Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37322e302f32332d3233203d3e20323632373733.roa
File:                     3137372e3135322e37322e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          Eu7WSeIFvW/71pb/Lnr20k8bM8j9mrpaRQDCfjmn/OM=
Subject key identifier:   3D:52:34:E0:08:4B:90:5F:49:06:26:A5:55:02:3C:BF:A9:61:4D:26
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       485F5D7B5C9E103D9143AACD6E318520FF6A090A
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37322e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:03:06 +0000
ROA not before:           Tue 09 Aug 2022 13:58:06 +0000
ROA not after:            Tue 08 Aug 2023 14:03:06 +0000
asID:                     262773
IP address blocks:        177.152.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5f:5d:7b:5c:9e:10:3d:91:43:aa:cd:6e:31:85:20:ff:6a:09:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:58:06 2022 GMT
            Not After : Aug  8 14:03:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:c2:76:0d:7b:38:af:5a:d2:cc:12:1c:57:
                    6f:3d:54:91:27:2f:19:e8:4b:2b:1b:cf:69:20:f7:
                    f3:7d:34:85:42:a0:11:05:5f:ff:aa:bf:cd:db:e2:
                    cf:48:04:c1:17:73:23:4f:1a:33:4a:2f:3f:c6:6a:
                    c0:b8:95:e6:be:90:da:f2:e8:58:6e:53:54:20:f6:
                    4c:15:30:a9:b9:58:0a:23:c3:4d:ec:c7:76:ee:64:
                    7e:26:16:bf:3f:13:67:75:b1:86:e4:f9:17:32:2c:
                    cd:10:9e:a8:c6:e7:bd:b3:95:2e:8c:6b:3b:f6:be:
                    11:0a:4c:65:45:71:99:bd:38:c5:76:42:89:1c:4d:
                    b0:fc:48:6f:56:c0:e8:c9:9c:81:ff:79:f5:74:c7:
                    ec:38:ee:2f:55:d0:a9:cc:8c:7b:a0:12:b9:9c:a9:
                    e0:c6:d9:e3:10:cd:91:b1:8d:6b:89:96:62:5a:34:
                    71:f0:53:00:2a:b9:46:f5:5b:d7:ca:da:51:7e:05:
                    39:b6:39:e2:ab:1e:f6:3f:d1:6f:fa:ef:fb:6b:46:
                    7e:c9:c5:50:04:de:1c:b3:24:34:b6:a1:de:e2:eb:
                    69:39:32:26:99:e3:32:83:43:c0:f1:c1:59:cf:d8:
                    34:51:75:c7:07:b7:8c:fc:bc:f9:2a:ee:c4:5a:d0:
                    e2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:52:34:E0:08:4B:90:5F:49:06:26:A5:55:02:3C:BF:A9:61:4D:26
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37322e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:fb:70:87:76:ee:28:69:2d:bb:1a:f5:ea:2f:10:66:02:61:
         0c:6a:ec:ef:f6:10:15:f1:7b:6b:d3:b8:67:59:eb:19:81:da:
         5e:b1:83:b0:1c:d8:6a:af:3d:b9:f0:a3:be:fa:88:07:13:0d:
         64:75:7c:74:63:45:ce:a5:c3:f4:e4:fb:a3:3e:62:0f:bb:fd:
         7e:c0:ce:12:6a:7c:9e:d9:8c:43:8a:f6:11:b0:47:64:e5:07:
         4a:1b:9e:26:d6:4d:86:e2:15:f8:a1:4d:ab:ff:ac:65:db:b2:
         41:10:f0:d6:98:23:2b:6e:b9:b7:96:97:9b:f0:61:92:4a:3d:
         5c:55:1b:65:0f:35:3d:88:8c:ee:24:c6:6c:e7:e0:ed:9b:20:
         49:bf:ec:82:d6:dc:f9:83:de:76:4d:57:c7:5d:8d:33:7c:23:
         e2:4d:00:20:8a:33:5e:de:43:bb:6e:de:b2:31:39:58:35:8f:
         fb:aa:91:07:9f:e5:c9:59:a6:1b:ad:1e:95:37:53:dc:9e:66:
         a0:c5:00:74:0c:d9:16:88:b3:ad:1d:a6:0b:0f:77:11:cd:d0:
         0c:0c:f5:05:4b:f5:ba:87:99:0f:d5:79:a0:c9:fa:84:49:06:
         4e:61:d8:dc:f1:39:3e:d4:97:e0:43:9c:dd:7e:b7:35:ad:86:
         67:e9:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org