Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36342e302f32342d3234203d3e20323632373733.roa
File:                     3137372e3135322e36342e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          v9Vw8QqCr/m5Ef73teDu/3/00wjE1EnYMfsDadLpWTY=
Subject key identifier:   0C:9C:5D:B7:81:1D:79:1E:EC:59:09:F4:CC:36:27:EA:D4:E1:68:1E
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       7169A726A473825699D57D1AB07A9B8E673096D0
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36342e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:02:14 +0000
ROA not before:           Tue 09 Aug 2022 13:57:14 +0000
ROA not after:            Tue 08 Aug 2023 14:02:14 +0000
asID:                     262773
IP address blocks:        177.152.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:69:a7:26:a4:73:82:56:99:d5:7d:1a:b0:7a:9b:8e:67:30:96:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:57:14 2022 GMT
            Not After : Aug  8 14:02:14 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:90:34:b9:44:2d:53:29:a1:08:b2:79:02:
                    ee:f0:d0:25:cb:7f:3f:82:42:66:4a:25:e0:3c:a3:
                    9f:ac:f2:03:35:1f:a4:35:d3:d4:07:20:f6:06:ec:
                    8c:8f:44:4d:e1:73:74:c3:ce:b9:cd:b3:0c:58:98:
                    32:a0:fd:11:ef:71:51:6d:a9:e8:ce:15:64:fc:a8:
                    82:56:ff:a3:3f:75:fc:c4:58:a9:ce:36:d4:85:23:
                    a6:6a:2f:c2:9a:a5:bf:3c:62:74:86:6d:99:6e:50:
                    c1:43:1d:a4:6e:4d:1e:ee:8a:78:39:0d:ae:22:a6:
                    92:c3:e9:da:b6:4d:6e:78:cd:e6:58:4e:54:0a:ac:
                    e7:06:e0:d8:8e:5e:e0:5b:8c:58:c5:b7:f4:b3:fa:
                    4d:7b:69:12:80:ea:bb:fb:af:18:59:0b:3a:1a:b3:
                    1b:0f:69:ca:03:0f:4a:b5:86:b8:50:27:36:4c:3e:
                    9c:df:d3:0d:6b:0b:70:0e:7a:37:44:b3:9f:44:ec:
                    64:84:92:d9:17:31:37:91:02:a9:ce:47:71:41:77:
                    e4:f3:b1:0a:7d:98:9b:aa:85:fa:7d:88:be:59:82:
                    cc:4a:a4:5c:9d:13:d1:ec:47:70:1d:74:c5:fb:fc:
                    32:7d:86:9a:cf:a5:38:3a:d9:3c:ad:2e:3f:13:b7:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9C:5D:B7:81:1D:79:1E:EC:59:09:F4:CC:36:27:EA:D4:E1:68:1E
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36342e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:59:90:29:3b:60:74:75:e2:b2:a5:cc:6a:a1:e3:c5:ff:d5:
         7e:1a:e2:2d:06:d2:4b:ab:4f:e8:10:21:2e:f7:67:e5:07:1b:
         8b:e6:a3:d4:06:5d:87:f9:3e:9a:c3:1b:f0:cb:2a:31:e1:8f:
         46:23:73:bf:57:b4:f5:87:41:c1:74:4b:ee:a3:e8:2b:21:46:
         90:bc:03:2b:c3:18:df:3f:d2:ab:5b:2d:5a:c8:76:df:12:f2:
         dc:c3:62:7c:bc:52:55:d7:fa:fe:a0:4d:f1:26:b3:ae:34:c6:
         12:3f:ae:4f:dc:90:35:74:1f:76:fa:2b:e5:fc:24:68:f1:9d:
         bc:00:1f:a3:4f:16:6f:16:73:fb:ae:d5:14:d9:5e:5e:d5:ca:
         e9:23:44:72:53:f0:f6:ae:88:9c:65:63:76:d8:3c:06:b4:3a:
         7e:f6:15:a4:41:ac:29:c6:4d:d7:87:78:c5:6a:6b:68:15:d1:
         5d:d8:30:d9:64:74:b6:44:d4:20:e8:c6:eb:45:61:7a:e8:d0:
         58:66:a7:8a:da:34:89:5c:97:8b:46:05:47:8f:8a:fe:52:5c:
         29:c5:84:6f:51:27:52:4e:85:46:e1:98:0d:02:21:16:4e:5b:
         e6:d4:3a:19:b6:58:17:a0:17:08:9e:40:b9:47:ae:da:7d:25:
         47:25:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org