Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36372e302f32342d3234203d3e20323632373733.roa
File:                     3137372e3135322e36372e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          5wgWdKzL90A9KFtThmd94ooFIPmnJ3kNjkb8He4nJ+Y=
Subject key identifier:   EE:C6:93:1F:C6:14:CB:BA:F0:56:85:7D:1C:F1:AB:5B:D6:CC:5B:0A
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       6CCE32AF8BDFC901E43D78F2C9F4D0C2D7DAE15F
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36372e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:02:40 +0000
ROA not before:           Tue 09 Aug 2022 13:57:40 +0000
ROA not after:            Tue 08 Aug 2023 14:02:40 +0000
asID:                     262773
IP address blocks:        177.152.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ce:32:af:8b:df:c9:01:e4:3d:78:f2:c9:f4:d0:c2:d7:da:e1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:57:40 2022 GMT
            Not After : Aug  8 14:02:40 2023 GMT
        Subject: CN=3082010A0282010100C6F6B54A350CB7744444BA027108EF7A24C2963A3F328654DBA547513BAAE8716A839F8C194A42154E14370CEA47A64C7211EABCCD8CE7D4AD41EB83AE0EAE74FECC25A61A50FA546FE03FCB2CD8945B0556C9A85036B35F9EC2F78501ABADC28C4A321ADAF9FE0E1EBC87DDD20C8CA504F6BF8309105FB72DCA176FD93CD9946C26E80E5001750C211FCD2144328EE4F4818288845F63BB8891D6A2DFF89E51FB6C18F9620AD2BBFFD3725D54732574D31D6ACE5281E08523A2813CCF515309520818F42355AEF71D0CFBC80FD2893D20C0BFE16B686B4E379354EE370ECA69A2BBEAB315A8FE8CE617458800D81512D60E79932387B0327157768658D9887F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:b5:4a:35:0c:b7:74:44:44:ba:02:71:08:
                    ef:7a:24:c2:96:3a:3f:32:86:54:db:a5:47:51:3b:
                    aa:e8:71:6a:83:9f:8c:19:4a:42:15:4e:14:37:0c:
                    ea:47:a6:4c:72:11:ea:bc:cd:8c:e7:d4:ad:41:eb:
                    83:ae:0e:ae:74:fe:cc:25:a6:1a:50:fa:54:6f:e0:
                    3f:cb:2c:d8:94:5b:05:56:c9:a8:50:36:b3:5f:9e:
                    c2:f7:85:01:ab:ad:c2:8c:4a:32:1a:da:f9:fe:0e:
                    1e:bc:87:dd:d2:0c:8c:a5:04:f6:bf:83:09:10:5f:
                    b7:2d:ca:17:6f:d9:3c:d9:94:6c:26:e8:0e:50:01:
                    75:0c:21:1f:cd:21:44:32:8e:e4:f4:81:82:88:84:
                    5f:63:bb:88:91:d6:a2:df:f8:9e:51:fb:6c:18:f9:
                    62:0a:d2:bb:ff:d3:72:5d:54:73:25:74:d3:1d:6a:
                    ce:52:81:e0:85:23:a2:81:3c:cf:51:53:09:52:08:
                    18:f4:23:55:ae:f7:1d:0c:fb:c8:0f:d2:89:3d:20:
                    c0:bf:e1:6b:68:6b:4e:37:93:54:ee:37:0e:ca:69:
                    a2:bb:ea:b3:15:a8:fe:8c:e6:17:45:88:00:d8:15:
                    12:d6:0e:79:93:23:87:b0:32:71:57:76:86:58:d9:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C6:93:1F:C6:14:CB:BA:F0:56:85:7D:1C:F1:AB:5B:D6:CC:5B:0A
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36372e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:74:b8:96:04:9e:aa:e8:4c:4c:9b:3f:77:1e:9e:65:ee:a3:
         79:c6:81:cc:18:48:cf:96:45:6c:fa:55:50:1c:6d:7f:e9:31:
         e0:1b:20:a5:b0:f6:78:3e:97:4b:2c:09:ac:30:c4:37:1f:fd:
         dc:e0:a9:48:fb:55:3d:cd:58:dd:74:fc:4d:1e:db:25:3e:0b:
         e0:77:b4:69:b7:51:0f:4a:c2:29:39:0f:dc:44:16:d1:1d:fa:
         12:71:5d:4e:7a:cc:78:de:6a:46:65:66:2a:3e:d1:d7:ec:f9:
         97:73:af:56:76:23:de:ff:ea:98:13:d4:9b:82:3b:a1:86:93:
         bc:21:e7:41:7a:3e:54:95:f4:fe:43:d8:78:3c:64:e8:16:eb:
         d5:aa:80:3e:1c:9d:ad:2d:f0:04:65:d9:02:9a:f3:cd:46:0b:
         01:99:2e:2c:96:21:65:99:dd:03:ba:1b:30:0c:d4:12:8c:6d:
         a0:08:c4:29:67:50:e4:61:da:6f:da:08:ed:e8:a5:c6:ff:72:
         d7:d4:5a:d2:3d:41:79:48:eb:ef:3f:a6:97:0f:71:e3:4e:d1:
         97:69:93:48:79:0f:c5:be:56:92:fb:67:b9:99:77:03:24:c7:
         5f:8e:32:d6:88:83:69:1d:8c:f1:67:39:41:f5:96:75:bc:14:
         72:20:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org