Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139362e302f32342d3234203d3e20323632373733.roa
File:                     3138362e3233322e3139362e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          dlKpi29VyCMwYRN+8GgQdmjXm5XMTNJDT7Wi3kX0flA=
Subject key identifier:   49:FE:F1:0F:C6:86:DD:0F:05:9E:C7:F8:01:7F:24:AB:67:36:26:CF
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       0E326D9C6937B86122C0D201D9D16B20658F0D10
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139362e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:05:11 +0000
ROA not before:           Tue 09 Aug 2022 14:00:11 +0000
ROA not after:            Tue 08 Aug 2023 14:05:11 +0000
asID:                     262773
IP address blocks:        186.232.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:32:6d:9c:69:37:b8:61:22:c0:d2:01:d9:d1:6b:20:65:8f:0d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 14:00:11 2022 GMT
            Not After : Aug  8 14:05:11 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:90:d3:21:6f:42:75:ee:a1:05:45:0d:f7:82:
                    10:c3:26:bf:87:5e:27:61:ce:d2:7f:3b:d5:36:83:
                    14:11:db:b9:cb:4a:08:81:dc:5b:0c:3c:96:44:88:
                    aa:ee:73:e3:fa:c5:2b:e6:f4:7e:fe:d2:c1:5c:14:
                    29:ce:d7:38:69:12:6c:21:17:99:89:a0:d0:56:9a:
                    83:0c:73:32:fb:ad:dc:f8:e2:af:ac:77:e7:f5:5f:
                    cb:cf:dc:e6:85:24:4e:72:d8:c9:4b:b6:a2:16:0e:
                    f6:49:5f:9f:8a:2a:3a:77:6e:70:4f:89:6d:d4:90:
                    2d:83:2a:3c:80:53:d2:4e:54:0d:1d:23:55:e6:31:
                    ec:24:57:dd:b6:09:90:45:fb:96:63:c9:f4:a1:3f:
                    45:5a:f1:bb:43:a8:cf:5e:1b:b6:f9:fc:36:94:39:
                    4b:31:0a:fc:af:42:7d:9e:f2:0c:06:9e:25:1b:8a:
                    b3:5c:5e:4e:40:3e:34:54:82:57:4a:ca:e1:de:cc:
                    0a:de:bb:ab:b7:00:40:76:a6:35:2c:c9:11:d4:07:
                    d9:d6:02:fb:54:7e:3b:d4:8f:72:48:ea:25:91:ce:
                    82:41:7d:84:0e:ff:70:ed:4b:60:4f:2c:39:32:1f:
                    46:69:1b:38:0b:a2:b2:61:d5:89:d2:95:9e:9f:3f:
                    1f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FE:F1:0F:C6:86:DD:0F:05:9E:C7:F8:01:7F:24:AB:67:36:26:CF
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139362e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:0b:6d:d4:52:29:24:a2:00:34:58:24:a7:6b:52:7f:66:e2:
         35:94:b2:9e:a1:58:50:76:a1:3f:0b:d1:14:d8:89:3e:35:12:
         5d:f4:73:79:de:03:ab:6b:f0:f6:83:49:59:e7:f3:14:33:e3:
         1c:0c:36:a3:1e:c6:0c:cd:cc:21:df:fe:0c:80:b9:3a:d0:b3:
         4f:1f:6f:21:65:22:ce:e5:3e:aa:03:96:d7:dc:22:b1:1d:7b:
         0d:71:3c:80:1d:ef:80:c0:6e:f2:84:17:3c:1e:03:81:10:e4:
         15:0a:00:aa:fb:20:37:d9:18:a6:54:83:2e:d1:99:52:76:f1:
         1e:50:da:c5:97:7e:74:2d:8e:e4:0c:1f:e0:c6:80:16:18:1e:
         e6:1c:da:82:7a:b7:30:35:78:1d:21:dc:e1:5a:50:0e:be:6a:
         d3:fc:e6:36:b9:72:c7:0f:ec:3f:6e:87:8c:c3:4b:fd:34:47:
         e5:65:e5:03:ae:6d:8b:ab:87:3a:6f:62:d3:48:9a:cb:14:2c:
         f7:76:94:9d:a7:25:20:82:5e:c6:bf:6b:79:c6:93:20:20:0d:
         42:03:93:b8:48:dd:c0:a1:16:88:32:3e:ee:b3:a7:e0:45:23:
         63:c5:c9:bd:c9:fd:d1:2e:aa:ed:5b:34:ed:53:b3:b9:63:0e:
         b7:e3:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org