Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3230382e3130342e302f32322d3232203d3e20323632373733.roa
File:                     3138362e3230382e3130342e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          XxhcRJ2f8v8v0Qe7XVSm0o383bcA4t64w0y8uSlDe/0=
Subject key identifier:   48:52:E8:BE:CD:02:83:5B:D5:4E:1E:ED:83:D2:5B:94:ED:47:63:94
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       4D331E05839C745220301D167ED5A5912EFD9398
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3230382e3130342e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:49 +0000
ROA not before:           Tue 19 Mar 2024 21:48:49 +0000
ROA not after:            Tue 18 Mar 2025 21:53:49 +0000
asID:                     262773
IP address blocks:        186.208.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:33:1e:05:83:9c:74:52:20:30:1d:16:7e:d5:a5:91:2e:fd:93:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:49 2024 GMT
            Not After : Mar 18 21:53:49 2025 GMT
        Subject: CN=4852E8BECD02835BD54E1EED83D25B94ED476394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:02:4c:51:74:cb:83:f6:f5:d1:29:b2:95:
                    67:af:40:ba:4e:c4:7a:92:a7:08:9b:6c:a5:4a:82:
                    80:8b:61:1c:5b:6b:cd:a3:4e:a5:19:bb:7b:58:e7:
                    dd:1a:9e:24:f2:b2:1b:f8:1b:59:10:84:98:a0:14:
                    df:35:a0:5d:d3:c8:cd:fe:c4:4a:8d:0b:69:16:37:
                    1e:4f:af:cc:36:f4:9c:0a:07:99:45:74:33:f0:45:
                    48:d8:5d:67:cc:52:5d:65:4a:aa:75:bf:ea:5a:a3:
                    c4:2a:14:30:5e:17:ac:68:4c:ec:c7:f9:86:68:32:
                    e6:66:bb:c8:83:3d:3f:42:21:de:49:4b:1d:f8:55:
                    7a:7a:90:8a:52:96:89:3c:f0:ef:69:8a:cd:61:b5:
                    6a:58:d7:83:ca:0a:4d:94:d2:8a:3e:7b:bf:63:a4:
                    af:cf:f0:37:9e:b8:f6:02:e6:4f:05:30:0e:d7:f1:
                    5e:63:ea:db:05:c4:46:50:9c:44:f2:d4:07:4a:56:
                    31:d4:6b:b3:67:d9:5d:74:7b:a9:0f:1f:81:a6:16:
                    e0:71:f7:b6:bf:cc:32:94:85:e7:52:83:f5:74:0c:
                    f9:4a:6c:da:e2:8f:e4:22:f3:3e:7d:73:9e:c2:63:
                    96:0e:11:c8:0b:57:ce:6c:99:af:6d:19:b4:c4:1c:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:52:E8:BE:CD:02:83:5B:D5:4E:1E:ED:83:D2:5B:94:ED:47:63:94
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3230382e3130342e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:ec:9d:cf:ec:ad:0e:2d:13:3a:db:ad:00:14:ef:e4:e3:60:
         f9:b2:ad:b5:99:21:76:72:55:de:7f:20:3d:07:7f:67:70:d1:
         6a:6e:e7:a1:c3:cf:14:e4:2a:28:a0:0e:5e:ea:5d:b6:01:4b:
         02:4f:65:c5:cf:87:bb:1a:03:43:83:00:a4:ad:bc:60:10:de:
         81:4a:84:98:df:d3:01:a7:e5:c3:cd:f7:2a:da:ca:aa:91:56:
         45:c1:cb:8a:4f:8e:be:2d:2c:90:9c:ba:84:61:da:bd:f4:5c:
         19:80:d8:dd:59:16:e3:0b:b8:88:a8:28:be:95:1b:21:f1:09:
         04:5e:c8:d2:53:09:2a:b1:48:84:a1:55:76:a3:af:55:1b:f9:
         19:a0:cb:33:15:8a:c3:b3:ea:63:a6:f9:32:10:db:a8:43:49:
         20:49:de:a1:6c:a9:d7:d0:51:5b:f5:c2:2e:2c:48:2f:d4:7c:
         74:76:42:71:fa:87:4a:71:c5:9f:95:62:f8:ca:fa:cf:c5:b4:
         ab:d6:ec:c0:b9:9e:bd:f3:b8:7d:c0:cc:7a:56:a2:14:e1:59:
         b1:16:b9:5a:d5:35:25:fd:09:d1:6a:f1:5c:84:9a:f4:af:49:
         90:8d:9c:7a:15:d9:81:71:ab:24:a8:d0:f6:5f:05:a2:46:7b:
         22:fb:08:9f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTTMeBYOcdFIgMB0WftWlkS79k5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yNDAzMTkyMTQ4NDlaFw0yNTAzMTgyMTUzNDlaMDMxMTAvBgNV
BAMTKDQ4NTJFOEJFQ0QwMjgzNUJENTRFMUVFRDgzRDI1Qjk0RUQ0NzYzOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aAJMUXTLg/b10SmylWevQLpO
xHqSpwibbKVKgoCLYRxba82jTqUZu3tY590aniTyshv4G1kQhJigFN81oF3TyM3+
xEqNC2kWNx5Pr8w29JwKB5lFdDPwRUjYXWfMUl1lSqp1v+pao8QqFDBeF6xoTOzH
+YZoMuZmu8iDPT9CId5JSx34VXp6kIpSlok88O9pis1htWpY14PKCk2U0oo+e79j
pK/P8DeeuPYC5k8FMA7X8V5j6tsFxEZQnETy1AdKVjHUa7Nn2V10e6kPH4GmFuBx
97a/zDKUhedSg/V0DPlKbNrij+Qi8z59c57CY5YOEcgLV85sma9tGbTEHDn/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSFLovs0Cg1vVTh7tg9JblO1HY5QwHwYDVR0j
BBgwFoAUE7sppLhL32bqQBmHuHBIt0hPSIgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0ODg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzQkIyOUE0Qjg0QkRGNjZF
QTQwMTk4N0I4NzA0OEI3NDg0RjQ4ODguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAv
MzEzODM2MmUzMjMwMzgyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrQaDANBgkqhkiG9w0BAQsFAAOCAQEAt+yd
z+ytDi0TOtutABTv5ONg+bKttZkhdnJV3n8gPQd/Z3DRam7nocPPFOQqKKAOXupd
tgFLAk9lxc+HuxoDQ4MApK28YBDegUqEmN/TAaflw833KtrKqpFWRcHLik+Ovi0s
kJy6hGHavfRcGYDY3VkW4wu4iKgovpUbIfEJBF7I0lMJKrFIhKFVdqOvVRv5GaDL
MxWKw7PqY6b5MhDbqENJIEneoWyp19BRW/XCLixIL9R8dHZCcfqHSnHFn5Vi+Mr6
z8W0q9bswLmevfO4fcDMelaiFOFZsRa5WtU1Jf0J0WrxXISa9K9JkI2cehXZgXGr
JKjQ9l8FokZ7IvsInw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org