Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39322e302f32332d3233203d3e203532353638.roa
File:                     3137372e38362e39322e302f32332d3233203d3e203532353638.roa (raw, json)
Hash identifier:          cczMQmjhfsvPKc1wk5mko84TqAJJj33qDNekb98ofk4=
Subject key identifier:   66:76:C4:B3:7D:39:D0:2E:28:9C:6F:F2:6E:4B:EC:C1:84:64:D2:1E
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       41FCD83275DA9C9AA8FC8C259C47F09369152657
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39322e302f32332d3233203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:13 +0000
ROA not before:           Tue 07 Feb 2023 19:59:13 +0000
ROA not after:            Tue 06 Feb 2024 20:04:13 +0000
asID:                     52568
IP address blocks:        177.86.92.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fc:d8:32:75:da:9c:9a:a8:fc:8c:25:9c:47:f0:93:69:15:26:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:13 2023 GMT
            Not After : Feb  6 20:04:13 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9d:a3:46:1a:4e:35:f2:66:ab:0c:73:61:b6:
                    6a:59:3a:46:fd:a4:8e:d2:05:33:85:29:42:b5:92:
                    c2:b8:e7:2e:ee:ac:5e:0c:c7:8f:1f:91:d4:a1:42:
                    86:a5:6f:4b:eb:33:7e:98:03:4c:20:21:12:0d:ce:
                    63:01:56:69:10:86:75:60:a2:2b:62:11:34:31:f8:
                    47:57:63:a2:06:b8:0f:23:9d:4f:a5:cf:90:e8:05:
                    81:aa:29:e2:c8:c0:c4:b2:4b:75:e2:f8:1c:ae:a1:
                    23:07:68:f6:05:4e:77:bd:f2:cc:90:60:cb:16:d6:
                    9b:a5:05:84:eb:2e:ee:f7:5a:e4:10:02:76:5b:01:
                    04:4e:14:e0:72:3d:fe:21:cf:7a:6d:da:9f:27:ad:
                    14:6d:a3:9e:a7:8f:2d:50:4f:33:c4:19:35:e8:6d:
                    56:36:bf:2e:5a:84:f7:87:c8:f8:95:fa:73:13:0d:
                    af:78:c2:9a:81:9f:35:cb:75:ae:85:44:a0:b4:97:
                    17:bd:3f:d6:64:d9:3e:73:31:9d:38:fa:e7:25:bb:
                    2b:ad:8c:63:85:ed:b5:a6:a9:20:e9:5b:91:40:be:
                    bf:c6:16:27:69:21:ac:27:65:11:45:2c:c6:f6:7e:
                    69:de:56:59:b8:7a:96:2c:22:61:1c:ad:61:31:b5:
                    44:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:76:C4:B3:7D:39:D0:2E:28:9C:6F:F2:6E:4B:EC:C1:84:64:D2:1E
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39322e302f32332d3233203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:79:48:b0:a3:48:a8:29:67:fb:a8:a2:db:6d:37:30:54:71:
         fc:fe:1e:d8:e0:7f:88:f9:4c:da:0a:44:d1:73:57:e9:c0:6f:
         ec:a3:4e:2f:0f:fe:c7:1b:00:1d:6a:6b:fb:83:46:ad:c4:cf:
         fe:3a:ec:ce:7d:f3:08:bb:d6:89:b0:10:29:8f:fb:b3:7c:c6:
         34:d4:46:1b:a4:34:b7:da:19:60:51:a2:7b:54:67:ee:56:8f:
         6b:2f:40:11:a8:33:bf:3f:87:27:23:e7:be:16:00:d8:4d:f4:
         e6:f7:88:0e:d7:c7:1e:09:6b:15:89:36:60:4b:38:64:95:f3:
         8f:bc:fe:5d:3d:db:24:d0:ba:6e:19:f6:21:7b:1f:d7:db:80:
         8a:e9:ce:6f:ac:dd:ff:27:80:d5:9b:93:3c:d7:10:07:fe:65:
         0a:ee:99:09:b0:91:9c:ef:52:9b:0f:0d:87:92:86:8b:8b:fe:
         f9:6f:a3:8e:d9:fd:a7:bf:1a:97:5b:c5:3a:1d:22:04:f0:95:
         83:e7:17:bf:15:15:c2:ce:89:4a:c3:b8:2f:73:0a:1d:be:0d:
         e8:ca:8d:96:46:5e:3b:bb:1f:5c:94:c8:5f:b8:be:e2:9d:62:
         64:4b:e9:5f:5e:bf:27:38:64:ec:c6:43:23:48:94:9c:90:ab:
         0b:15:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org