Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37342e302f32332d3233203d3e20323632373733.roa
File:                     3137372e3135322e37342e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          ycxdo7+oxSC8UHRzU03eTOtWyQkM4sKRYkAd9hHc3P4=
Subject key identifier:   D6:EB:86:00:A4:01:66:E7:D1:32:72:7A:81:AA:3E:A6:21:B5:76:52
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       18130109FABDA48946A539A425F52FC0FCF390FF
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37342e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:03:07 +0000
ROA not before:           Tue 09 Aug 2022 13:58:07 +0000
ROA not after:            Tue 08 Aug 2023 14:03:07 +0000
asID:                     262773
IP address blocks:        177.152.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:13:01:09:fa:bd:a4:89:46:a5:39:a4:25:f5:2f:c0:fc:f3:90:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:58:07 2022 GMT
            Not After : Aug  8 14:03:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:ff:3f:88:6a:f8:ae:76:7d:fd:81:55:94:
                    38:47:9e:4b:8b:b5:1c:fe:97:5e:83:37:11:79:b8:
                    17:87:dd:71:a6:0a:cb:9c:65:e6:2e:71:0e:c5:cc:
                    3a:e0:2e:da:ae:e0:e6:b6:f2:63:3c:8f:4e:66:06:
                    e3:b9:47:e1:51:44:86:dc:d6:99:1e:11:ad:ef:70:
                    b2:21:66:45:4b:92:94:88:75:ac:6b:39:01:7c:a4:
                    98:83:8d:6a:f4:ae:81:e7:7b:f8:ca:9d:b0:2d:a8:
                    de:fe:25:84:09:53:61:44:93:fc:b4:c8:56:a5:29:
                    fb:d1:08:29:ef:73:fe:09:c2:e4:b6:82:fe:93:18:
                    c3:d3:06:ad:78:eb:ab:1c:2c:c6:1b:37:36:ac:e8:
                    5c:d4:0a:5b:e7:a0:8e:92:eb:ca:4d:3b:1d:3e:f8:
                    96:fc:17:a3:a6:ac:f3:c5:3b:2d:e9:66:10:dd:37:
                    3b:cd:ca:d1:b6:4e:ad:91:fd:70:3a:3d:2b:a7:aa:
                    99:83:fe:f2:88:13:e3:2b:35:05:30:53:a2:57:20:
                    d5:2f:6b:f3:04:6c:e5:80:3c:96:b8:8e:f8:29:65:
                    71:04:7c:ec:98:75:e3:7b:a2:86:46:5a:18:d3:24:
                    a2:b3:3b:f2:2a:60:2d:86:ed:96:76:03:4f:cd:ce:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EB:86:00:A4:01:66:E7:D1:32:72:7A:81:AA:3E:A6:21:B5:76:52
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37342e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:95:21:70:8f:c9:a0:0a:09:da:cb:2e:38:dd:be:b7:6d:82:
         a5:85:5b:19:e7:4f:9f:ab:e1:9d:f7:77:7f:34:8a:d0:e0:a7:
         f4:e0:84:b6:58:84:5d:c1:9a:83:53:b8:f3:d1:eb:c7:0a:87:
         f3:aa:27:5b:fe:e3:e0:5b:00:7b:b6:29:67:e7:ae:2a:f1:f4:
         94:81:38:50:17:06:31:38:b7:4c:b7:bf:e4:04:9d:06:3c:ac:
         74:a4:42:26:2c:80:d8:63:7f:41:74:2c:5c:32:85:50:cc:18:
         52:a2:ac:ec:6a:53:72:ba:81:2b:e1:ed:4b:85:0b:f9:b4:9b:
         ee:94:28:61:5d:60:d0:b5:7f:32:1e:b4:ff:17:60:7a:96:df:
         80:f7:66:6f:e1:e0:b2:88:ee:17:e1:f1:cd:67:11:be:14:f1:
         ca:77:33:10:d0:8c:45:01:26:d4:67:bd:65:56:35:1f:40:33:
         30:91:ba:ff:2d:f0:16:93:8b:c5:a0:60:81:cd:3a:c9:6c:75:
         18:56:93:a9:48:e2:7e:9b:76:be:2c:6b:e7:14:65:c1:e7:6b:
         df:73:08:c6:f1:ca:e8:c4:fd:12:2f:d3:35:0b:db:88:ee:21:
         67:06:cf:ff:f8:81:68:16:a4:d2:0b:ed:b5:b9:30:19:98:fd:
         fb:36:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org