Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32312d3231203d3e20323632373733.roa
File:                     3137372e38362e38382e302f32312d3231203d3e20323632373733.roa (raw, json)
Hash identifier:          Ax21/VULjwsCRMGx4h0yV1dpVvM+Sbk/RCb3hJ14HdY=
Subject key identifier:   21:D7:B6:F5:DB:C7:75:1F:20:B6:BE:05:76:95:5F:44:77:DE:B2:70
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       4448B51BDF66D17D2BCE7D250AF44788E26D9026
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32312d3231203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:47 +0000
ROA not before:           Tue 19 Mar 2024 21:48:47 +0000
ROA not after:            Tue 18 Mar 2025 21:53:47 +0000
asID:                     262773
IP address blocks:        177.86.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:48:b5:1b:df:66:d1:7d:2b:ce:7d:25:0a:f4:47:88:e2:6d:90:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:47 2024 GMT
            Not After : Mar 18 21:53:47 2025 GMT
        Subject: CN=21D7B6F5DBC7751F20B6BE0576955F4477DEB270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:16:e6:f1:e2:ee:55:4c:3d:ea:13:86:af:
                    09:d6:cd:79:88:96:20:96:4c:80:b9:17:95:10:39:
                    12:e2:b6:57:9c:07:c8:1f:e9:77:a2:f5:5c:2f:95:
                    f4:be:a9:0c:c0:a7:9c:33:97:7c:dd:6a:31:d5:67:
                    7f:b8:3e:32:38:d6:85:02:bb:f3:d7:a6:87:db:59:
                    5c:15:7b:3f:4c:3b:a7:4c:56:4b:9a:63:f3:07:da:
                    a8:74:bb:ef:a1:0b:1e:a6:a0:1c:06:99:9b:88:fc:
                    73:5f:10:0f:4e:6f:73:ff:90:dd:c0:cb:37:3a:b2:
                    c6:6a:48:a8:c6:4b:2d:6d:5a:e6:a6:9f:c3:d4:b7:
                    b5:ee:4f:46:de:62:3f:2b:3f:ba:8f:58:d1:12:92:
                    90:28:5b:ec:b5:9c:79:88:66:51:bb:0f:1c:96:ab:
                    d1:d0:32:a4:cf:70:a7:96:54:09:8c:ff:f9:69:1c:
                    c6:41:7a:92:3d:e2:55:ba:11:3a:86:bd:67:bc:26:
                    c3:3b:3a:85:64:e8:f0:09:ac:62:83:86:c5:d5:9c:
                    e8:8f:9c:e1:f9:00:2b:d7:dc:4e:51:dc:2f:95:94:
                    dd:cd:40:46:8f:41:6c:42:2e:a7:06:96:d9:44:26:
                    8f:9d:44:aa:4b:af:1d:ff:e5:9e:90:d3:79:97:af:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D7:B6:F5:DB:C7:75:1F:20:B6:BE:05:76:95:5F:44:77:DE:B2:70
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32312d3231203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:12:17:34:91:dd:52:3d:6d:88:63:b2:d2:17:73:35:4a:a5:
         f1:86:1c:6b:2f:ac:60:e0:bd:55:f4:23:cf:a4:5f:88:74:a3:
         dc:cb:e9:84:05:b0:05:6e:28:54:3e:ce:bb:fc:a2:32:c4:58:
         8b:d7:8a:d7:b0:90:86:21:aa:80:85:66:cc:bc:16:38:e6:5b:
         20:a1:4c:c1:7b:12:f0:82:ae:25:49:26:77:8f:37:47:d1:22:
         bc:d3:e1:22:c1:a0:cf:65:c5:04:7d:ad:43:12:16:a4:3d:d1:
         9f:84:b9:78:a3:a7:bb:7a:59:df:8e:c8:ae:6c:c8:9e:49:e0:
         0c:45:33:52:e3:f9:20:7d:91:9e:6b:86:fa:d5:33:3f:cc:f2:
         b9:d5:b8:de:db:d4:e0:97:d4:b9:66:0e:5f:45:4e:1f:73:40:
         a0:18:5b:b2:9d:0e:05:27:f1:4c:ec:33:52:23:97:c3:6a:e4:
         1f:2b:2e:18:cf:8c:c0:20:4b:1b:39:32:51:9a:0f:20:4e:f2:
         fd:50:96:3f:d1:f0:f1:37:c9:58:ce:6e:72:88:2c:fa:08:00:
         6a:db:03:d1:46:1f:c1:b2:1d:d2:73:60:c5:7a:c4:9e:ec:de:
         65:d0:4a:35:26:ec:e0:aa:ae:6a:ad:e8:23:d6:c4:a5:4a:2d:
         a4:e5:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org