Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39322e302f32322d3232203d3e203532353638.roa
File:                     3137372e38362e39322e302f32322d3232203d3e203532353638.roa (raw, json)
Hash identifier:          uF4B7T+cqO6dD1L9x2Qb/c2PxboSC/PsNzUXTSgxWYU=
Subject key identifier:   FA:F1:BF:14:97:4F:33:0C:C9:A7:96:D1:B3:69:EE:CC:FD:13:54:02
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1011912859417EE3C9678727525F627D69DD4F35
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39322e302f32322d3232203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:11 +0000
ROA not before:           Tue 07 Feb 2023 19:59:11 +0000
ROA not after:            Tue 06 Feb 2024 20:04:11 +0000
asID:                     52568
IP address blocks:        177.86.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:11:91:28:59:41:7e:e3:c9:67:87:27:52:5f:62:7d:69:dd:4f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:11 2023 GMT
            Not After : Feb  6 20:04:11 2024 GMT
        Subject: CN=3082010A0282010100C0DD3DA464FBBE68264ED58BBB3D30A81F5FA2C7E2FC6161113F5B5C130FEB18028A3E86A0CA9443FB0F35E2DBF0783DCC8A15072BDCDCB8A58A14738165D1DAF4DCAFA6B840396B6C8435BBEFA1CDB2E094D945FA6D951CD986EB31640FE9E63AE45E8D99E4E40EEC03DBB5F0E9D8EB9F64E5ACD5EF60764A66E672C33C5061ACD411DD017093A357D541F29443D11FF42F365AAA9A3607023786D4211454971B66DD3AB61AD3D858D6357BB530C0E4D19F20C91FEA4DFD94F64D92245DB6C92069EB7CD4B3394EEBA7D2071EAA3961C3FA34CA06C952440DC7FF8CE51DCB375988D384FDCA7EC33A0B4F23025492CCFA6DEBEF0BBC9A186EEC6D6B4D9FCEB90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:3d:a4:64:fb:be:68:26:4e:d5:8b:bb:3d:
                    30:a8:1f:5f:a2:c7:e2:fc:61:61:11:3f:5b:5c:13:
                    0f:eb:18:02:8a:3e:86:a0:ca:94:43:fb:0f:35:e2:
                    db:f0:78:3d:cc:8a:15:07:2b:dc:dc:b8:a5:8a:14:
                    73:81:65:d1:da:f4:dc:af:a6:b8:40:39:6b:6c:84:
                    35:bb:ef:a1:cd:b2:e0:94:d9:45:fa:6d:95:1c:d9:
                    86:eb:31:64:0f:e9:e6:3a:e4:5e:8d:99:e4:e4:0e:
                    ec:03:db:b5:f0:e9:d8:eb:9f:64:e5:ac:d5:ef:60:
                    76:4a:66:e6:72:c3:3c:50:61:ac:d4:11:dd:01:70:
                    93:a3:57:d5:41:f2:94:43:d1:1f:f4:2f:36:5a:aa:
                    9a:36:07:02:37:86:d4:21:14:54:97:1b:66:dd:3a:
                    b6:1a:d3:d8:58:d6:35:7b:b5:30:c0:e4:d1:9f:20:
                    c9:1f:ea:4d:fd:94:f6:4d:92:24:5d:b6:c9:20:69:
                    eb:7c:d4:b3:39:4e:eb:a7:d2:07:1e:aa:39:61:c3:
                    fa:34:ca:06:c9:52:44:0d:c7:ff:8c:e5:1d:cb:37:
                    59:88:d3:84:fd:ca:7e:c3:3a:0b:4f:23:02:54:92:
                    cc:fa:6d:eb:ef:0b:bc:9a:18:6e:ec:6d:6b:4d:9f:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F1:BF:14:97:4F:33:0C:C9:A7:96:D1:B3:69:EE:CC:FD:13:54:02
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39322e302f32322d3232203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:6b:6f:2e:06:3e:c3:80:67:41:f2:d8:9b:8c:cd:12:6a:7f:
         e0:43:b8:ba:95:2b:6f:89:21:7d:2f:f7:e4:f2:ab:2f:ca:a5:
         2a:a2:5b:ec:cf:6d:b6:c0:2e:cd:08:10:8f:2a:38:ce:9f:89:
         03:45:df:89:52:4f:c6:fd:c6:fc:26:43:bb:38:9d:3b:23:23:
         83:4d:2b:8d:7c:91:17:0f:43:2c:73:c4:08:53:5f:0d:9f:8e:
         59:f7:5e:fa:6a:e5:d5:5e:96:e9:a5:db:95:99:58:06:d8:23:
         40:73:41:81:66:7b:4a:a1:1b:eb:81:e9:9a:97:52:8f:f5:01:
         a0:75:f0:65:64:2f:a5:9a:24:9e:8c:21:4e:ac:0d:5e:6d:c6:
         da:51:a6:a7:33:e3:b2:f7:76:04:6a:db:79:76:79:db:c5:ea:
         7d:8d:9f:75:ac:fe:21:77:85:46:25:0c:1a:4b:2a:dc:33:2c:
         f9:0b:3a:7c:f5:df:6e:ce:89:0e:11:7c:1f:5a:77:ec:75:84:
         c2:a3:d9:c2:23:20:74:1c:90:8d:00:62:b8:9f:f7:af:7b:54:
         3a:c9:d8:87:5d:77:77:ea:dd:ae:0f:62:d3:9e:dc:d3:fc:6d:
         8e:9f:41:09:00:71:3b:20:16:ed:ea:35:45:5f:46:e1:33:bc:
         c9:f7:7b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org