Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32342d3234203d3e20323632373733.roa
File:                     3137372e38362e38382e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          yQNdgSzv0u5T+5vR0mBxEu/v5sRXEcDjp/LXvwXhQeE=
Subject key identifier:   F0:F8:8D:1A:FD:80:82:1B:BC:91:A4:57:59:6B:48:5B:E3:1A:97:DB
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       380CEE4EB9562F075EB9579D11C9F5592C978FD3
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:48 +0000
ROA not before:           Tue 19 Mar 2024 21:48:48 +0000
ROA not after:            Tue 18 Mar 2025 21:53:48 +0000
asID:                     262773
IP address blocks:        177.86.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0c:ee:4e:b9:56:2f:07:5e:b9:57:9d:11:c9:f5:59:2c:97:8f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:48 2024 GMT
            Not After : Mar 18 21:53:48 2025 GMT
        Subject: CN=F0F88D1AFD80821BBC91A457596B485BE31A97DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:30:72:e9:c6:4f:9a:ab:8c:9b:29:10:87:
                    a4:4f:fd:5c:45:81:77:73:6c:30:9e:f5:0b:63:92:
                    01:63:8e:13:ec:e8:b8:0d:b1:23:ed:49:93:48:4a:
                    dc:4c:31:8b:2a:92:c6:dd:72:50:86:c3:62:61:5c:
                    9a:64:fb:c6:c8:2c:68:27:2d:a9:08:49:8e:44:6a:
                    de:3a:3a:7f:88:0d:15:41:f8:ac:9e:41:cc:d5:ec:
                    4b:e1:24:83:f5:94:2a:e5:13:bb:80:95:be:a0:59:
                    33:d1:12:f7:7e:b8:c0:b5:e6:3d:5f:e3:39:e2:23:
                    73:e2:79:be:7b:e3:fb:e7:41:d4:1c:fa:b1:a3:f1:
                    6b:2e:46:35:b3:14:af:d9:c9:63:38:90:0e:bf:2e:
                    71:e2:17:bc:b3:68:87:50:20:c1:3e:74:d4:d0:89:
                    e3:2a:1f:fa:4e:d0:1e:a1:46:a4:01:1b:f5:10:32:
                    9a:06:d5:d7:27:d5:db:8f:6f:5c:88:5d:d2:53:28:
                    09:90:34:88:8c:29:21:a9:e4:a4:d0:58:19:6d:47:
                    c4:a1:36:70:61:6a:4d:b4:cb:ea:1a:b2:73:b9:8f:
                    b0:89:07:35:25:03:39:ee:7b:00:d1:f2:66:cf:7c:
                    3e:70:43:fc:aa:a6:55:a1:47:19:e3:bd:43:cc:18:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F8:8D:1A:FD:80:82:1B:BC:91:A4:57:59:6B:48:5B:E3:1A:97:DB
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:f7:1e:8d:4f:9a:3d:1c:bf:6e:a8:c7:65:46:e9:49:7a:3f:
         2e:2e:15:b1:f3:c8:85:33:12:b7:74:64:fc:03:10:2a:8d:07:
         cf:9e:40:7d:7d:5d:3b:dd:bc:d4:6e:a6:b9:8e:23:6d:1c:15:
         65:fa:72:b5:e0:4e:ff:32:c4:72:18:a6:cb:af:31:3c:f7:8f:
         2d:e6:41:ed:05:b8:3e:fa:49:e2:b7:15:de:8e:3a:48:60:5c:
         43:aa:61:b0:ce:d8:05:04:2c:5d:d0:4b:26:15:4d:72:ff:75:
         8b:5a:84:d9:86:d5:de:ae:47:dc:ec:f5:d0:25:25:e6:a8:8b:
         18:dc:68:a5:ec:e0:dd:00:5c:51:92:fc:2c:fa:a9:4b:b0:ec:
         9b:c8:8c:7b:6c:71:12:72:f1:82:24:5a:06:86:a7:ed:5a:50:
         08:1f:5c:a4:15:77:fa:39:32:e0:00:e8:93:53:ab:6b:1c:ef:
         79:c9:4a:43:73:47:fd:18:96:89:a0:98:a7:d5:e9:4c:1c:a3:
         e9:86:60:b2:45:d7:2f:4e:ee:26:ae:8e:b2:a6:c0:fb:31:bd:
         fa:eb:fb:26:4a:09:d8:9e:6c:26:83:3a:02:05:77:df:fa:db:
         38:48:79:23:2a:b5:93:82:1f:b2:2a:18:79:8b:91:eb:7c:c9:
         e8:6f:85:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org