Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36382e302f32342d3234203d3e20323632373733.roa
File:                     3137372e3135322e36382e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          qukRkBzZfmqIY9W7zsj1gTtDNtS9UAX8SoiRvVqewcs=
Subject key identifier:   F7:9C:00:B9:5F:F4:A9:DD:D4:52:B5:E1:9A:86:E9:78:DD:F6:A6:34
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       0A56D4A5BC912ED453B75C16420EA937C66CF1FB
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36382e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:02:54 +0000
ROA not before:           Tue 09 Aug 2022 13:57:54 +0000
ROA not after:            Tue 08 Aug 2023 14:02:54 +0000
asID:                     262773
IP address blocks:        177.152.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:56:d4:a5:bc:91:2e:d4:53:b7:5c:16:42:0e:a9:37:c6:6c:f1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:57:54 2022 GMT
            Not After : Aug  8 14:02:54 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:d4:6e:86:2d:21:a6:7b:fb:6e:36:eb:ae:
                    9c:66:83:0d:63:66:f1:58:3d:27:05:e0:93:81:01:
                    33:be:c0:0d:9b:55:3e:ce:3b:e5:c0:5f:d8:e3:63:
                    70:e9:72:81:b2:8f:a7:23:70:6d:e8:0f:8c:d6:13:
                    43:cf:fd:b4:28:02:1f:eb:cf:af:b8:90:f4:c5:b1:
                    37:c6:7f:42:ed:a8:90:7b:f2:b9:e5:4a:dc:41:8e:
                    d7:25:f4:93:cc:38:60:0a:6d:11:99:51:cc:64:2d:
                    26:c4:5e:c8:af:8f:31:dd:33:61:b9:f9:fa:db:9f:
                    f1:53:7a:9e:80:b8:02:35:f1:d6:d0:d4:c5:22:30:
                    dd:2d:87:21:a6:17:a4:2b:5e:67:b6:08:27:a1:9b:
                    b8:33:6b:97:29:98:22:6a:a6:3d:d2:9e:5a:99:a1:
                    16:df:94:d9:c6:3d:fa:c7:a9:9a:b4:e5:70:10:f6:
                    26:fa:64:42:eb:13:f1:16:95:cf:67:e2:ec:96:8e:
                    26:02:a7:5f:a5:d8:b0:7e:f7:84:4e:04:a4:82:3f:
                    53:34:5c:e3:51:8f:d0:c0:7a:0e:1d:ea:12:d9:20:
                    ed:93:6a:eb:4a:42:c9:60:5d:a3:c1:6d:58:10:c8:
                    74:84:0f:d2:ce:e5:d8:a7:cc:82:cc:7d:3f:e2:60:
                    79:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9C:00:B9:5F:F4:A9:DD:D4:52:B5:E1:9A:86:E9:78:DD:F6:A6:34
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36382e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:d9:b8:60:d0:fa:12:5c:25:39:81:7a:38:53:e9:c8:55:0f:
         6a:c1:b6:ca:a7:79:d8:35:5e:88:e3:53:ab:44:d2:45:e1:60:
         01:d7:3e:41:d1:b9:1a:2c:5e:1a:6f:3e:90:b7:df:c0:c2:9a:
         89:5b:49:d4:12:19:6e:d3:8a:bc:fb:76:33:30:f7:71:f9:ec:
         1a:6b:21:03:08:72:ba:29:4a:3e:95:68:09:74:ab:aa:fc:0b:
         c6:20:ee:ce:0c:f2:62:1f:cb:ed:89:d9:4a:da:83:ed:54:dd:
         e6:3d:63:0f:9f:a9:ca:c3:4f:02:98:67:77:54:c9:7d:cf:96:
         7a:24:b3:77:f9:2f:af:a2:df:e9:70:52:c2:13:95:c3:ac:6e:
         98:8c:32:f3:1e:10:65:af:84:46:5a:3e:85:f5:9a:ab:c3:1f:
         8a:45:c6:07:fe:a0:6b:91:7a:91:3a:c4:f7:9d:ca:b9:91:19:
         99:66:52:04:3e:0d:07:7e:6c:57:2f:36:d2:71:a2:0d:df:a4:
         ee:1a:54:d2:86:56:76:42:9e:4c:f2:64:af:9f:11:1f:b4:1b:
         f2:21:32:58:e2:c7:c6:15:c8:21:b1:c8:4a:b0:98:cd:99:32:
         27:33:0a:73:2f:55:cd:74:ac:f4:06:57:bf:ef:87:89:72:82:
         47:b7:a1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org