ae:23:36:2b:6b:b2:81:32:f6:e0:7b:08:84:11:e5:49:8d:82:
         9f:8d:fb:68:da:4a:a9:29:8e:9f:d5:9e:1b:4f:60:39:c7:e8:
         87:a0:18:f7:6b:3e:28:87:55:52:3d:24:f3:d0:59:6a:d6:a7:
         f9:10:81:2e:bd:68:3a:11:a7:eb:65:db:a4:81:83:78:af:46:
         e2:8b:b5:3c:e2:4c:83:cf:4e:52:38:40:dd:00:6c:66:6c:99:
         aa:70:ff:43:04:d5:a9:76:04:1e:73:89:fd:e9:cb:6c:e0:45:
         58:f5:52:94:cf:fe:4e:d8:38:be:99:9f:4f:71:b8:bb:11:75:
         10:4b:2f:27:2c:49:f0:79:ca:39:bd:6f:2b:23:cb:7c:83:b5:
         77:e2:37:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org