Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37362e302f32322d3232203d3e20323632373733.roa
File:                     3137372e3135322e37362e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          HNVVl7t1JhIKdrd2uoIbqA5f9hFFIwF4Pf+1gNQ8PrE=
Subject key identifier:   22:F3:F2:55:84:76:05:34:B2:1F:7B:A8:7E:29:A8:61:8A:C1:D2:0A
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       5CDDEDF6A2500A067C3A864BE3DC1830E65C4091
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37362e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:03:18 +0000
ROA not before:           Tue 09 Aug 2022 13:58:18 +0000
ROA not after:            Tue 08 Aug 2023 14:03:18 +0000
asID:                     262773
IP address blocks:        177.152.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:dd:ed:f6:a2:50:0a:06:7c:3a:86:4b:e3:dc:18:30:e6:5c:40:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:58:18 2022 GMT
            Not After : Aug  8 14:03:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:1d:02:b0:67:cb:61:9b:0e:d1:5d:7f:66:
                    30:48:92:53:7d:6a:dd:38:85:76:c5:32:b1:fb:ab:
                    19:db:d2:8b:ee:bc:a5:36:e5:e8:5f:43:bf:4d:87:
                    cf:04:b5:16:fc:19:52:ec:0c:43:ec:b8:29:68:cd:
                    df:03:d7:c7:fb:10:06:d0:1a:f8:b8:5b:27:53:f1:
                    f6:5c:f2:f5:8a:ea:40:72:f2:5b:f0:06:54:d8:29:
                    5e:4b:09:0e:af:d2:1d:4d:23:b2:fb:28:62:65:c0:
                    17:a7:ff:73:5f:77:39:02:b5:f5:10:c9:c6:94:10:
                    b8:b3:6d:d8:4d:c2:f1:bd:a0:ad:ba:5d:8e:3b:bb:
                    80:f2:08:14:f8:48:c3:7c:20:4b:17:09:47:6a:f9:
                    bb:23:cc:7b:7b:8d:e9:f4:45:34:93:44:c6:b6:cf:
                    88:7a:d2:92:84:0c:41:bb:a1:cc:08:e8:91:46:90:
                    b3:cd:3e:3c:fe:eb:19:cf:78:44:1a:a0:2b:14:38:
                    e5:9b:79:45:ec:50:f8:e6:5a:70:65:99:9b:2e:dc:
                    07:b4:49:b6:6a:9c:e0:85:ee:25:5e:d0:f4:95:c8:
                    bd:ff:6d:f7:89:f9:b6:fe:71:d1:35:23:16:39:2a:
                    bb:b1:f7:8f:ae:37:4c:02:13:8c:63:7f:3b:35:31:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F3:F2:55:84:76:05:34:B2:1F:7B:A8:7E:29:A8:61:8A:C1:D2:0A
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37362e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:e8:ad:04:89:64:72:51:44:49:81:c0:bd:8b:a4:96:88:a3:
         d2:de:70:e9:b9:0d:9c:90:3e:1f:0f:4a:0c:63:a1:5a:7d:be:
         79:88:43:2d:b3:ad:63:d4:30:b3:66:fe:7f:37:54:53:ff:03:
         2f:2e:ce:4f:8f:db:31:ad:fc:d4:40:e6:8b:c2:41:a4:1a:df:
         8b:11:ef:c7:8b:6d:42:ed:7f:d1:65:cd:a7:b3:fc:82:62:e2:
         a2:df:9d:ad:51:e3:80:31:3e:1c:1c:6f:35:7b:55:ad:5b:9d:
         28:6f:03:6c:e0:59:41:73:b1:46:dc:bf:10:c1:5b:7a:20:cb:
         47:97:0b:08:cf:30:2a:fa:b9:75:62:76:4e:25:5a:eb:56:a5:
         d6:8b:60:de:b1:dd:d8:fd:50:8c:9c:1f:76:24:3b:a8:f8:3d:
         1b:6d:34:02:20:ad:a9:3f:19:d2:b4:49:71:ad:27:7d:f3:08:
         05:8b:93:5f:71:12:fa:37:a9:1c:27:51:25:15:b2:f5:40:e4:
         07:33:e7:88:31:91:32:ef:3f:ac:db:0f:20:59:91:15:0a:1c:
         77:dc:57:d0:3d:19:cd:1c:47:5a:63:15:c8:5f:0a:b2:4f:f6:
         24:8a:58:28:b8:69:fb:1d:ad:05:d7:b5:53:c2:12:22:93:ad:
         a7:10:06:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org