Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3232362e372e302f32342d3234203d3e20323632373733.roa
File:                     3138362e3232362e372e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          U1goxnHNqEpBbwS+wJrWDDvCPL7kS2g9FiAYOMtGAt8=
Subject key identifier:   EF:3A:F4:86:8A:60:B0:FF:92:D3:75:61:6E:FE:DB:C0:B1:62:28:89
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       71EFCBBE709A8DCF2CBF03F471CB959AFCA092A0
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3232362e372e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 07 Feb 2023 20:04:10 +0000
ROA not before:           Tue 07 Feb 2023 19:59:10 +0000
ROA not after:            Tue 06 Feb 2024 20:04:10 +0000
asID:                     262773
IP address blocks:        186.226.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ef:cb:be:70:9a:8d:cf:2c:bf:03:f4:71:cb:95:9a:fc:a0:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:10 2023 GMT
            Not After : Feb  6 20:04:10 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:16:62:c2:3e:6d:da:b8:75:d7:00:52:7a:
                    a1:f7:15:66:9c:ff:94:27:49:2e:e7:46:f8:42:fe:
                    72:2d:bd:6f:1e:e2:6c:01:46:d3:a9:e1:ec:77:2a:
                    d6:c3:f8:7f:62:18:93:f6:82:3b:bb:47:0c:29:7a:
                    bb:61:ba:6a:ec:3d:30:da:33:c2:b6:13:c9:85:67:
                    78:aa:a4:14:20:a4:3d:a2:89:55:23:b3:08:f9:38:
                    25:3b:f5:1e:58:4f:a0:be:1f:d7:cc:bc:65:3f:25:
                    36:a5:e3:d5:56:4f:ca:6a:5b:ae:c1:d8:f3:bc:49:
                    1f:80:a2:36:55:ee:6a:05:ef:24:d8:ac:94:24:42:
                    07:9a:40:49:76:2b:bf:74:b2:c1:a4:a9:cd:88:6d:
                    39:60:ee:bd:9a:c6:d0:89:ed:ef:63:14:f4:3a:bd:
                    d9:51:d2:a5:fb:c5:c9:c0:fa:64:f9:21:0b:22:67:
                    8c:8b:b9:db:d8:46:b3:81:43:0a:75:20:e4:c4:6e:
                    b3:f1:73:6d:75:a1:19:30:05:54:dd:ac:47:66:5d:
                    03:b6:27:c5:f0:b7:9b:5b:98:17:b9:10:58:77:ee:
                    b6:d4:cc:1d:9a:50:d3:00:8b:b1:64:b0:77:93:22:
                    ee:68:58:8b:4f:64:a0:72:3c:e1:c9:78:5d:81:eb:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3A:F4:86:8A:60:B0:FF:92:D3:75:61:6E:FE:DB:C0:B1:62:28:89
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3232362e372e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:dd:39:61:20:26:db:4a:05:2c:32:d1:05:b4:8e:e7:db:
         88:9a:42:e1:99:b9:e4:31:12:ff:e0:bd:e2:12:4f:e2:60:4d:
         41:8b:f8:ea:e6:c3:bd:95:f3:ff:57:56:52:bc:d9:0c:67:cc:
         54:43:34:82:05:10:d7:f7:67:cb:01:14:f0:db:eb:4c:16:d7:
         b5:1c:65:7b:98:03:ce:63:f3:b0:e5:f1:ea:3c:17:df:c5:1a:
         94:a1:f6:96:85:6a:a3:72:c4:f7:a7:18:8b:72:ef:19:e5:38:
         ea:cd:f2:2a:d2:85:8b:10:90:a4:42:b9:25:0c:ab:53:f8:57:
         ea:32:b0:e5:19:0c:b1:db:bb:79:26:7e:3e:06:4b:b3:bb:39:
         6b:13:27:3e:72:ec:84:92:13:26:b0:20:1e:55:81:71:d7:55:
         20:89:2c:84:25:c6:a7:ae:f0:0c:01:74:9b:62:fe:38:a2:6e:
         30:ca:2d:bb:e9:b8:50:17:4f:97:15:f0:3f:4a:84:ef:80:2e:
         d9:2a:74:8e:be:6d:3f:4b:86:9e:38:4f:95:e0:b6:17:a1:cb:
         46:6b:51:47:4d:ea:e3:ed:84:32:41:02:42:0b:03:ee:2e:0c:
         02:7e:d5:fe:bc:fe:94:c4:aa:2e:1d:de:c5:d7:25:06:f4:c2:
         97:fb:e5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org