Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36392e302f32342d3234203d3e20323632373733.roa
File:                     3137372e3135322e36392e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          qMtgpnUaAGPgnuw7DSBrElrJNCJfSGZmqBU4QMuO4EU=
Subject key identifier:   2B:48:98:92:3A:5F:EC:0A:F1:CA:68:7F:C4:20:B6:FC:F5:6E:E7:94
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       169FD84F62A4E7D046CBAEED781C62289B164BDC
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36392e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:02:54 +0000
ROA not before:           Tue 09 Aug 2022 13:57:54 +0000
ROA not after:            Tue 08 Aug 2023 14:02:54 +0000
asID:                     262773
IP address blocks:        177.152.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9f:d8:4f:62:a4:e7:d0:46:cb:ae:ed:78:1c:62:28:9b:16:4b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:57:54 2022 GMT
            Not After : Aug  8 14:02:54 2023 GMT
        Subject: CN=3082010A0282010100CBE32682765982537834C387091BECFD6A123F443E7D2CB25765100EA284CA387E58E99008E08AF7938AC56DAF3EF42AF8B6B569152DDC94F42C36D9014403753E40BAD7A668754756916573305F46C7EDFD8CAF629D488464A2C9EFCB75FE1C1EA16F389ABEDB1200A80F64582BB64396FD4E3B19A281B90FE32B261C5CA57A972F843918A184986BB7A64F77EB926BB606B6F34E897EB38EEA667CF657B4EAE30E7199EED8886AE5D401473D374BEAE3362804ACC04EDFA6B2EF91F0939C80FAC1795970E26D9B9DD2FC168D49BF7D5954A15D9D4DB563638035043478CFEAEBAE48D37746930FACD94EBB8B4E58F474A1D58A1E32017C897DC80D63E35B4D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e3:26:82:76:59:82:53:78:34:c3:87:09:1b:
                    ec:fd:6a:12:3f:44:3e:7d:2c:b2:57:65:10:0e:a2:
                    84:ca:38:7e:58:e9:90:08:e0:8a:f7:93:8a:c5:6d:
                    af:3e:f4:2a:f8:b6:b5:69:15:2d:dc:94:f4:2c:36:
                    d9:01:44:03:75:3e:40:ba:d7:a6:68:75:47:56:91:
                    65:73:30:5f:46:c7:ed:fd:8c:af:62:9d:48:84:64:
                    a2:c9:ef:cb:75:fe:1c:1e:a1:6f:38:9a:be:db:12:
                    00:a8:0f:64:58:2b:b6:43:96:fd:4e:3b:19:a2:81:
                    b9:0f:e3:2b:26:1c:5c:a5:7a:97:2f:84:39:18:a1:
                    84:98:6b:b7:a6:4f:77:eb:92:6b:b6:06:b6:f3:4e:
                    89:7e:b3:8e:ea:66:7c:f6:57:b4:ea:e3:0e:71:99:
                    ee:d8:88:6a:e5:d4:01:47:3d:37:4b:ea:e3:36:28:
                    04:ac:c0:4e:df:a6:b2:ef:91:f0:93:9c:80:fa:c1:
                    79:59:70:e2:6d:9b:9d:d2:fc:16:8d:49:bf:7d:59:
                    54:a1:5d:9d:4d:b5:63:63:80:35:04:34:78:cf:ea:
                    eb:ae:48:d3:77:46:93:0f:ac:d9:4e:bb:8b:4e:58:
                    f4:74:a1:d5:8a:1e:32:01:7c:89:7d:c8:0d:63:e3:
                    5b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:48:98:92:3A:5F:EC:0A:F1:CA:68:7F:C4:20:B6:FC:F5:6E:E7:94
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36392e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:98:af:6e:53:9b:60:37:56:79:68:0e:ae:16:b0:ff:4f:d5:
         30:67:37:f4:b4:ba:de:51:b4:b9:ad:ba:75:b3:7c:b4:bc:8f:
         ca:69:93:77:8a:61:08:90:d4:48:41:12:a8:02:10:bf:a8:75:
         d3:5c:3c:e9:e4:e8:51:11:30:44:fa:0b:65:6c:75:66:c7:48:
         12:29:27:2d:6d:04:de:fe:b2:23:0f:5c:e1:fa:6d:e6:1e:fa:
         a8:92:08:ca:15:c5:43:a4:94:57:b2:a4:1b:8c:5b:a3:2d:d1:
         a3:a0:cd:09:6a:04:1a:dc:a5:94:e6:36:ee:38:db:63:ea:bc:
         b5:28:ec:63:ef:e9:0a:8d:da:1a:96:96:4c:9b:76:01:e9:c6:
         f5:e0:54:58:d5:82:c5:71:c7:b6:c0:20:52:cd:a1:45:cd:82:
         fe:4c:86:df:a6:65:db:50:b0:15:8e:36:22:e3:62:7f:23:a1:
         4e:7f:57:b6:c5:ed:3e:ac:bc:54:26:1c:a3:92:ba:c8:d6:aa:
         68:15:a0:67:6b:d6:f8:8a:18:8c:08:4e:ec:83:1b:f0:77:29:
         3f:46:14:72:43:81:25:2e:a3:f8:e7:f8:34:4d:ef:d3:d4:f9:
         6a:74:2d:4c:9e:3a:e2:51:98:67:54:f2:38:24:83:1f:54:ed:
         4b:89:60:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org