Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36342e302f32322d3232203d3e20323632373733.roa
File:                     3137372e3135322e36342e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          FIh5iJsEe4hLSTRDmiO1k5DFa/BUdnOtelF8Hu2iD2U=
Subject key identifier:   13:E7:64:8B:34:48:B1:5F:D0:A0:51:47:D6:AE:69:D9:3D:7C:BE:31
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       6FE9C14C93314AAB8BAABBE36267E5599BD3F9C7
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36342e302f32322d3232203d3e20323632373733.roa
Signing time:             Wed 20 Mar 2024 19:20:14 +0000
ROA not before:           Wed 20 Mar 2024 19:15:14 +0000
ROA not after:            Wed 19 Mar 2025 19:20:14 +0000
asID:                     262773
IP address blocks:        177.152.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e9:c1:4c:93:31:4a:ab:8b:aa:bb:e3:62:67:e5:59:9b:d3:f9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 20 19:15:14 2024 GMT
            Not After : Mar 19 19:20:14 2025 GMT
        Subject: CN=13E7648B3448B15FD0A05147D6AE69D93D7CBE31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a2:bd:59:04:ab:88:c6:f0:68:bb:18:ac:19:
                    6a:9d:1b:a0:70:61:27:11:17:d8:44:0d:c1:52:de:
                    03:08:8c:5f:e0:4d:d8:b8:ef:8b:87:55:d7:7a:b9:
                    28:40:00:07:da:dc:9d:91:b2:19:6a:ef:cf:11:9e:
                    4d:95:5e:84:69:e1:d1:41:af:14:f6:62:ba:06:70:
                    13:0d:4a:ff:cf:01:3f:15:f6:ed:87:93:86:37:ff:
                    0d:ea:b4:8c:1c:b8:4d:91:1f:2c:72:ec:77:db:ee:
                    bf:71:4b:98:4b:d9:d4:4c:ff:bf:d6:69:d9:82:e9:
                    1e:0d:0b:79:d8:71:ce:c9:fa:45:f2:69:36:56:dc:
                    2f:b8:f1:e5:e7:ae:da:42:e7:13:c7:25:81:16:ad:
                    90:ab:fb:27:df:51:db:c6:19:9a:26:3b:35:c8:9d:
                    a7:a1:d1:26:e6:46:17:5f:ba:59:4c:2a:94:7f:a3:
                    b6:f7:5d:97:0c:2f:6a:a4:c2:83:71:df:34:e8:da:
                    55:8b:1a:8c:3e:65:ee:c2:07:b5:14:8d:1a:d1:15:
                    ab:46:50:04:f3:64:bd:6a:c2:64:dd:9e:b1:a3:ef:
                    59:eb:3f:7f:f1:84:dc:d0:53:fa:4b:6b:dd:b1:51:
                    ba:63:cb:f7:88:6f:56:9b:2a:8c:d5:a9:ae:89:07:
                    76:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E7:64:8B:34:48:B1:5F:D0:A0:51:47:D6:AE:69:D9:3D:7C:BE:31
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36342e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:f8:78:9f:d7:e3:1d:c0:67:1e:53:3c:d8:44:2a:be:b3:
         98:d6:d8:e6:af:28:0b:d8:22:62:8c:bc:11:28:06:69:2c:30:
         00:9d:1a:3b:4c:30:4d:23:1a:41:77:f1:db:3c:b4:ef:80:49:
         11:bb:ee:94:da:70:58:92:d9:c3:7f:fd:62:2d:a9:f8:72:3d:
         1f:00:d0:8a:9c:29:2f:ed:70:b5:b0:4a:a8:1a:47:02:1d:c9:
         15:a4:74:55:4b:6f:e4:b6:33:0e:be:20:97:00:21:17:3e:05:
         0c:37:f1:27:60:c9:81:e4:26:0e:07:cb:59:8a:e7:0e:32:17:
         cd:1a:b1:b6:0a:18:ec:e3:aa:80:b6:f1:05:b3:90:2d:d3:72:
         b8:1f:24:b6:75:86:9c:f4:ef:35:38:a1:b0:ed:4f:cb:98:b3:
         14:05:00:0d:f8:90:52:81:4e:a7:c9:49:a6:06:cc:1e:22:e4:
         f6:a8:56:20:c1:4b:aa:0c:19:b0:f0:3c:2b:d2:82:f0:70:83:
         b6:eb:41:e9:2f:e4:18:33:b1:64:5c:04:17:47:ee:96:3f:da:
         13:41:35:6d:ae:62:7b:e1:19:b5:8c:cf:1c:47:8c:5c:8b:37:
         e1:ea:0f:71:9c:b6:3b:6e:45:8c:e6:c4:30:0a:30:66:af:5d:
         73:87:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org