Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37352e302f32342d3234203d3e20323632373733.roa
File:                     3137372e3135322e37352e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          1NtxuTvCosWpdNUfyal6LjF2W6yJsaGmAUvFF4fMeA4=
Subject key identifier:   89:65:27:D3:63:EB:91:A8:7B:67:27:15:51:6C:BF:81:E8:32:C6:21
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       7DB338DBC712E7466C17E540227BB1B76BFB4F94
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37352e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:03:05 +0000
ROA not before:           Tue 09 Aug 2022 13:58:05 +0000
ROA not after:            Tue 08 Aug 2023 14:03:05 +0000
asID:                     262773
IP address blocks:        177.152.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b3:38:db:c7:12:e7:46:6c:17:e5:40:22:7b:b1:b7:6b:fb:4f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:58:05 2022 GMT
            Not After : Aug  8 14:03:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:4d:ed:03:77:2b:13:e9:45:87:f4:66:c4:
                    04:a0:dc:28:26:80:14:43:2b:eb:0f:7a:bd:cd:40:
                    fa:13:bc:73:f4:19:6a:08:60:9d:5e:a5:65:00:cd:
                    43:88:fd:d2:7f:b1:77:73:c4:2e:48:2a:c9:9a:e4:
                    48:0e:40:9e:d6:83:6e:b7:3f:40:0a:4f:6a:e6:cb:
                    d6:f4:ad:02:e2:0c:80:e7:e7:84:78:77:07:16:be:
                    37:c1:23:1c:03:ff:71:28:59:5f:ce:60:68:b9:2e:
                    4a:50:f6:3b:c4:16:8a:f5:b5:4f:ce:69:0c:a4:cc:
                    8b:b9:d4:c2:9e:60:a1:47:6f:e7:2a:f8:c0:d9:48:
                    b0:b0:96:8a:2a:7a:9c:3b:6e:7a:ed:3d:15:4b:f5:
                    01:32:6d:28:75:36:d0:e5:67:76:ea:11:cd:f0:6a:
                    d8:86:b2:bb:eb:2f:3f:2e:2f:a2:27:fe:19:58:41:
                    4b:c9:21:c1:3c:e0:73:7a:f1:01:47:91:7e:eb:c3:
                    90:99:79:99:82:bb:4b:e0:66:f5:b7:7c:56:31:ba:
                    17:98:45:14:34:c4:fd:0e:a6:7f:f8:38:ab:89:68:
                    12:45:ee:04:e4:7d:1f:c8:f9:30:d0:ce:1f:3c:0d:
                    db:aa:2b:ce:aa:af:51:0f:5b:6a:1b:f7:ee:ea:df:
                    5c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:65:27:D3:63:EB:91:A8:7B:67:27:15:51:6C:BF:81:E8:32:C6:21
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37352e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:2f:34:17:3d:9a:e1:cd:f3:da:ea:ab:67:dd:4c:6c:9f:2b:
         7b:7c:0a:71:a6:03:4d:ef:a8:b6:5b:df:7d:53:23:28:98:2d:
         eb:04:b6:bf:09:1f:b3:01:dd:01:cd:91:06:89:5a:e6:5e:bb:
         e8:a3:83:ee:95:77:fa:0a:ee:42:14:1d:27:c2:71:ec:10:41:
         b7:cd:6c:7e:cf:4a:c5:ed:e7:f4:9d:f7:15:7a:3f:0f:3e:88:
         d8:99:e2:3f:3b:64:fb:4f:03:a9:9c:a3:f9:6c:ab:ab:71:c7:
         ec:d7:f5:c9:79:8e:63:4e:73:1a:f0:b2:03:59:38:e8:66:a6:
         bc:f6:a2:07:b0:8b:ca:a6:6d:e5:02:68:63:94:65:6a:f2:7c:
         99:fe:49:85:49:e9:54:79:00:18:01:8b:72:78:04:df:fb:04:
         c5:8b:76:0f:8c:ed:34:4d:dc:74:9a:ec:cf:d8:ae:7e:cb:97:
         4e:52:e6:39:24:2c:88:40:ff:7a:79:a3:6e:a9:08:26:51:18:
         5d:94:d1:40:79:0f:50:4e:4c:18:7e:c3:75:bd:0c:10:04:2e:
         16:29:b3:97:82:a3:b3:c8:42:e7:21:f1:a2:b7:73:70:ff:6a:
         79:a4:2e:40:1b:33:46:ce:27:40:80:59:d1:30:a7:57:23:82:
         0a:5e:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org