Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139342e302f32332d3234203d3e20323632373733.roa
File:                     3138362e3233322e3139342e302f32332d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          NgkGUhVuW4kFmBVfzLp/kO+pzJiXs/oPiP9scCqOqDA=
Subject key identifier:   9B:E3:4A:24:30:3F:6B:02:A8:89:FE:C6:29:86:5B:F9:AF:5F:EB:24
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3B32AC0B25926A8EB3ED31EAE946C4C930D04644
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139342e302f32332d3234203d3e20323632373733.roa
Signing time:             Mon 15 May 2023 20:10:29 +0000
ROA not before:           Mon 15 May 2023 20:05:29 +0000
ROA not after:            Mon 13 May 2024 20:10:29 +0000
asID:                     262773
IP address blocks:        186.232.194.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:32:ac:0b:25:92:6a:8e:b3:ed:31:ea:e9:46:c4:c9:30:d0:46:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: May 15 20:05:29 2023 GMT
            Not After : May 13 20:10:29 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:b0:e1:7d:c9:1d:43:9d:cf:d5:bf:27:6e:
                    ed:89:82:1c:b7:e3:dc:0e:5c:cc:16:10:e8:f2:41:
                    ce:48:68:14:5d:f2:3f:f4:ec:aa:ea:1d:8c:f4:a2:
                    c5:b1:92:fd:68:45:ca:66:64:17:ca:2a:b0:21:ba:
                    be:6d:84:fc:dd:15:03:56:cf:6b:34:a6:1a:e9:89:
                    b7:0b:75:35:ed:69:c5:4d:51:de:7c:8b:c4:ad:e6:
                    a1:ea:ea:74:d3:4b:6c:30:68:b7:f1:b5:22:9a:61:
                    86:f8:87:a6:fe:1f:89:ac:53:bd:4a:95:c3:63:3b:
                    ba:5f:13:21:f2:71:f0:0d:85:16:38:1d:6c:f4:8b:
                    02:af:b3:fe:08:cf:b6:77:45:3f:d0:53:2f:30:6e:
                    a2:28:77:4f:0d:4d:27:a0:76:e2:01:90:de:c0:7f:
                    52:ff:f2:56:61:0f:85:9a:2b:df:2e:ad:3e:60:ee:
                    08:bd:2d:ff:58:82:63:2f:40:f4:a6:c5:d4:ed:92:
                    15:8a:78:51:03:66:d0:cf:ed:95:b7:87:a3:a6:50:
                    ae:50:5c:43:39:ed:8b:58:02:8d:2c:d7:c5:55:23:
                    a2:8d:4b:4b:5b:5d:8e:18:b4:79:93:f1:75:e8:85:
                    9d:4d:f3:06:4a:c2:fd:28:18:14:8f:1a:ce:de:99:
                    5b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E3:4A:24:30:3F:6B:02:A8:89:FE:C6:29:86:5B:F9:AF:5F:EB:24
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139342e302f32332d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:52:41:9e:5f:ed:e1:b8:b1:19:c0:02:41:03:27:3f:14:11:
         18:86:13:b1:bc:55:6d:3a:b1:1e:33:d6:15:21:81:e3:d6:48:
         a6:a8:a2:40:44:e4:7f:ca:c9:8d:78:12:3d:a0:ba:81:30:42:
         a5:b7:0b:93:84:29:58:58:b2:dc:8f:b5:0e:ae:c0:ec:e7:e2:
         3a:d4:2b:18:30:04:19:10:8f:3b:50:5d:c8:38:21:cb:b6:f0:
         00:7d:b1:94:1e:29:c3:d0:d8:fb:9b:a1:d3:35:a6:e5:fe:37:
         b9:2b:bb:04:61:df:b9:93:d0:46:35:37:d9:8c:5d:01:0d:ed:
         59:8a:b1:6a:48:ad:cc:ea:66:67:86:1e:84:c0:59:16:99:ce:
         c7:ac:4a:d8:69:ae:eb:39:c0:de:6b:d5:05:b6:a4:f5:2f:70:
         5a:63:b3:b0:63:8f:e7:f5:f2:79:40:c2:7c:49:be:50:93:99:
         d9:02:5d:93:18:3a:b1:c2:1e:44:2b:77:40:00:ad:19:dd:4e:
         02:2c:88:2c:73:65:5c:32:b7:a9:b7:07:d0:99:11:14:c5:bd:
         89:a0:82:52:b5:52:97:c6:e0:0a:50:e4:83:e5:d7:d1:4c:95:
         3b:71:78:11:db:fb:82:fd:79:02:d2:fc:3a:ba:b2:0f:5e:7c:
         c3:50:ba:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org