Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3132382e3232302e302f32322d3232203d3e20323632373733.roa
File:                     3137372e3132382e3232302e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          Htm1FptM5zSIzBUvuOUhkz0noSJkvZV4SdJYc7QW2ic=
Subject key identifier:   88:5D:33:CF:03:71:C3:1F:BD:48:61:E0:2E:B7:82:D2:9B:22:CA:6E
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1718B54C695A5A2D00F792D46510376C0BF00DB4
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3132382e3232302e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:49 +0000
ROA not before:           Tue 19 Mar 2024 21:48:49 +0000
ROA not after:            Tue 18 Mar 2025 21:53:49 +0000
asID:                     262773
IP address blocks:        177.128.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:18:b5:4c:69:5a:5a:2d:00:f7:92:d4:65:10:37:6c:0b:f0:0d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:49 2024 GMT
            Not After : Mar 18 21:53:49 2025 GMT
        Subject: CN=885D33CF0371C31FBD4861E02EB782D29B22CA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:09:e4:c0:4b:b4:6a:1c:f8:d1:a7:06:a5:76:
                    de:bb:2b:8c:b8:38:fd:6d:9e:81:7d:91:7d:ea:30:
                    2c:4a:cb:bd:2f:6d:21:67:00:ac:a4:ec:ab:b7:a0:
                    22:13:b6:f7:e6:b3:d2:2c:b4:3e:e5:c4:5c:ac:91:
                    a3:95:68:d1:e1:58:ab:1b:e2:66:da:72:54:91:a6:
                    3d:05:65:f6:86:57:d6:f8:db:0c:7c:80:ff:e4:6f:
                    3e:63:0a:46:f6:f9:ff:83:ce:a1:65:18:b5:88:4f:
                    ed:a7:ee:4b:68:6f:c8:28:0c:6d:d2:50:c2:3a:c5:
                    f7:5a:09:8c:b4:ab:08:53:e0:42:3a:5c:d2:a6:79:
                    aa:40:60:f9:f6:ab:98:6c:37:0a:a2:9d:ec:55:91:
                    d1:63:37:7d:70:b5:4b:a1:c8:54:1e:50:ba:6c:2c:
                    06:c5:87:9c:87:84:25:96:f7:b2:0b:57:f9:31:9e:
                    5e:b1:7d:2a:1d:21:a4:c0:7c:28:33:e6:39:04:d5:
                    36:92:d6:82:3e:2c:d3:2b:d6:e6:51:61:8f:1a:72:
                    07:93:4f:2b:80:1a:24:c7:b3:22:89:f5:0d:f5:9c:
                    63:88:61:7f:b9:62:cd:0c:54:17:24:e9:85:e7:06:
                    c2:a8:93:84:ab:84:c2:e1:32:aa:eb:20:0f:b6:ea:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5D:33:CF:03:71:C3:1F:BD:48:61:E0:2E:B7:82:D2:9B:22:CA:6E
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3132382e3232302e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:6b:ce:53:8b:05:18:66:d6:e1:69:2f:06:33:e6:8d:e0:9f:
         7b:f2:ce:0e:13:73:4f:21:ac:15:38:84:e2:6d:77:90:f2:83:
         43:ae:27:cd:9d:54:f0:5b:04:0b:be:72:cd:19:24:84:30:5f:
         e1:81:70:39:7d:3f:ee:a9:13:40:d2:f9:8d:a0:5a:8e:15:bc:
         f2:f1:82:38:b8:2d:97:b3:e5:2d:8c:de:2a:ae:57:5c:e6:c1:
         c0:75:80:ac:ef:ca:1f:35:a4:93:85:af:9e:d9:fb:fa:b1:55:
         1a:2b:54:10:9b:77:fc:e0:34:15:ad:af:64:70:e9:c6:d3:17:
         b3:19:7a:02:53:d4:c8:a4:4e:17:0f:8b:73:25:39:2b:27:ed:
         be:ef:50:b4:fe:3a:b5:5e:74:ff:d7:05:40:6a:e5:ba:9f:7f:
         86:9b:09:0d:c4:8b:22:61:23:6d:6b:69:ca:5b:c9:a8:10:ca:
         75:52:fd:bf:10:60:71:20:b1:15:0d:6a:ab:b0:72:8b:a9:23:
         dc:c0:c7:34:a7:7c:54:eb:ce:16:73:7a:52:b3:f8:71:71:33:
         51:84:c2:ee:b8:d2:5b:8f:2b:e0:e4:35:e4:44:4c:2f:22:15:
         3c:77:3c:be:53:06:1d:a2:5f:9a:00:e8:9d:8a:b2:5d:ee:bd:
         c1:ae:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org