Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139382e302f32342d3234203d3e20323632373733.roa
File:                     3138362e3233322e3139382e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          u95EeTqMQtj0Z3gGdCco1PefzeUrduDUBMfq5W2UaNY=
Subject key identifier:   5D:4D:47:F4:09:B3:12:2A:84:8A:A2:AD:20:1E:0E:59:98:7D:33:B3
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       046B465FACECB17083C34AA36BF1D7853CA41F8A
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139382e302f32342d3234203d3e20323632373733.roa
Signing time:             Fri 12 May 2023 07:19:18 +0000
ROA not before:           Fri 12 May 2023 07:14:18 +0000
ROA not after:            Fri 10 May 2024 07:19:18 +0000
asID:                     262773
IP address blocks:        186.232.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6b:46:5f:ac:ec:b1:70:83:c3:4a:a3:6b:f1:d7:85:3c:a4:1f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: May 12 07:14:18 2023 GMT
            Not After : May 10 07:19:18 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:01:6c:53:fe:32:88:2a:e9:13:bc:2f:60:
                    73:fd:7d:fd:41:03:ef:90:d8:74:b6:71:97:fb:81:
                    2b:25:34:10:7c:4d:cf:c1:c1:e2:ee:6e:7b:5f:14:
                    b1:c5:15:91:51:25:5e:42:55:c2:90:33:45:05:41:
                    31:d4:3c:32:94:cc:07:f2:46:4f:bb:af:cf:74:f7:
                    91:72:61:90:3f:6b:28:62:ad:af:fa:36:24:83:26:
                    fa:e2:25:72:25:48:3b:9e:50:18:3e:68:df:0b:f4:
                    4c:a2:72:9f:e2:b8:89:b1:f7:1b:79:73:4f:3c:b6:
                    8e:80:34:e7:77:72:9a:d2:2e:4b:ab:dd:ac:ea:f4:
                    d0:bd:ca:a0:8d:a6:5b:35:63:82:28:a1:b6:0d:28:
                    60:40:a7:11:db:ee:fa:a2:72:17:16:03:e7:a8:3f:
                    9c:1e:01:8b:8a:87:68:c0:1a:72:96:d9:9a:eb:d1:
                    2c:6f:63:1b:50:e2:8d:6e:53:12:17:85:83:1d:18:
                    e7:34:40:eb:2c:6f:6d:19:b6:07:69:5b:fd:2e:75:
                    21:a3:62:67:78:71:0c:e8:3b:cd:fe:cd:5a:0f:3b:
                    87:f0:70:49:f1:66:76:60:67:6b:23:c6:c4:43:b2:
                    03:8f:00:b2:02:ab:7b:4f:c5:e6:b3:f2:84:60:42:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4D:47:F4:09:B3:12:2A:84:8A:A2:AD:20:1E:0E:59:98:7D:33:B3
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139382e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:0a:65:c5:13:dc:1f:09:c5:b1:11:e7:e0:57:bd:96:20:f6:
         2b:86:45:95:cc:92:81:1b:81:2d:fe:63:2b:68:03:19:9f:3d:
         9e:2e:df:71:45:51:1e:5c:88:1b:82:a0:b2:04:9a:b3:fb:49:
         59:77:3b:13:60:93:b9:1f:44:da:49:df:2f:46:e9:99:85:de:
         9f:88:17:de:d2:80:7c:4c:a6:3d:54:37:8e:b8:b9:5e:08:00:
         d0:75:b0:5e:27:8e:43:60:d9:3f:db:85:bf:1a:8c:ac:ba:4d:
         56:7a:79:17:a5:da:8f:e8:a7:b2:1b:36:86:fa:a0:46:4d:d1:
         b2:12:27:05:30:d4:f3:53:71:f2:0d:d5:51:fd:f9:4b:8a:6d:
         57:53:58:e4:f9:48:77:56:64:fe:e7:b2:b1:64:a6:41:59:3b:
         0a:59:00:49:aa:ae:73:30:21:0a:39:d1:94:3d:6c:c6:f2:80:
         ce:92:79:2b:c1:2e:9e:16:2e:c6:dc:c7:28:b7:29:05:e7:66:
         e8:1f:75:65:09:09:fe:c1:c1:3e:95:7f:9e:7c:ee:62:23:26:
         57:83:16:ea:1f:e9:0e:bb:7a:14:2c:04:59:af:42:3c:74:44:
         6d:97:ae:2b:37:d8:28:1c:6f:93:cc:dc:5a:8b:cc:c1:65:b9:
         e1:78:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org