Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39342e302f32332d3233203d3e203532353638.roa
File:                     3137372e38362e39342e302f32332d3233203d3e203532353638.roa (raw, json)
Hash identifier:          gzXTc/H69i5QE5APz6B0S2dnPh7YOidnyRGUPW358so=
Subject key identifier:   4E:53:5D:60:E3:85:77:A3:8C:4B:B3:B6:6A:65:38:2D:6D:BB:46:1F
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1FEEDCEDCBC8E29A91C954D8D59AAF1AAB1F6915
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39342e302f32332d3233203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:12 +0000
ROA not before:           Tue 07 Feb 2023 19:59:12 +0000
ROA not after:            Tue 06 Feb 2024 20:04:12 +0000
asID:                     52568
IP address blocks:        177.86.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ee:dc:ed:cb:c8:e2:9a:91:c9:54:d8:d5:9a:af:1a:ab:1f:69:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:12 2023 GMT
            Not After : Feb  6 20:04:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:53:10:5b:70:56:97:dc:02:76:f5:15:d0:58:
                    e9:43:42:d6:4e:e4:e6:85:e9:01:be:e0:87:75:18:
                    43:62:ba:6d:1a:f1:34:58:87:86:8f:fc:6e:8f:e4:
                    8e:74:fe:db:9d:3d:06:57:24:b7:2f:1c:12:47:66:
                    be:46:fc:ea:62:a0:3f:cd:a9:ad:25:56:ac:62:f8:
                    c8:e3:19:92:4f:40:51:46:d0:eb:a6:3c:26:d7:d2:
                    60:69:7c:fd:86:8c:f6:ae:c5:82:d7:23:2d:85:54:
                    4c:94:70:a2:41:07:bf:46:46:99:3e:2d:17:b6:22:
                    89:72:35:83:91:3d:f9:fb:e8:17:00:24:dd:29:c6:
                    87:66:b8:a6:ab:18:3a:fe:f1:d6:9d:98:86:c7:02:
                    8a:42:b6:f5:60:d7:79:7e:e7:28:36:bb:d9:b5:c2:
                    ac:33:7f:0c:ba:a2:98:c0:06:c9:fe:ed:8f:7e:8f:
                    26:ea:7f:3a:0f:30:28:e5:db:36:98:90:ef:64:c6:
                    af:6b:f2:da:be:42:db:ce:78:27:4b:9a:69:5c:cc:
                    f6:80:ae:a0:99:8a:8e:17:af:16:66:b0:b4:ff:99:
                    65:39:59:7a:78:13:16:7e:1b:7e:1c:2d:d2:a2:9d:
                    c1:01:a5:62:d3:76:1e:1d:2e:41:19:a0:ea:91:2a:
                    d7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:53:5D:60:E3:85:77:A3:8C:4B:B3:B6:6A:65:38:2D:6D:BB:46:1F
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39342e302f32332d3233203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:3c:8c:f0:09:e3:9b:15:59:73:94:b5:56:cc:5d:83:64:2a:
         80:78:08:8b:06:d8:ce:63:34:e3:81:82:f6:b3:0d:17:e0:d9:
         88:11:bb:85:ff:f6:f0:b7:aa:0f:8a:e9:c7:06:f3:57:92:4d:
         3b:36:fe:26:f6:3c:f1:ae:f2:1a:ad:75:2a:65:fd:a7:ba:3e:
         0f:0c:9e:35:da:21:5a:2c:14:56:18:14:44:31:79:dc:9d:13:
         71:a5:4a:80:51:1e:f1:10:09:a2:cc:41:92:b4:3b:8c:be:5e:
         b3:5d:cf:e4:dd:e5:b0:9b:1b:71:b0:4d:48:8d:cf:21:e0:3c:
         2d:9f:f0:fd:94:8b:04:49:fd:eb:9c:02:44:21:0a:95:04:ce:
         49:67:43:fb:6c:2c:37:c6:ec:c3:2f:d5:52:cf:4d:2d:76:95:
         18:cd:1e:1b:01:4e:3a:c0:b7:e1:9f:f0:51:6b:60:be:8f:1b:
         b7:69:dc:91:ac:41:06:8a:93:e9:15:01:6d:7e:f5:f8:14:31:
         98:88:d5:e1:37:fc:09:10:e5:83:be:7b:b3:01:d6:bb:a6:81:
         80:d5:76:55:72:0a:68:0d:b5:64:f2:65:d7:e4:4c:8c:25:4f:
         00:cf:12:9c:82:c5:33:38:10:6b:71:a6:77:0e:5f:3d:74:c0:
         eb:fa:da:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org