Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3230382e3130342e302f32312d3231203d3e20323632373733.roa
File:                     3138362e3230382e3130342e302f32312d3231203d3e20323632373733.roa (raw, json)
Hash identifier:          HV5FZWiD4j7nmGOtXwx88Wc8LXHoGVPsFWCzyoT4o6w=
Subject key identifier:   02:DC:EA:B6:3E:05:1D:6A:16:BE:37:7C:A3:19:B2:B7:2D:92:85:68
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       4D21B76A17F845608CFA67A42960E96F9AA90B04
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3230382e3130342e302f32312d3231203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:49 +0000
ROA not before:           Tue 19 Mar 2024 21:48:49 +0000
ROA not after:            Tue 18 Mar 2025 21:53:49 +0000
asID:                     262773
IP address blocks:        186.208.104.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:21:b7:6a:17:f8:45:60:8c:fa:67:a4:29:60:e9:6f:9a:a9:0b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:49 2024 GMT
            Not After : Mar 18 21:53:49 2025 GMT
        Subject: CN=02DCEAB63E051D6A16BE377CA319B2B72D928568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:b6:dc:42:35:d5:cc:3a:b3:f2:f0:93:c0:
                    eb:e7:29:09:ec:cf:22:a2:40:17:cf:73:7e:31:3b:
                    49:f6:ce:00:7a:ca:3b:b1:71:da:e8:9e:92:f2:7e:
                    70:75:d1:3b:37:7f:b3:ae:7f:b4:47:ed:f7:77:44:
                    b6:cc:bd:90:c5:97:94:27:19:bd:d8:24:c1:60:39:
                    b6:d8:10:2b:a1:69:b6:db:20:66:e0:89:b1:f1:a7:
                    45:c4:e9:00:50:96:73:5a:7c:cb:cf:4c:9c:88:17:
                    a4:71:aa:e3:ff:47:08:67:38:73:b7:43:fe:b5:93:
                    92:52:e0:59:6e:6b:23:83:46:2e:67:c1:eb:34:27:
                    f8:0f:6f:ec:2b:49:ca:a5:ec:2a:62:b2:14:45:b5:
                    8b:f3:66:f5:2a:94:41:6d:eb:f2:c3:cc:26:0d:6d:
                    27:3b:1c:49:d8:e4:ff:d2:29:7d:cb:0a:51:7e:c7:
                    19:bf:5e:1e:1a:86:34:ca:44:bb:65:1c:28:41:42:
                    c1:de:34:82:a0:a3:b6:cc:06:01:a6:94:11:f1:7f:
                    3d:c1:5f:54:0f:e6:d7:5c:81:56:df:94:6b:0d:e8:
                    59:1b:d7:26:b0:35:ba:62:a1:09:87:7d:b0:a0:f2:
                    72:6d:a3:35:03:32:4e:4a:30:02:12:bd:4e:d0:15:
                    a5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DC:EA:B6:3E:05:1D:6A:16:BE:37:7C:A3:19:B2:B7:2D:92:85:68
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3230382e3130342e302f32312d3231203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:4e:24:26:06:8c:a4:75:e4:c4:73:3c:c7:83:fa:3f:a9:95:
         38:e4:77:09:22:6e:15:6d:84:c2:34:6f:7f:24:67:3f:8c:a4:
         7e:c7:67:68:c3:14:67:67:fd:7e:52:48:ff:a4:ac:2b:43:7c:
         3a:c0:1c:cc:f1:3f:46:36:59:b5:de:df:f5:73:1f:f8:c5:65:
         8a:61:de:cf:f6:da:08:13:e7:3c:90:44:c5:9c:2d:33:65:59:
         e9:85:c1:16:72:e8:c6:a2:7c:6a:e8:3f:c8:e0:4f:6d:17:0c:
         4a:0a:03:4c:bc:5b:ec:b2:49:4f:ae:39:96:2e:32:5a:88:17:
         00:71:b1:32:0d:bd:6d:f8:e7:45:a4:d5:22:c2:cd:72:c6:5e:
         b4:0a:78:5a:29:b2:1c:33:f7:1c:21:46:b2:04:f6:34:85:58:
         18:18:cc:3e:3d:e8:a2:a2:04:d5:a0:a0:1e:e9:20:44:98:2c:
         13:12:b7:7b:b5:b0:33:b9:ae:2d:f7:4a:bc:aa:13:42:1a:2a:
         10:a9:4c:1b:b3:f4:9b:58:0c:fc:5b:04:9e:42:2d:17:a5:90:
         37:3a:9a:3d:4f:0a:1b:44:92:d4:35:45:db:e7:11:01:44:c0:
         17:e6:45:2d:5f:d2:01:af:40:0f:11:16:d0:74:02:e1:bb:0d:
         de:5a:4d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org