Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37302e3137362e302f32302d3230203d3e20323632373733.roa
File:                     3137372e37302e3137362e302f32302d3230203d3e20323632373733.roa (raw, json)
Hash identifier:          Zze6l8dR94FVpydjvKtzb2n//P+oSc1qe4Mh2H4jBzA=
Subject key identifier:   A3:46:7C:27:37:37:FF:13:29:76:B9:EF:7D:78:47:2F:1B:00:49:0F
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       493D3276CC7FCB6BA9B73B1573F1B01F31E89CE8
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37302e3137362e302f32302d3230203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:44 +0000
ROA not before:           Tue 19 Mar 2024 21:48:44 +0000
ROA not after:            Tue 18 Mar 2025 21:53:44 +0000
asID:                     262773
IP address blocks:        177.70.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3d:32:76:cc:7f:cb:6b:a9:b7:3b:15:73:f1:b0:1f:31:e8:9c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:44 2024 GMT
            Not After : Mar 18 21:53:44 2025 GMT
        Subject: CN=A3467C273737FF132976B9EF7D78472F1B00490F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:e0:b7:a9:33:bc:30:b1:01:ad:58:e4:0b:
                    2e:5b:14:0a:ca:30:7b:40:6b:d3:62:8c:14:9c:18:
                    89:63:37:fb:33:46:da:84:8e:eb:fc:23:16:31:d9:
                    92:c0:d8:9f:22:41:33:d3:5f:65:b1:c2:d9:37:0f:
                    01:37:b0:41:3c:bb:c7:c2:cd:3f:0b:de:f3:33:be:
                    9b:bd:9b:75:6f:d7:c1:fc:ca:32:3d:46:bf:a8:25:
                    a3:07:65:3b:28:75:4b:8d:d3:3f:30:cf:31:87:22:
                    f5:2b:ce:dc:b7:19:e9:f6:81:9c:be:a6:d2:c5:a5:
                    85:77:cc:c8:5d:23:a8:94:5b:77:51:4c:24:2e:b4:
                    ea:7a:18:df:5e:97:6c:1b:b4:c3:a0:1b:54:f8:7d:
                    9a:53:e6:cb:35:2c:3e:18:61:00:6a:cc:2b:2b:cd:
                    df:76:b9:22:b2:a6:67:d6:2b:db:23:dd:aa:d6:ef:
                    0d:6a:46:95:8f:d8:40:2d:c1:7f:12:11:1e:d6:06:
                    da:45:4d:c2:9e:78:b7:84:aa:e5:f9:1a:c6:0c:32:
                    e0:d1:b7:48:8c:29:e6:eb:d0:2f:18:1a:d3:18:b3:
                    25:7f:e1:de:ff:9b:fb:92:8d:db:78:f2:16:9b:ee:
                    88:eb:61:5d:e1:3c:be:78:49:78:2f:81:20:39:7c:
                    47:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:46:7C:27:37:37:FF:13:29:76:B9:EF:7D:78:47:2F:1B:00:49:0F
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37302e3137362e302f32302d3230203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         df:ca:48:65:65:9b:f5:26:cc:e1:86:d1:89:3e:2c:71:65:1b:
         94:41:a2:8c:ab:4b:1d:9d:07:93:d0:da:d1:27:41:32:8f:82:
         93:d8:82:5d:1b:aa:e1:e3:3d:ce:3a:3c:55:e0:01:33:10:6c:
         d0:b3:7e:9c:10:b1:14:3e:40:5c:8c:86:bb:a0:2c:b5:2f:d1:
         b2:1c:c6:8c:31:44:5f:82:a9:94:d5:3d:95:94:ba:47:19:98:
         48:22:10:5d:29:b3:2e:93:5d:7b:d8:9f:5d:8e:c6:63:18:69:
         82:f3:f3:74:bb:b5:d4:0e:40:a9:11:81:6e:a2:1f:20:3e:66:
         cf:27:13:5f:d8:e6:2b:b7:09:a1:2d:20:d3:b2:48:c7:f4:16:
         bf:19:ab:55:70:d6:6d:73:08:d5:bc:24:f6:00:ef:e8:a2:a5:
         af:e8:b1:34:45:83:f3:f2:f0:be:bd:3f:23:85:66:2b:e4:de:
         24:6d:0a:5b:f6:d5:34:bf:86:0b:29:5b:c7:5b:92:d1:0b:52:
         91:d2:e7:fd:15:bc:7b:9c:70:54:14:b6:59:bb:a0:8b:0c:c7:
         80:e3:94:cc:19:a3:13:e3:ee:95:cd:45:68:55:02:0f:ee:75:
         48:7e:d1:43:a4:9e:39:d0:1b:fb:b6:1c:05:f5:87:da:12:c3:
         1d:94:58:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org