Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3230382e39362e302f32302d3230203d3e20323632373733.roa
File:                     3138362e3230382e39362e302f32302d3230203d3e20323632373733.roa (raw, json)
Hash identifier:          OI3fD0yVMkTZxFI2DUIOFItcxqoh2pAj8L/Ku5aXvUw=
Subject key identifier:   86:CA:6F:EC:B3:51:9B:88:C8:AF:BD:E8:8D:46:48:8F:AC:E7:B1:DE
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       4E0670A182B2615ADBE032934690C1AB7FB7BFDC
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3230382e39362e302f32302d3230203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:51 +0000
ROA not before:           Tue 19 Mar 2024 21:48:51 +0000
ROA not after:            Tue 18 Mar 2025 21:53:51 +0000
asID:                     262773
IP address blocks:        186.208.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:06:70:a1:82:b2:61:5a:db:e0:32:93:46:90:c1:ab:7f:b7:bf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:51 2024 GMT
            Not After : Mar 18 21:53:51 2025 GMT
        Subject: CN=86CA6FECB3519B88C8AFBDE88D46488FACE7B1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:15:f3:49:9e:fd:aa:69:4b:f1:c4:5c:af:a6:
                    68:a7:e1:75:c8:ed:59:ba:9a:ab:a8:57:af:bd:2a:
                    9f:2a:18:e9:b3:7f:f5:d8:65:e7:cc:53:38:62:aa:
                    97:66:45:aa:85:36:0a:a4:92:ea:75:4a:0b:e1:a0:
                    52:3a:95:a8:40:30:88:8c:e4:0d:6d:13:f3:fa:cf:
                    17:13:b4:42:3d:26:3f:18:17:e6:c0:49:a6:32:7e:
                    99:06:32:b3:b9:7f:7e:1f:41:66:ce:32:60:c0:d2:
                    d2:a4:90:f5:d6:c9:00:23:11:1f:7f:d3:63:68:2b:
                    bf:4c:6a:12:89:7e:d3:e0:c7:e6:23:2b:09:b5:df:
                    be:20:83:87:f0:b5:16:57:e1:69:91:9c:80:38:e2:
                    89:64:fb:e4:c8:76:a4:a7:d3:43:c8:8c:ea:62:9f:
                    fc:4f:44:51:07:49:42:84:11:ee:9d:fc:67:a0:b6:
                    f0:13:8c:e5:5b:4e:02:98:c1:6f:3d:b7:ae:27:47:
                    8c:1d:16:79:42:9d:cb:79:3c:6c:30:de:51:ef:0d:
                    c5:00:61:8e:56:3c:04:60:1d:6a:d8:3b:0f:9d:9e:
                    c9:10:78:61:cb:7d:be:34:44:4e:ec:e2:7d:1a:52:
                    ad:fe:01:06:44:a5:8f:4f:6c:e0:0c:3d:cb:a0:9d:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CA:6F:EC:B3:51:9B:88:C8:AF:BD:E8:8D:46:48:8F:AC:E7:B1:DE
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3230382e39362e302f32302d3230203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:30:40:07:7a:5f:21:47:a1:bf:0e:e3:b6:8b:e2:b2:bc:79:
         d1:c3:0b:8e:ee:18:ae:02:cc:c7:aa:e8:28:52:2c:c6:32:d3:
         36:f7:85:d6:e7:e4:b4:85:eb:98:b7:61:c2:0a:aa:fa:c3:82:
         e4:4b:32:4a:f4:ea:a2:b5:d0:82:fe:a2:21:4d:ca:fb:e4:e1:
         b1:0b:82:e6:4f:fe:77:2f:d9:15:b9:41:c3:d6:2e:71:16:8b:
         8e:1b:75:63:c9:6f:29:fd:94:1a:f4:59:dd:b0:31:e9:7b:2b:
         ca:c1:db:2f:d3:ff:c2:b5:f9:dc:56:ff:24:a3:e0:60:af:29:
         dd:e3:b7:1f:50:a9:59:95:83:6b:6d:53:42:96:b3:d6:35:28:
         fa:41:93:08:9b:98:2c:a2:21:3b:70:5b:6d:c2:5c:8b:73:f9:
         c1:a5:aa:af:79:ef:c3:b0:65:02:e4:27:9f:56:70:ac:f2:ee:
         f7:2a:f8:9f:d8:b9:32:c0:9b:7d:7d:df:ff:dd:49:7f:29:34:
         27:bc:42:4e:7f:6f:df:b4:9e:38:f9:c8:6a:06:99:d2:9c:78:
         05:bf:c2:e3:f2:f4:32:ef:da:1a:73:da:6a:5f:ee:d1:7d:c3:
         88:d0:c6:3e:0c:f1:e4:bd:6b:61:83:4d:9a:aa:8d:0d:45:f2:
         ec:4c:d9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org