Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37382e302f32332d3233203d3e20323632373733.roa
File:                     3137372e3135322e37382e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          4QCtTFg0ihCdy3Oe7dXTcrjVU80r5rU2qD67bslUDeo=
Subject key identifier:   9C:C1:18:03:2C:20:F8:58:BB:3B:4F:0C:6D:72:E3:C1:06:BD:F3:2F
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       497AD8DF7D3135356340C4A1B3AC4E69631343E6
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37382e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:03:18 +0000
ROA not before:           Tue 09 Aug 2022 13:58:18 +0000
ROA not after:            Tue 08 Aug 2023 14:03:18 +0000
asID:                     262773
IP address blocks:        177.152.78.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7a:d8:df:7d:31:35:35:63:40:c4:a1:b3:ac:4e:69:63:13:43:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:58:18 2022 GMT
            Not After : Aug  8 14:03:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:17:47:73:6b:28:45:13:fd:b4:45:63:2f:
                    d5:ca:37:25:06:91:e4:48:17:d4:e5:78:7c:bd:36:
                    e2:52:ee:57:bb:25:54:2d:0e:36:9e:d0:f9:0c:ad:
                    50:e8:9b:ed:8e:3e:76:53:57:7d:68:5c:d8:76:3c:
                    5f:a7:55:f8:7e:63:d1:bf:92:bb:4e:c9:70:ef:cb:
                    2b:91:9e:23:4f:b3:cf:cb:20:56:6c:be:c7:38:28:
                    b2:64:57:9b:6b:2d:6e:66:4c:e1:01:99:79:6e:23:
                    ae:0e:a8:33:d2:eb:33:e5:2b:42:ce:a0:22:e9:17:
                    43:56:53:a7:24:18:a6:a7:e6:5b:63:a7:2f:82:45:
                    d8:fc:a7:14:8d:cd:94:6a:f8:06:46:aa:72:4d:db:
                    5c:0b:ea:13:81:e6:c9:70:5f:48:95:34:06:78:14:
                    ac:eb:8e:ef:7f:c7:b9:d6:9d:96:1a:f1:b9:67:b2:
                    54:6b:9c:35:14:bf:39:9c:8c:e8:bd:1a:d1:58:6e:
                    52:60:01:0e:13:a8:e1:36:b9:f9:65:c7:b4:d2:2d:
                    e4:dc:a3:07:7a:cd:09:b8:a7:c4:29:7d:dc:52:36:
                    e4:a3:0d:2a:04:04:1b:29:3f:bf:14:56:bb:b9:37:
                    48:b6:4f:e4:c6:55:3a:a5:52:7d:3a:f6:06:ee:62:
                    17:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C1:18:03:2C:20:F8:58:BB:3B:4F:0C:6D:72:E3:C1:06:BD:F3:2F
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37382e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:36:cd:69:60:c4:ea:97:a9:2a:16:6c:56:21:f1:0d:7f:32:
         f9:b6:56:bc:d4:ed:8c:77:5e:bf:53:24:b5:1f:7e:62:b0:54:
         93:5e:4b:88:7f:7f:36:16:b4:6c:74:0e:02:3c:8c:2d:a2:ac:
         e7:41:96:68:e3:e3:53:d8:25:b2:80:d4:5b:43:48:1d:c6:89:
         1e:c4:f2:9b:21:79:d8:99:12:71:2b:1b:26:29:c8:4c:07:4d:
         62:3d:f4:46:2d:03:16:33:87:ea:3a:f8:1f:44:7b:d5:0d:6f:
         5d:89:37:4b:44:2c:e7:4c:cc:f3:9f:02:32:e3:de:7f:85:90:
         44:a7:b4:b7:d0:77:16:33:08:d4:99:2a:56:58:2b:44:9f:8a:
         dd:cc:70:52:22:46:14:cc:ac:45:86:12:e9:a7:6d:12:1f:fe:
         8b:c3:da:cb:79:a6:e1:77:8f:f8:98:ab:66:98:c6:d2:f4:a0:
         3d:82:6b:88:67:89:48:d9:f8:de:49:69:2a:b5:50:20:90:5c:
         3d:1a:e9:99:2d:3f:80:e0:dc:7b:8d:54:1d:bd:99:ca:e0:aa:
         2a:9b:1c:ba:ea:9f:05:84:51:c7:c3:30:66:46:5e:7b:b3:36:
         31:6f:99:e5:68:86:f4:fe:9d:f8:71:cb:a1:57:7a:d5:cb:64:
         5b:1f:b9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org