Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230372e302f32342d3234203d3e20323632373733.roa
File:                     3137372e37332e3230372e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          4BI4wLx+BIiZ2Uq+JSUwrFRUj5y2gcnNxwWL+V+JsUc=
Subject key identifier:   D5:3B:4A:1D:84:72:66:F8:E4:C2:BF:10:6B:B2:6C:FC:9A:7E:66:67
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       6D620B11DE210D266003B907C2C406DFFF73C32A
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230372e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:35 +0000
ROA not before:           Tue 27 Sep 2022 19:14:35 +0000
ROA not after:            Tue 26 Sep 2023 19:19:35 +0000
asID:                     262773
IP address blocks:        177.73.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:62:0b:11:de:21:0d:26:60:03:b9:07:c2:c4:06:df:ff:73:c3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:35 2022 GMT
            Not After : Sep 26 19:19:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:e7:6a:1e:a9:ac:0e:8f:0b:6b:a5:39:56:
                    16:36:94:01:bb:da:99:4b:a0:a1:35:e7:c1:aa:62:
                    aa:ae:a5:0b:73:74:d7:43:0c:e9:14:08:f4:c5:f5:
                    a8:81:5e:ed:f3:f9:e9:e4:81:17:dc:c4:3d:47:55:
                    98:3a:37:53:04:67:17:d5:a1:57:7d:49:ed:28:d3:
                    d1:25:3f:81:fa:31:4b:4a:8d:89:05:de:b9:6b:cd:
                    96:1a:82:f2:8a:86:50:6c:19:b9:8e:73:1a:f1:74:
                    f3:7b:14:b1:48:f5:81:df:13:9d:78:3e:27:d8:c7:
                    c0:0a:5d:2e:5c:98:32:89:da:60:75:ce:6c:c4:ad:
                    db:c4:9d:2e:d4:87:6f:ad:40:03:2a:6d:0b:5b:b3:
                    2e:dc:2a:ea:f6:75:f0:48:fe:f6:a1:f3:19:a3:60:
                    ce:dd:fe:d2:06:97:7c:97:5a:56:d9:4d:df:56:d5:
                    58:c8:c6:d0:91:44:dd:01:c3:db:01:62:e6:98:d6:
                    2b:f4:04:ce:83:73:e2:52:9b:13:6f:74:95:35:3f:
                    ec:d0:a3:c6:1a:79:90:44:f0:66:aa:ef:6c:77:02:
                    2b:98:2a:63:42:e2:13:72:96:22:43:e0:6c:34:51:
                    f4:3f:fd:2a:0b:e2:ce:8b:50:ac:73:2a:db:97:5e:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3B:4A:1D:84:72:66:F8:E4:C2:BF:10:6B:B2:6C:FC:9A:7E:66:67
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230372e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:8e:e5:07:95:75:3e:08:af:39:b3:e6:aa:d6:51:40:7b:00:
         af:49:bd:e1:c0:37:a1:aa:9c:3c:a1:d1:49:7f:b7:f8:b1:72:
         cd:c1:0d:72:bd:d3:05:f2:5e:58:24:9c:bf:69:77:a2:79:f5:
         da:18:ae:71:bb:fb:f9:84:3c:19:97:32:64:ad:ff:c9:30:48:
         a3:6c:51:8a:7d:76:6c:83:44:65:59:50:a0:0f:46:31:5e:9d:
         5e:20:0d:9e:91:75:dc:6a:a9:86:c0:5a:4f:76:6f:22:e5:16:
         0b:a7:be:be:04:20:1e:e9:b5:49:db:90:fa:22:3d:b7:1c:12:
         ec:44:7c:f5:17:74:91:1d:0d:15:ee:6c:aa:21:78:d9:98:6f:
         50:b0:9c:95:2a:11:b6:bb:06:6d:cf:a8:42:46:2a:26:65:64:
         bb:09:3e:94:b7:82:95:45:75:8e:91:a3:0b:96:b0:ed:22:cb:
         5e:42:af:57:ae:fb:0b:94:de:61:44:9d:71:83:e0:5b:62:c3:
         e9:25:89:ef:bd:e6:6a:a7:2a:e3:63:ca:76:a2:51:1e:00:1d:
         31:6d:dd:b9:13:97:11:6a:2e:cb:38:f4:b2:29:b6:6e:74:f5:
         c1:c1:3b:c9:c7:04:2e:d6:dc:46:ff:e5:48:31:81:e2:3c:a7:
         78:cb:f2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org