Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38352e38382e302f32322d3234203d3e20323632373733.roa
File:                     3137372e38352e38382e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          slid8/arcdANLOegNT4LshfY6YjdZiawC6mgOYWyjuc=
Subject key identifier:   28:E3:0C:94:0D:10:20:4C:7F:A0:DA:46:E6:6F:AE:B6:06:7D:90:4F
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       68993E2B336DC04C9C5F61D38815533A4D2E2E1B
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38352e38382e302f32322d3234203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:52 +0000
ROA not before:           Tue 19 Mar 2024 21:48:52 +0000
ROA not after:            Tue 18 Mar 2025 21:53:52 +0000
asID:                     262773
IP address blocks:        177.85.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:99:3e:2b:33:6d:c0:4c:9c:5f:61:d3:88:15:53:3a:4d:2e:2e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:52 2024 GMT
            Not After : Mar 18 21:53:52 2025 GMT
        Subject: CN=28E30C940D10204C7FA0DA46E66FAEB6067D904F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:8c:b8:b3:08:08:8a:ea:d7:db:20:c4:ac:
                    0a:bc:df:16:a9:46:6c:69:c4:d2:18:ad:82:1e:69:
                    b2:5d:7e:1b:84:fb:70:82:12:53:21:81:5b:19:de:
                    15:3f:4d:39:ae:db:95:a6:24:ae:a2:57:7d:5d:2e:
                    f3:39:9b:2e:64:81:e9:9f:5e:9c:8e:d9:f1:06:b2:
                    30:2e:c6:cb:26:e2:85:94:18:8e:6e:56:c0:f1:2b:
                    01:26:21:c7:a5:d6:18:74:19:34:69:4e:bb:37:4c:
                    c7:5c:0b:6d:36:28:12:fd:f8:09:50:af:57:c0:a6:
                    32:a8:10:94:1b:d8:f5:7f:fe:f6:f1:6f:f4:c1:f3:
                    78:25:eb:06:10:23:29:9d:42:4a:48:f5:61:69:d7:
                    5e:17:5f:1d:31:1a:b1:b2:8d:c7:5b:6f:46:89:bb:
                    9a:20:f8:2e:21:4d:f7:73:1b:f2:5c:c2:23:b2:50:
                    cb:13:aa:75:d7:4e:bc:9f:39:00:45:72:09:f1:50:
                    c8:16:21:45:ea:43:eb:c7:a5:64:88:38:77:34:94:
                    2f:28:f1:87:fd:da:47:2f:fa:a1:52:5d:0f:30:81:
                    7a:75:54:77:bd:45:94:80:94:8e:2e:ec:e6:ae:b0:
                    fd:d2:c0:63:62:8d:e3:ce:26:db:22:6e:1d:8c:2d:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E3:0C:94:0D:10:20:4C:7F:A0:DA:46:E6:6F:AE:B6:06:7D:90:4F
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38352e38382e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:52:b8:9a:72:a6:49:c0:22:0c:c2:f9:0d:9c:67:dc:5a:dc:
         2e:64:b8:d7:b9:89:8c:88:0f:94:81:b7:a5:ab:af:dc:bd:9a:
         ab:4e:e0:a0:bd:f0:15:92:5c:fc:eb:f1:d1:45:2e:62:5d:71:
         64:04:f5:f7:59:96:5e:51:41:19:0b:d2:b6:f9:45:29:15:f4:
         0f:6c:09:4b:50:ed:d9:89:6f:d7:9a:bb:4c:f5:cb:5c:bc:64:
         b5:9c:f2:2c:fe:ed:d5:91:cc:9a:42:a9:a7:f5:f2:68:9f:8d:
         8e:8a:5c:a6:14:5d:13:64:e6:e2:0c:39:5c:76:1e:c1:e0:30:
         09:c3:b7:0b:78:a1:0e:91:44:d7:45:1b:30:2b:12:a9:a0:72:
         ee:67:2f:1d:eb:2c:5b:10:12:b6:15:ed:71:fc:44:ad:fd:a3:
         80:b4:94:fa:e0:c5:0a:99:b5:b1:50:46:16:0e:18:a9:1b:b8:
         23:36:17:be:fc:d8:aa:35:5b:e4:35:15:a8:b2:86:cb:b4:6e:
         94:91:1f:4f:7b:ff:03:02:d2:73:29:9e:3d:fb:9c:a4:5a:f0:
         a7:f6:a1:34:bf:6c:ac:14:ad:cc:58:ba:d1:d2:ee:18:5e:e9:
         1f:ff:78:d3:68:af:cd:32:b5:e4:0f:24:15:3b:e5:ca:c2:3e:
         69:10:ee:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org