Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139362e302f32322d3232203d3e20323632373733.roa
File:                     3138362e3233322e3139362e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          i70frBz4lBTmn6WmXf1SFr0P+WsDSjX1pDS4E7gwNis=
Subject key identifier:   CC:BC:08:4D:4A:F0:78:8F:1A:FA:CA:0A:BA:FD:FB:8C:3E:0D:74:FE
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3D5922E34ABCC536A6EFCF31B854BA6E56BB18A5
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139362e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:05:11 +0000
ROA not before:           Tue 09 Aug 2022 14:00:11 +0000
ROA not after:            Tue 08 Aug 2023 14:05:11 +0000
asID:                     262773
IP address blocks:        186.232.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:59:22:e3:4a:bc:c5:36:a6:ef:cf:31:b8:54:ba:6e:56:bb:18:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 14:00:11 2022 GMT
            Not After : Aug  8 14:05:11 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5c:ee:6b:74:60:88:ff:55:b4:a5:7a:94:7b:
                    d7:cf:ce:47:3d:e7:d9:71:7e:93:1c:63:d3:f5:07:
                    24:3b:85:64:4f:69:7d:ed:89:60:5c:09:65:92:9c:
                    b2:71:7e:55:63:9e:69:d9:33:59:10:67:5a:da:19:
                    0a:ac:cc:ea:c4:88:67:f3:d6:66:94:d1:cd:f8:49:
                    fb:3a:5b:4e:36:68:32:40:38:3e:35:31:43:00:f0:
                    63:c6:52:d9:44:f3:65:51:79:5e:ea:bd:3e:7a:38:
                    a5:f4:f2:c6:a2:30:bd:50:c4:70:cb:53:12:83:3f:
                    d0:5c:d0:c1:98:54:3e:5c:1d:ac:b6:b1:19:ca:11:
                    6b:ac:4c:60:e1:31:ad:f6:c5:75:de:44:19:86:33:
                    eb:9b:4c:61:06:e6:d7:28:ba:9d:25:b7:ab:0f:e4:
                    7f:c1:95:2f:cf:70:c7:a8:36:38:4b:2e:a6:2d:1c:
                    74:2d:e6:5c:fe:c0:96:1c:6b:9b:9c:41:f0:f5:f7:
                    b6:8e:e9:67:b4:5d:6c:76:f3:69:c5:7f:3b:6f:9e:
                    8b:de:93:3b:a5:c0:9d:43:3b:f1:ff:df:2d:c0:c8:
                    7c:54:d0:eb:fb:91:26:ed:fd:08:36:da:53:27:a6:
                    90:a7:3f:56:1a:39:ca:fe:1b:5c:da:e2:c3:10:48:
                    a9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BC:08:4D:4A:F0:78:8F:1A:FA:CA:0A:BA:FD:FB:8C:3E:0D:74:FE
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139362e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:d7:59:b7:ed:7f:ed:95:bc:28:c4:e1:42:2e:c1:47:34:88:
         f0:45:e1:bf:f0:c4:26:d0:79:72:7e:95:e4:39:46:37:f2:0a:
         54:b5:68:76:bb:44:9a:cd:32:8d:cc:70:0b:c4:8b:43:4d:26:
         d0:1c:99:f2:e6:c2:b5:ea:2c:fc:51:7a:f4:67:6f:9e:2b:28:
         a5:a0:30:20:62:d3:9f:ad:0d:03:74:3f:9a:b1:22:c9:04:7b:
         d5:3c:f9:d1:ab:28:0b:3c:1b:ca:41:94:8f:91:b8:aa:f7:8b:
         37:2f:1b:1c:40:1b:82:a6:2c:ad:62:cd:b3:c2:fa:8c:1f:5b:
         c6:7a:2d:b3:2f:46:0e:7c:8f:ca:6c:bb:48:9c:cb:4b:d4:66:
         48:6f:06:fd:a7:d2:69:4a:48:3c:d6:be:5a:8e:c5:64:ee:67:
         1e:05:02:9f:88:44:23:1d:a7:87:e2:50:3d:dd:cd:d7:db:fc:
         93:e2:0a:d4:ff:36:f8:ff:2b:53:d3:c1:86:7a:98:25:dd:34:
         b9:56:d9:a6:e7:26:fd:5f:68:97:38:07:c2:0e:0e:df:17:c4:
         df:47:3a:dd:df:5e:9d:18:4c:6c:ed:a0:14:0e:87:68:eb:6f:
         c2:30:32:39:86:39:85:b6:c7:31:4f:ea:03:a2:2e:92:12:02:
         26:9e:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org