Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139322e302f32332d3233203d3e20323632373733.roa
File:                     3138362e3233322e3139322e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          UT+PvxnSiiMKeAvlOO0BJspStAzXhH7ywKzy7fO4QaQ=
Subject key identifier:   D2:39:55:54:63:BF:EA:A1:9F:3C:30:6C:2C:D4:F5:19:ED:3C:16:6A
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       2C53C5D6907FE7D8267C7F7054BA6B48EF9899D2
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139322e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:05:12 +0000
ROA not before:           Tue 09 Aug 2022 14:00:12 +0000
ROA not after:            Tue 08 Aug 2023 14:05:12 +0000
asID:                     262773
IP address blocks:        186.232.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:53:c5:d6:90:7f:e7:d8:26:7c:7f:70:54:ba:6b:48:ef:98:99:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 14:00:12 2022 GMT
            Not After : Aug  8 14:05:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:6f:66:eb:cd:06:d2:32:1a:b1:50:18:b6:
                    fc:b1:c5:44:a6:9f:b9:f3:e6:d9:06:82:08:78:b6:
                    80:68:1d:11:c3:d3:27:c2:5b:a6:d3:65:dd:b6:cb:
                    ff:d5:d3:e4:63:c7:e0:8c:97:22:70:07:44:fb:a0:
                    23:4c:db:71:4a:99:2f:26:11:45:52:96:8e:ee:2d:
                    f3:6a:01:d0:c3:ad:d7:d0:e8:62:9c:7d:5d:44:c4:
                    ea:59:47:f8:ed:92:17:e7:99:04:ff:38:8c:71:b5:
                    d2:b5:b5:74:35:94:e4:d8:49:21:db:93:d0:37:f2:
                    ee:80:5d:6e:d8:31:a6:0f:5f:ea:5c:1f:a8:47:e6:
                    df:ef:14:ef:8a:7d:de:54:87:2c:fa:85:3a:bc:47:
                    58:19:53:bf:f6:44:43:10:16:45:58:c2:e8:ae:92:
                    ca:99:ae:36:a2:d1:d9:d7:e5:a4:20:14:b8:62:e2:
                    c8:7b:98:06:15:2d:70:bb:a7:1e:ed:4c:e6:14:8f:
                    e3:e8:38:5d:23:d9:57:73:1c:20:f4:ac:e9:5c:9a:
                    2f:f2:aa:9c:08:bd:54:28:c9:5a:ba:02:d1:9c:b1:
                    78:cc:9f:47:6e:34:42:2f:ab:d6:7d:08:a4:1d:6b:
                    8c:23:98:34:50:8c:2d:ec:41:cb:37:b2:61:e5:35:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:55:54:63:BF:EA:A1:9F:3C:30:6C:2C:D4:F5:19:ED:3C:16:6A
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139322e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:fa:b8:59:b4:02:c6:af:e0:3c:35:a3:a0:67:4c:ec:14:f5:
         6d:5d:6b:79:c0:ff:7b:e9:a1:fa:7c:4e:ad:78:ef:95:4d:08:
         78:22:20:b2:24:32:22:75:8c:00:8c:66:4f:d0:df:1d:2b:96:
         8e:88:bd:7d:cf:00:e4:0c:27:12:a0:5c:63:23:49:0a:79:50:
         86:ce:27:a7:be:75:5a:d1:48:ec:62:f2:6b:22:a1:c8:e8:9a:
         b8:32:06:c4:48:e8:b0:ad:62:6f:01:58:5f:dc:06:f9:9d:75:
         ee:8f:d6:d2:fe:bc:62:06:2c:d2:56:26:00:20:9c:c4:24:f5:
         9c:26:6a:fd:90:28:97:c1:8d:9c:d9:57:30:8f:f8:eb:f2:c7:
         b1:4b:97:fd:a4:64:0e:12:40:fe:6e:72:77:e8:51:ea:1f:00:
         25:b3:a6:3d:0d:87:04:a3:d2:48:ee:2f:ee:6d:c1:91:e2:31:
         df:cc:34:0c:ae:11:09:53:64:ff:6d:67:d1:30:80:d2:3a:26:
         49:19:98:90:c2:1c:e5:70:32:0b:9b:7e:b7:a9:ac:4d:2c:eb:
         e5:9c:91:a7:73:a7:e0:c5:0e:9f:8a:63:38:64:5d:72:7c:31:
         62:9d:93:c9:f6:11:45:52:79:34:c9:ad:a2:03:55:73:d1:0a:
         93:99:6a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org