Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230322e302f32342d3234203d3e20323632373733.roa
File:                     3137372e37332e3230322e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          QEXUhrVu3NlZfvA5smNE26Z3sKMCdTtzHQ6Mzm9+RUQ=
Subject key identifier:   38:82:A9:0C:08:BA:9F:91:AD:C4:A4:6C:B7:6A:EF:61:6A:34:8F:DA
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       5DC2292708C8CFE91C00AE6B354502975FF396CF
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230322e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:32 +0000
ROA not before:           Tue 27 Sep 2022 19:14:32 +0000
ROA not after:            Tue 26 Sep 2023 19:19:32 +0000
asID:                     262773
IP address blocks:        177.73.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c2:29:27:08:c8:cf:e9:1c:00:ae:6b:35:45:02:97:5f:f3:96:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:32 2022 GMT
            Not After : Sep 26 19:19:32 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:31:e2:d7:a4:6b:ea:d1:dd:72:f9:f4:e9:00:
                    9a:a0:57:fc:bf:81:84:20:dc:f4:d2:3a:64:2b:5c:
                    b4:a9:00:8c:63:2a:b2:6b:94:64:82:db:63:4a:b0:
                    03:e2:ae:32:92:89:d1:0e:39:53:cf:6c:cc:12:04:
                    81:a7:5b:1f:63:40:48:f4:e9:1e:34:38:bc:26:59:
                    0c:7f:eb:4e:7b:9e:70:5d:1b:a1:9a:48:0a:47:d9:
                    46:4c:7c:c4:14:24:7d:de:7e:d0:4f:48:e2:1e:41:
                    b7:b3:b0:6a:e8:ed:13:25:97:fc:c0:a0:36:a3:44:
                    6d:f9:fb:03:f3:a0:07:b6:0f:c9:9e:b5:3e:8f:45:
                    c3:0a:5f:96:29:cf:b0:86:9b:b6:80:27:61:07:63:
                    8a:0d:79:f4:34:49:8c:66:69:ec:d3:7a:32:64:2d:
                    00:3c:dc:d4:2b:24:ea:a7:56:03:b4:6b:73:35:bd:
                    80:94:4d:a9:ee:2e:37:77:ef:f5:83:32:21:e8:57:
                    7b:aa:22:b8:87:15:82:e3:b8:87:3d:cd:2a:74:4c:
                    b8:d2:01:df:9a:fd:de:e2:a4:cc:6a:54:99:71:11:
                    8c:a9:e9:cb:63:5a:e3:ca:74:d9:11:3b:86:97:a1:
                    01:01:6d:57:3e:b9:bc:ce:c8:ab:bb:f6:ee:79:b6:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:82:A9:0C:08:BA:9F:91:AD:C4:A4:6C:B7:6A:EF:61:6A:34:8F:DA
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230322e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:84:cb:96:4b:ce:06:54:47:7d:de:07:3d:4c:5d:71:b7:d6:
         e2:eb:e7:c0:12:29:fc:14:25:0c:48:63:59:eb:1c:05:9f:db:
         dd:b5:bb:c6:a5:8f:2f:66:23:4a:d5:6e:59:cb:0d:2f:e6:90:
         e8:5d:49:ce:b5:ce:29:55:3a:c8:15:79:b3:da:d1:3a:cf:8f:
         43:68:cb:da:5f:86:1f:5c:78:5c:40:35:f5:17:24:27:50:4e:
         98:f4:ef:fa:c6:dd:be:fa:bc:5f:c3:2c:d8:3f:92:ea:1b:57:
         13:6d:54:25:84:26:6b:1b:30:e9:17:8c:6a:b1:c0:0a:91:c9:
         22:b8:77:eb:35:dc:b1:c1:a9:e0:52:14:45:dd:8f:37:66:db:
         bd:e1:53:69:3b:21:ee:39:3f:31:37:05:93:e1:48:b7:5e:cc:
         cc:13:e1:a5:a6:9d:c1:82:d7:36:3b:2b:0e:23:cf:c7:b3:b0:
         2e:33:21:13:6a:c0:d5:19:9e:4e:0a:26:78:d4:f3:90:10:8d:
         7a:87:35:30:0b:ca:40:25:c0:c1:32:2f:b7:ea:40:e8:ae:a7:
         18:a9:02:35:d2:a5:fe:3d:82:d5:5c:10:53:28:ed:e4:f1:31:
         9f:a1:2e:de:d2:b3:86:95:dd:7f:bb:b1:fa:69:2f:de:7e:ee:
         02:e3:53:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org