Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e33382e36342e302f32322d3234203d3e20323632373733.roa
File:                     3137372e33382e36342e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          4tau+eJNT5gK15LtS7YnF3O7e3UfpZEkoqnhRnqs+Fc=
Subject key identifier:   B4:8A:9E:D5:84:12:2B:FF:42:42:8C:45:57:B3:21:10:97:B8:F0:E4
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       657117E08164320EC3A962E4F5C5572884E8357F
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e33382e36342e302f32322d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:03:21 +0000
ROA not before:           Tue 09 Aug 2022 12:58:21 +0000
ROA not after:            Tue 08 Aug 2023 13:03:21 +0000
asID:                     262773
IP address blocks:        177.38.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:71:17:e0:81:64:32:0e:c3:a9:62:e4:f5:c5:57:28:84:e8:35:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 12:58:21 2022 GMT
            Not After : Aug  8 13:03:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:6f:54:77:76:54:4c:79:50:4c:d5:ba:84:
                    85:1d:c5:1b:f5:fd:a7:27:2a:04:5e:89:c6:27:df:
                    1c:6a:5a:2c:f3:dc:9e:10:5a:85:7d:7e:b8:1e:23:
                    ac:75:da:95:d0:8d:25:f4:5a:ca:6a:0c:d0:8d:9c:
                    83:c6:eb:d1:5d:b5:95:e1:99:b3:2b:d0:94:b5:b2:
                    bf:82:1a:91:d3:6a:86:1a:e2:ed:6e:85:58:06:c4:
                    1f:1e:d1:7f:dd:94:e8:08:32:ee:63:66:2f:5d:53:
                    d2:4d:2b:1c:39:8d:ea:3b:88:3a:e0:b5:11:db:9d:
                    3f:b3:d5:e6:79:da:ea:41:cd:63:a9:aa:9f:88:bd:
                    e2:4d:f7:1f:fc:99:82:25:fa:08:2a:f8:6e:93:f9:
                    b7:6f:e9:1b:78:8c:1a:50:eb:7c:de:8f:66:bd:db:
                    e4:05:70:5f:58:1b:67:5e:df:11:a0:81:95:56:c5:
                    26:a0:87:ae:54:53:a2:b7:49:1e:aa:d1:eb:56:20:
                    47:19:0a:98:0b:56:0d:4d:90:1b:27:2e:48:13:8e:
                    6f:22:90:b1:b9:2f:44:b1:e0:25:38:04:73:55:76:
                    8b:97:08:6a:f0:d1:55:cb:16:63:91:5c:8e:58:d4:
                    9f:1f:01:01:73:f2:dd:38:4d:2f:4c:63:dc:87:3c:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8A:9E:D5:84:12:2B:FF:42:42:8C:45:57:B3:21:10:97:B8:F0:E4
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e33382e36342e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:1f:d9:34:86:b6:8f:03:7d:fd:fa:ed:41:0a:32:e9:20:ee:
         4a:77:5a:58:a4:0f:c6:5a:f2:2c:2a:4e:cf:63:68:b6:34:88:
         72:80:ae:10:d6:7d:2a:58:ed:81:56:25:17:60:fc:a0:40:e4:
         aa:24:13:22:47:5b:c4:05:a7:42:62:36:1f:9a:86:66:d6:12:
         ba:0d:4b:f1:67:fe:3a:a8:85:0c:3f:ad:32:83:66:3d:4f:f2:
         1e:08:97:29:b1:08:eb:60:4e:37:10:5d:df:3a:54:c3:d2:4b:
         45:ed:a3:22:50:b3:c0:9c:24:2a:04:c6:8e:1a:7e:78:de:b9:
         a9:f1:3d:6a:5a:ec:63:2a:82:71:cc:e6:ca:31:29:f9:90:be:
         40:87:f4:de:58:c5:a5:7b:ca:a7:bf:24:fa:64:c5:97:c5:3c:
         1f:36:dd:01:47:28:83:ba:02:6a:4e:2f:00:67:5a:1c:1d:5b:
         44:ba:23:b4:00:84:5a:bc:f6:09:dd:9e:bb:91:e9:7d:34:cb:
         26:2e:7e:f6:f2:a3:f8:4e:2d:fc:78:93:f3:87:10:a4:95:ae:
         a2:16:9c:69:71:54:f9:cb:2f:af:c4:46:b2:c0:f5:51:1e:7b:
         cd:01:08:1e:fe:ca:ae:9b:d4:14:b2:e1:8f:94:ce:e9:87:f2:
         69:11:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org