Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32312d3231203d3e203532353638.roa
File:                     3137372e38362e38382e302f32312d3231203d3e203532353638.roa (raw, json)
Hash identifier:          BFiO0WGdI1AKIaL9cUyrU9JY31M+V+itq2knEuqIZHU=
Subject key identifier:   0E:4F:E2:76:4A:9A:B3:76:04:E1:AB:F7:77:1B:75:23:27:4D:98:BE
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       5DD5C80D4FD0B31B89CC3916A27F84CE1C2DFD6B
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32312d3231203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:12 +0000
ROA not before:           Tue 07 Feb 2023 19:59:12 +0000
ROA not after:            Tue 06 Feb 2024 20:04:12 +0000
asID:                     52568
IP address blocks:        177.86.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d5:c8:0d:4f:d0:b3:1b:89:cc:39:16:a2:7f:84:ce:1c:2d:fd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:12 2023 GMT
            Not After : Feb  6 20:04:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:f3:3a:65:3a:57:c3:da:f6:2b:29:5e:3a:
                    05:96:0e:ee:93:90:af:ae:e4:27:12:e7:27:58:e6:
                    83:61:c6:95:c2:53:d2:7f:5d:1b:8e:b1:68:68:aa:
                    80:7a:e5:bf:16:91:e0:c2:d0:86:7e:9b:45:6b:51:
                    62:cc:c7:98:e7:a2:53:7f:4f:9f:78:6f:38:79:49:
                    0e:48:fb:f4:57:7b:bd:f7:ee:24:da:aa:f4:c7:62:
                    7f:3e:e6:1c:88:4b:0d:23:71:d5:3e:62:c0:3a:60:
                    a3:60:75:74:dc:fe:20:bb:e0:1c:84:b8:fb:7d:0a:
                    cd:ed:3e:25:68:15:91:d7:2c:2e:17:53:32:3b:ee:
                    28:ec:3c:8a:51:92:5e:aa:bd:68:46:85:2d:44:16:
                    28:0f:80:9b:ba:cc:b6:c3:dc:31:c6:e8:89:12:5c:
                    e2:ae:bc:c3:88:06:be:04:bc:dc:14:9d:9a:f0:bb:
                    5e:19:f6:d6:66:5d:86:6f:b9:ea:2c:26:4f:b3:9d:
                    80:36:6f:4b:c9:dd:d8:c1:fe:0c:71:67:3a:27:59:
                    8a:ac:9f:93:0b:fd:2a:e8:3e:b9:6d:90:13:0f:87:
                    01:c7:b6:0a:4d:0a:9d:b3:ce:e7:9f:49:21:fc:53:
                    cf:04:bc:91:1f:7a:e8:71:78:9c:36:fa:06:b8:02:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4F:E2:76:4A:9A:B3:76:04:E1:AB:F7:77:1B:75:23:27:4D:98:BE
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32312d3231203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:f7:6c:0c:60:82:83:c0:cc:13:72:09:60:2e:5c:7a:c3:8a:
         24:ef:d3:1d:bc:62:cf:8b:9c:cd:43:b8:26:e6:d2:a6:c5:7a:
         9c:9d:ae:9d:96:25:d7:30:4c:75:f7:90:9c:b0:7a:b8:95:d6:
         4b:36:c4:8e:f3:38:9c:ec:69:b5:b0:98:34:d8:b1:8c:7a:05:
         e0:90:b5:43:f7:ef:bd:5b:fa:b6:44:f6:ca:22:6c:58:9a:35:
         a1:19:ca:cf:f1:fa:42:e2:9b:80:f2:30:ae:38:83:d0:6c:a1:
         9b:29:b1:15:0c:3c:c3:42:c0:9c:c8:53:73:42:54:db:47:93:
         a4:5c:b7:ea:ad:40:16:58:f1:bf:e7:93:c8:55:3d:30:95:bb:
         73:d7:a0:3f:37:30:b2:fc:b7:64:eb:27:36:01:45:ca:a3:80:
         37:9a:c9:fb:6d:54:bc:cf:5b:d1:12:c2:dc:1e:27:36:9d:10:
         5c:ad:e8:a7:ae:fc:c6:d4:a0:33:29:30:8a:12:4b:01:f6:9a:
         07:54:23:5e:37:93:96:ee:33:5c:8c:32:01:45:92:8d:25:6f:
         6f:e1:0f:19:2b:a9:4c:a3:21:33:b8:c5:1a:25:54:31:59:31:
         1f:39:21:a1:a2:ff:ed:c8:d9:84:9d:cc:25:a2:57:c0:61:db:
         d8:e7:94:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org