Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38362e38302e302f32302d3234203d3e20323632373733.roa
File:                     3138372e38362e38302e302f32302d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          f8Wg3iJLAQf+6xfDQBzTtNCuWo0whv7Jh6k0nBNNZ+Q=
Subject key identifier:   23:C5:DB:CC:95:FF:C5:F6:74:F5:71:E0:C1:CC:A8:8F:E3:B7:1E:37
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       2D0806994F7E8214AE91B408FF4433E2482D453D
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38362e38302e302f32302d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:55:24 +0000
ROA not before:           Tue 09 Aug 2022 13:50:24 +0000
ROA not after:            Tue 08 Aug 2023 13:55:24 +0000
asID:                     262773
IP address blocks:        187.86.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:08:06:99:4f:7e:82:14:ae:91:b4:08:ff:44:33:e2:48:2d:45:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:50:24 2022 GMT
            Not After : Aug  8 13:55:24 2023 GMT
        Subject: CN=3082010A0282010100A17EA1B97695B5822AE0FFAAA866AB53EAE8CFD800AE8DA17C1A704E579A4BE023B1CF12649F80F9AD1D3EC4EDE5676518F1D972B8E6D55733838EB7AFE292AD51B58135CB8ACA2F6010897589567583BD5641EA8C0E9AC79533980E7AA7B72711BED11164510E1F1F7C8FAA6CDFE35D3EB96DEFB9BCA5F912ECBBE63410D7162D5A3DF88219D84C6FF2DEF950E1FB76C13C23B5B5AC314B1716E5CE32DE1760860FCBC06C955B57A42780966B2765435FB1FC8D141F3D5ED588D47ADE8676CCC422905012F49C9B5AD8C95CC846635BE277253D8204ADE2D468FF5002AA55706F13DC25D874C35F8AF0B9CFC6E9477F511A39F7891CF2B479EB389D423F2A490203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7e:a1:b9:76:95:b5:82:2a:e0:ff:aa:a8:66:
                    ab:53:ea:e8:cf:d8:00:ae:8d:a1:7c:1a:70:4e:57:
                    9a:4b:e0:23:b1:cf:12:64:9f:80:f9:ad:1d:3e:c4:
                    ed:e5:67:65:18:f1:d9:72:b8:e6:d5:57:33:83:8e:
                    b7:af:e2:92:ad:51:b5:81:35:cb:8a:ca:2f:60:10:
                    89:75:89:56:75:83:bd:56:41:ea:8c:0e:9a:c7:95:
                    33:98:0e:7a:a7:b7:27:11:be:d1:11:64:51:0e:1f:
                    1f:7c:8f:aa:6c:df:e3:5d:3e:b9:6d:ef:b9:bc:a5:
                    f9:12:ec:bb:e6:34:10:d7:16:2d:5a:3d:f8:82:19:
                    d8:4c:6f:f2:de:f9:50:e1:fb:76:c1:3c:23:b5:b5:
                    ac:31:4b:17:16:e5:ce:32:de:17:60:86:0f:cb:c0:
                    6c:95:5b:57:a4:27:80:96:6b:27:65:43:5f:b1:fc:
                    8d:14:1f:3d:5e:d5:88:d4:7a:de:86:76:cc:c4:22:
                    90:50:12:f4:9c:9b:5a:d8:c9:5c:c8:46:63:5b:e2:
                    77:25:3d:82:04:ad:e2:d4:68:ff:50:02:aa:55:70:
                    6f:13:dc:25:d8:74:c3:5f:8a:f0:b9:cf:c6:e9:47:
                    7f:51:1a:39:f7:89:1c:f2:b4:79:eb:38:9d:42:3f:
                    2a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C5:DB:CC:95:FF:C5:F6:74:F5:71:E0:C1:CC:A8:8F:E3:B7:1E:37
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38362e38302e302f32302d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:a4:04:2a:44:57:0e:f6:6f:68:e1:a7:6c:3a:ee:8e:84:67:
         77:a4:f3:7b:a8:3a:1c:1e:b4:64:b2:ac:5f:28:e2:84:01:c6:
         4a:bc:e1:34:4b:c9:f7:a9:ce:cd:f2:52:55:2c:16:20:33:89:
         bf:f4:da:eb:21:64:d6:66:12:9b:c9:14:a9:08:47:e5:9e:d4:
         5f:2e:13:69:57:b0:b7:2e:41:27:f8:99:3d:96:bf:1e:93:62:
         2b:d4:2a:6d:9f:0f:2c:92:b1:84:aa:10:57:cf:14:e9:3e:b5:
         8a:93:6e:bf:08:37:0b:c2:94:2d:b8:63:d5:ea:bc:bc:28:9c:
         4f:82:b5:83:9e:0d:19:e0:26:f1:56:28:3e:34:53:bb:a4:19:
         14:81:0f:cd:63:5f:b5:fc:1f:e7:d2:3e:44:4e:d4:63:d9:88:
         aa:de:57:7a:e9:c4:5d:cb:22:bf:a7:5e:79:64:29:b4:3b:9e:
         7a:0f:a2:dd:2b:12:00:9f:c0:12:c1:21:3a:1d:d9:fe:31:a7:
         9a:80:4c:c0:78:26:43:9f:81:e6:ff:f8:ab:f4:94:82:e1:33:
         3c:29:5a:6d:d3:9a:43:fd:bc:7f:c4:24:2a:a9:c7:99:39:a6:
         0a:a5:c2:27:07:cd:d3:1d:55:da:da:f6:07:8e:d1:43:d1:d8:
         f9:f7:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org