Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37302e302f32332d3233203d3e20323632373733.roa
File:                     3137372e3135322e37302e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          DM/eJTBnyvkBvWmaHJIotgdvsXgiQhsHZZ0g+X2oSZQ=
Subject key identifier:   19:83:9A:5A:F1:FD:07:C1:CE:8F:C0:3F:CD:8C:A3:2E:FE:FC:1B:30
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3AE963364ECC1FAE0A8E8690A7E398D86187274A
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37302e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:02:55 +0000
ROA not before:           Tue 09 Aug 2022 13:57:55 +0000
ROA not after:            Tue 08 Aug 2023 14:02:55 +0000
asID:                     262773
IP address blocks:        177.152.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e9:63:36:4e:cc:1f:ae:0a:8e:86:90:a7:e3:98:d8:61:87:27:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:57:55 2022 GMT
            Not After : Aug  8 14:02:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d4:f0:c6:4c:ee:6c:2e:ba:5d:70:2c:0e:fb:
                    56:e0:aa:5a:51:7b:94:a9:f5:a8:fc:c6:37:b7:8d:
                    0d:dd:12:d1:7d:eb:a7:29:c6:0b:94:08:ad:c7:ae:
                    3b:b2:bf:31:14:9c:5c:59:d2:79:32:24:70:55:7a:
                    51:22:0b:f4:14:ea:8c:40:51:48:47:d9:b6:d7:80:
                    e9:e2:9f:a3:94:0b:d6:ea:ae:c9:62:ab:85:6f:80:
                    85:9f:a8:dd:1d:8f:2a:da:81:f0:74:c6:d2:6e:b3:
                    fd:2c:fa:be:56:f3:5f:dc:b0:2a:0e:67:0e:e4:16:
                    f1:74:5a:77:61:04:c0:4b:e4:a9:1d:18:51:e1:f7:
                    81:46:d0:e7:12:01:2a:48:8c:d8:4b:db:d3:38:9e:
                    b2:6d:ba:7d:93:71:cd:30:49:e3:01:3e:0f:48:57:
                    8e:2b:0d:67:1e:28:23:44:b6:27:6e:35:34:21:ee:
                    5c:fa:c5:6d:3e:bb:ad:aa:9e:05:57:f5:b5:78:3e:
                    97:76:e4:0e:df:49:57:c7:65:20:76:b4:48:aa:7c:
                    55:7d:29:b0:4b:fc:d9:04:de:57:46:69:c9:74:83:
                    9e:da:29:06:6a:63:23:44:6a:a7:64:4c:6e:b7:a6:
                    4a:ea:db:89:94:53:5c:94:db:ad:03:07:a4:6a:b1:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:83:9A:5A:F1:FD:07:C1:CE:8F:C0:3F:CD:8C:A3:2E:FE:FC:1B:30
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37302e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:7c:c6:49:37:9f:ab:66:fb:ed:de:4d:a6:d8:38:32:07:47:
         62:3c:be:0d:80:e1:b3:90:a3:d8:32:51:dc:05:bf:c2:08:e9:
         d0:31:dd:b1:ea:fc:1e:d6:e5:27:e4:f7:43:8e:d8:48:fc:1c:
         93:9a:6e:d8:73:2f:95:eb:9e:65:da:51:94:d8:eb:30:55:ec:
         11:b0:f2:6e:45:64:4e:11:f3:f1:9b:e5:4b:bf:da:75:54:d9:
         81:bb:f0:e1:bc:22:7e:2d:7e:83:e1:98:81:7e:2c:1e:9c:d1:
         34:2b:ab:dd:1a:0d:61:54:54:1c:ff:ab:4e:da:2b:70:d8:82:
         91:49:60:66:11:bf:c3:d9:e8:ab:38:44:89:f7:7b:68:cd:ad:
         d7:a4:4a:82:68:70:02:34:d5:05:10:65:42:fc:3e:fc:ac:7a:
         a7:aa:f2:53:eb:3c:9e:dc:a3:7a:27:39:2e:42:01:80:89:8a:
         bf:a6:ab:04:9b:aa:43:53:a7:56:5a:3e:a7:37:2a:be:ec:3d:
         54:d1:98:9a:3d:01:04:0d:c7:8d:b1:89:3d:a4:00:80:55:51:
         26:78:5f:06:6c:92:5d:dd:76:a1:2f:c8:77:fe:36:d6:92:39:
         ab:53:f1:8a:e8:ff:a3:9f:a3:dc:61:ec:54:23:69:b0:d9:c9:
         35:37:a6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org