Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36352e302f32342d3234203d3e20323632373733.roa
File:                     3137372e3135322e36352e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          0pvSBuyvLkmLjwTv29W0Muba0CSjbssrxmzSG7LsirI=
Subject key identifier:   32:FF:48:A3:31:6F:E4:87:0F:A1:07:1F:B8:05:1D:A1:59:0D:92:98
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3A5034EAC40A3E1DC86250F67741AE88714C2F41
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36352e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:47 +0000
ROA not before:           Tue 19 Mar 2024 21:48:47 +0000
ROA not after:            Tue 18 Mar 2025 21:53:47 +0000
asID:                     262773
IP address blocks:        177.152.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:50:34:ea:c4:0a:3e:1d:c8:62:50:f6:77:41:ae:88:71:4c:2f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:47 2024 GMT
            Not After : Mar 18 21:53:47 2025 GMT
        Subject: CN=32FF48A3316FE4870FA1071FB8051DA1590D9298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:39:23:d2:23:75:b0:92:b0:05:b4:b0:35:
                    5e:6e:98:8a:6d:f5:d0:94:88:88:24:d7:da:aa:95:
                    cb:f9:9a:af:4a:81:4d:46:62:7c:23:37:18:0a:c9:
                    81:33:87:18:13:3c:0c:8c:d3:af:50:cf:71:14:3e:
                    da:83:89:1d:ff:00:32:d5:30:50:15:a5:a9:23:6f:
                    fb:54:65:02:11:fb:3f:de:4d:d8:a9:ae:5f:42:71:
                    a6:bf:9f:7a:be:2f:0d:9e:cc:11:a5:63:9b:3f:31:
                    78:13:8a:c2:e1:9f:e1:26:8a:a3:5c:67:80:61:fc:
                    b8:68:18:6d:cc:4d:5c:58:23:9d:a3:99:ee:f2:3d:
                    10:7c:42:ea:ac:3d:59:5e:b0:f4:66:fe:e8:af:00:
                    b1:ea:2e:ee:06:8e:74:aa:3a:79:60:e2:20:33:f4:
                    38:7a:66:04:67:55:84:22:ff:c7:69:b1:d8:06:c0:
                    43:fd:97:d2:c1:43:39:93:24:43:ba:9f:b9:eb:18:
                    8f:9d:c4:10:c4:49:4b:0e:4c:9e:55:aa:73:2c:74:
                    c2:b5:ff:27:c1:d8:28:91:3b:e7:d3:2a:77:a2:3d:
                    16:ef:1d:68:ad:9f:77:2b:3d:a4:ff:7f:5a:a8:2e:
                    e5:50:80:9e:94:6f:f5:5f:1e:17:f4:30:0e:c4:f8:
                    42:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FF:48:A3:31:6F:E4:87:0F:A1:07:1F:B8:05:1D:A1:59:0D:92:98
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36352e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:13:f0:2a:ee:15:51:ae:ee:93:16:cc:a5:42:b5:2f:dc:8d:
         03:85:ed:2a:a0:96:5a:c6:ef:a9:53:17:8e:fd:14:cf:7f:90:
         b0:70:f7:95:d4:83:e7:43:d4:39:d9:bd:1d:4a:ca:78:02:40:
         b1:5d:16:ec:7b:16:05:8c:9b:71:8a:f4:59:7f:6a:d6:0f:d7:
         44:ac:08:6f:e1:96:46:e4:4b:22:60:ec:f2:05:b8:1e:26:14:
         e1:6a:40:b4:bd:14:a5:c9:74:5b:39:dd:43:94:a7:c6:1f:cb:
         75:e1:cb:72:2e:95:a6:9c:f7:39:6b:a9:04:c7:2d:af:95:5b:
         53:6f:b9:17:55:27:0e:97:50:46:dd:eb:95:4f:08:e8:97:28:
         01:96:f1:f7:33:4d:f6:0c:4d:5d:05:7e:be:9d:d2:e0:a1:d6:
         18:15:65:4a:b1:62:45:8e:05:a9:1e:f4:d2:2a:f7:71:52:e0:
         6d:98:8f:96:cc:3e:27:f5:4c:5a:13:c7:bf:ee:d0:28:de:fc:
         3a:9b:b5:d6:7d:b2:10:df:17:98:5d:63:64:32:c5:45:13:1e:
         e7:ef:62:01:4d:ee:6e:29:9f:bc:3c:1e:61:db:cb:d6:e7:9c:
         53:9b:58:57:9f:4b:ab:6a:9d:55:f6:74:7d:d7:98:a2:94:f4:
         50:a6:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org