Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139392e302f32342d3234203d3e20323632373733.roa
File:                     3138362e3233322e3139392e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          FQ66H9bFLFOzjSZQ2oRhpbpDDHKE0VfzU7eD9xG4A3U=
Subject key identifier:   A5:15:00:B6:67:9E:68:CD:D7:A6:2A:54:B2:05:00:61:FA:86:9D:6F
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       62C1FAFA2ED5672F5EA097A24C0B69AADA6DB978
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139392e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:05:10 +0000
ROA not before:           Tue 09 Aug 2022 14:00:10 +0000
ROA not after:            Tue 08 Aug 2023 14:05:10 +0000
asID:                     262773
IP address blocks:        186.232.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c1:fa:fa:2e:d5:67:2f:5e:a0:97:a2:4c:0b:69:aa:da:6d:b9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 14:00:10 2022 GMT
            Not After : Aug  8 14:05:10 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:9b:fd:e9:41:b1:bd:5a:7c:8e:7f:2a:7e:
                    12:77:14:18:71:59:a8:e5:e4:4e:20:d0:4c:1f:73:
                    38:a0:14:51:cd:9a:2f:dd:24:1d:06:4c:f7:ea:32:
                    0e:74:56:55:b3:37:29:04:ae:4d:09:b7:b8:f0:cd:
                    0c:56:19:41:2e:75:34:cc:c1:cf:37:04:1a:80:f2:
                    a9:67:35:98:7b:24:df:65:27:82:95:1f:08:6f:b7:
                    32:97:4a:2d:a7:bd:d7:7d:2a:be:57:06:75:b9:18:
                    12:bf:58:cb:59:6f:db:fa:1d:b9:d9:77:72:57:e6:
                    3a:95:28:6a:4c:10:30:31:6d:be:79:14:a5:63:d0:
                    54:7b:97:4a:59:2e:84:2c:63:18:1b:d2:b0:ee:9e:
                    c8:19:9e:3b:5d:99:2c:d2:c9:23:17:58:b9:88:d8:
                    d8:d7:04:6e:50:4d:38:a3:fb:26:b6:0a:a2:1e:74:
                    d9:f6:a1:f8:6b:40:fe:ad:d7:4b:a2:a6:79:e0:52:
                    03:68:c2:5d:05:6c:a2:11:56:b1:5a:e4:ce:58:1a:
                    e4:a6:5e:6a:df:ff:29:c9:65:cf:0c:b1:19:ff:48:
                    29:16:cf:ce:f9:ba:27:a4:ed:4e:5e:2a:50:29:28:
                    12:db:e8:bd:ac:2a:f7:f0:f3:78:3c:df:5f:b3:25:
                    0d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:15:00:B6:67:9E:68:CD:D7:A6:2A:54:B2:05:00:61:FA:86:9D:6F
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139392e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:ea:a5:1b:49:fb:92:75:43:68:66:ec:d3:9d:ee:ea:ca:06:
         bb:3a:a0:fe:2e:44:b9:4e:f9:6d:95:fa:6c:f6:34:6a:c9:48:
         ec:af:a7:01:b2:c8:4d:70:40:cb:31:6c:84:0f:d0:95:06:ca:
         34:c0:c9:58:36:53:36:c2:fc:80:be:ed:ee:7c:a4:87:82:80:
         5f:5c:39:cd:9a:88:1b:e2:ef:ce:c6:1d:4a:af:85:7e:92:e2:
         6d:26:2b:4b:f3:47:80:6c:ce:a0:31:8a:62:02:14:2f:d8:ba:
         ce:25:11:72:5e:c7:69:4b:8e:4a:83:68:65:96:31:44:9c:3d:
         b8:97:1c:24:a8:74:29:21:01:d2:b0:8a:77:10:b1:62:bd:d5:
         e3:cd:d5:bd:6c:0c:ab:01:dd:26:e0:95:54:b8:b0:06:ff:b0:
         f5:63:be:21:d2:a8:d1:fe:21:e3:96:95:f9:ad:9c:cf:8a:76:
         c7:5e:3b:65:50:bf:be:1e:5f:48:57:c0:f0:eb:a4:a9:0f:1a:
         dd:a6:97:ca:79:fe:01:dc:4d:f8:36:ef:60:33:57:d1:b3:c6:
         1f:d1:6a:9e:0c:b2:8a:13:36:f0:c7:c5:dc:9b:11:a7:fa:2c:
         aa:6a:b1:59:98:2a:24:ce:bc:bf:a5:7e:62:5c:8a:33:1d:be:
         4a:b2:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org