Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32332d3233203d3e203532353638.roa
File:                     3137372e38362e38382e302f32332d3233203d3e203532353638.roa (raw, json)
Hash identifier:          ronCd1lmRdyHRb+leu7egnnq7aQ968Cfhwc5pok4gBw=
Subject key identifier:   F7:09:E8:E1:63:AC:37:BE:45:B3:F2:5A:4B:53:14:BC:DF:7F:BC:82
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       22F69B8544C214251585A6ACAAFC1C0B060A2935
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32332d3233203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:13 +0000
ROA not before:           Tue 07 Feb 2023 19:59:13 +0000
ROA not after:            Tue 06 Feb 2024 20:04:13 +0000
asID:                     52568
IP address blocks:        177.86.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f6:9b:85:44:c2:14:25:15:85:a6:ac:aa:fc:1c:0b:06:0a:29:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:13 2023 GMT
            Not After : Feb  6 20:04:13 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:7a:f6:fc:56:bc:33:dd:dc:7a:06:7e:35:
                    34:03:da:6a:17:1f:67:4c:62:3a:7b:e5:b6:39:1a:
                    b4:7c:ae:3e:25:ff:23:a5:5d:4c:46:7e:48:d9:26:
                    e7:df:f4:4c:ba:1d:fe:32:7e:7f:83:8b:61:53:8c:
                    13:45:89:82:c6:7e:47:4f:b6:63:e4:49:bc:02:75:
                    84:ea:87:3b:0e:72:75:0d:75:f6:0a:ed:41:f9:5f:
                    9e:92:79:ec:da:6c:0e:a9:13:6f:1d:ab:53:d7:c6:
                    42:f9:be:08:2b:bb:dd:60:5d:b5:dc:a3:e5:a6:0e:
                    22:64:a7:f5:a7:d8:21:02:df:ec:48:30:1b:8e:78:
                    b5:3c:60:3a:a3:41:d9:c9:91:10:9d:77:f3:d6:c0:
                    55:38:5d:7f:ff:43:b1:62:30:bd:cf:46:9b:66:63:
                    d2:47:31:3f:8d:f1:ea:72:9a:da:f2:92:ca:9a:e6:
                    af:96:c1:55:f9:c0:27:0c:1c:6e:d2:40:16:c2:84:
                    e2:5b:f5:89:f1:60:a4:f9:12:4a:86:6e:14:0b:fa:
                    3d:82:1a:c9:e8:71:56:4c:93:75:25:62:ff:a3:73:
                    cf:72:b9:6f:cc:a6:49:9e:8d:35:66:75:ad:26:77:
                    7b:21:71:be:78:17:c9:15:27:fa:7f:5e:50:e8:1e:
                    09:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:09:E8:E1:63:AC:37:BE:45:B3:F2:5A:4B:53:14:BC:DF:7F:BC:82
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32332d3233203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:11:ce:be:cb:4a:18:b6:ef:9b:15:1f:52:c6:0f:8f:d7:24:
         0e:4d:50:8a:90:ba:ad:65:44:3e:68:c2:04:b1:44:0a:6c:57:
         3c:ff:3f:38:82:2c:28:7b:96:8f:76:72:ab:14:9e:35:4f:ab:
         a1:71:d9:70:53:65:cc:45:e5:67:14:51:b4:22:17:b8:a6:6d:
         3d:29:eb:e5:80:76:31:61:20:ad:79:29:fc:2f:47:d2:f6:f8:
         c3:8d:8a:91:4a:bd:4e:15:5c:8e:85:e6:52:fd:f4:19:21:5a:
         a6:a1:e2:29:a4:2e:7e:42:69:2c:80:6c:e3:50:93:bf:f3:bf:
         70:09:e6:17:5c:fa:46:a9:d4:d1:bb:cd:d8:ea:dc:fb:e6:15:
         1c:9a:ff:77:15:37:af:06:f8:f2:a4:9c:74:6a:86:dd:85:bc:
         c3:6e:1a:fc:c5:85:90:43:ab:b7:a1:92:3e:4b:d7:b8:a2:72:
         08:8f:5a:3e:4a:1e:56:1e:d9:d4:50:66:f8:7e:83:c3:7e:a6:
         0b:28:74:dc:b3:4a:9b:da:eb:5a:04:f3:23:e5:62:71:ce:aa:
         5f:b5:d6:d3:b5:d1:2c:7f:2d:fb:c3:78:f4:f4:0f:9a:41:bd:
         9f:23:49:0a:0f:d5:25:af:70:3b:ab:a8:e2:57:db:a7:9b:03:
         7b:c6:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org