Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3230382e39362e302f32322d3232203d3e20323632373733.roa
File:                     3138362e3230382e39362e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          JqOiDNHDZGmupm5smue28qoNQRA3Da/1u+FkpVOsXwc=
Subject key identifier:   40:47:29:0B:FB:CC:6C:5C:C0:3A:3A:37:41:6B:B5:4B:94:29:69:FD
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       462382672C643897B12829585643956921C39EA5
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3230382e39362e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:52 +0000
ROA not before:           Tue 19 Mar 2024 21:48:52 +0000
ROA not after:            Tue 18 Mar 2025 21:53:52 +0000
asID:                     262773
IP address blocks:        186.208.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:23:82:67:2c:64:38:97:b1:28:29:58:56:43:95:69:21:c3:9e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:52 2024 GMT
            Not After : Mar 18 21:53:52 2025 GMT
        Subject: CN=4047290BFBCC6C5CC03A3A37416BB54B942969FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:74:1e:db:46:af:ce:bb:7b:ee:b3:eb:db:
                    a1:06:2b:3e:bb:fd:f7:82:f4:e7:d0:7f:34:f1:83:
                    9c:f5:86:24:04:01:95:69:14:4c:9c:5f:93:c3:64:
                    b1:f5:e1:a2:27:70:26:83:3f:2e:59:f8:ba:b3:fb:
                    2f:5c:cf:8a:8b:45:3d:96:24:92:4c:d2:41:1e:f8:
                    ee:6f:ef:95:5f:bf:79:1a:d9:67:d6:9b:89:7e:26:
                    c4:1d:db:d8:b7:76:c2:5d:20:c3:20:70:c5:ea:36:
                    34:46:a5:2f:7d:ad:1e:d4:27:7f:f7:89:8e:2a:44:
                    36:cb:8a:a4:a8:a0:ec:21:26:90:31:19:83:50:ba:
                    3f:bf:21:89:d5:f8:5c:e5:37:50:95:85:47:6d:ab:
                    d5:13:a7:b9:18:e7:94:27:ac:f7:41:82:d8:ff:64:
                    6b:72:2e:4e:ec:21:a2:92:6a:26:7c:30:4e:09:b7:
                    78:99:b7:4a:48:b0:d4:e8:21:c8:21:34:40:5b:7b:
                    82:4b:dc:6e:76:90:e0:66:4b:69:96:bc:2f:55:d8:
                    75:33:69:d2:be:08:db:c0:22:a6:37:68:65:83:cf:
                    b6:cc:60:92:9f:e2:a1:e1:b3:e1:6e:5b:84:be:d2:
                    d3:3b:9d:9c:30:50:8a:a4:90:7b:19:4c:84:53:8b:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:47:29:0B:FB:CC:6C:5C:C0:3A:3A:37:41:6B:B5:4B:94:29:69:FD
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3230382e39362e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:49:96:51:23:dc:28:4d:73:80:0c:b3:c3:f3:bc:77:5c:79:
         56:8b:f0:86:2c:45:0a:12:96:41:89:77:34:03:75:0a:12:9b:
         35:3b:fe:b0:c6:e7:47:f2:70:df:ab:0f:ad:84:93:77:e6:96:
         d0:b1:b9:af:04:9e:e4:48:64:78:93:09:5b:e7:ec:8d:e5:a8:
         1b:69:80:24:a6:c2:47:48:87:13:1d:ce:ac:83:cf:12:82:97:
         9e:ca:60:0d:af:30:65:74:34:4b:04:a9:df:54:a9:48:70:37:
         19:81:03:f2:8d:f5:08:ff:d9:17:d3:a3:2a:a2:91:55:bf:2e:
         9f:2e:08:b2:e4:fa:8b:75:c9:d5:35:28:4c:e6:8e:77:a7:9a:
         67:c2:a7:f8:d0:ed:67:b8:35:61:d9:66:13:d6:99:a9:ce:5d:
         41:71:37:9a:74:01:38:31:cb:f2:26:7e:bf:08:a1:10:0c:3a:
         66:38:6a:25:4d:2f:98:6f:57:f7:e6:8f:e1:8c:57:55:df:e6:
         42:4a:f6:39:e2:48:f9:18:7a:70:17:99:e3:02:07:8f:c7:d8:
         33:83:ee:d6:fe:64:b2:59:e1:65:08:03:9d:96:53:ed:fc:6d:
         16:09:93:6f:24:a4:3b:c8:a7:25:0b:d7:02:c6:fd:e2:dc:7b:
         5e:43:a1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org