Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e39352e3234302e302f32302d3230203d3e20323632373733.roa
File:                     3138372e39352e3234302e302f32302d3230203d3e20323632373733.roa (raw, json)
Hash identifier:          P33gWnRB22BQp6kbNtJ28EzgjekWnGJa17By7Xqm6WM=
Subject key identifier:   10:72:CB:B2:BF:9D:AA:D8:21:90:14:78:03:CF:5F:49:90:2F:30:B2
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       2B65C8EA4A9ABF0EB08F86324CF1B7A2D21993FE
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e39352e3234302e302f32302d3230203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:45 +0000
ROA not before:           Tue 19 Mar 2024 21:48:45 +0000
ROA not after:            Tue 18 Mar 2025 21:53:45 +0000
asID:                     262773
IP address blocks:        187.95.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:65:c8:ea:4a:9a:bf:0e:b0:8f:86:32:4c:f1:b7:a2:d2:19:93:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:45 2024 GMT
            Not After : Mar 18 21:53:45 2025 GMT
        Subject: CN=1072CBB2BF9DAAD82190147803CF5F49902F30B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:59:bd:70:8c:54:d4:2b:dc:65:97:0c:2c:
                    e6:96:92:83:c2:e4:0f:1c:86:23:97:fc:ac:18:2f:
                    19:32:ed:c1:ab:d0:3b:2e:3e:fa:5d:9f:1b:31:1e:
                    ee:f9:19:3d:8a:ad:c7:e0:05:db:e9:f7:28:e4:51:
                    56:cb:26:f5:29:3b:3e:25:b9:e3:bf:5f:99:95:2d:
                    ad:39:80:89:0e:1b:d7:b6:ac:b3:e0:ff:7a:d3:ce:
                    d7:2c:d6:39:ee:15:73:0d:1c:a9:dc:09:9f:3f:a1:
                    da:8f:19:45:ae:95:0e:47:10:a3:99:d9:11:c1:99:
                    25:23:dd:42:69:08:d3:0e:b8:ff:e1:4a:db:ef:48:
                    c0:34:51:09:44:ce:c1:9e:a3:56:31:8f:f3:c0:e2:
                    0c:9a:a1:76:01:7b:c6:56:6e:8b:9a:e4:cc:5a:e8:
                    aa:d8:b5:1b:64:fa:f6:47:bb:6a:7f:ae:da:1c:2b:
                    91:cd:96:43:ca:4d:4b:71:41:cd:df:83:54:6e:19:
                    4b:fd:7d:19:4b:b0:3a:6a:b3:82:22:23:db:4d:cc:
                    2c:b8:46:62:c3:e6:70:af:15:fc:18:ea:fa:99:3f:
                    54:75:f9:76:9c:c7:44:4f:86:ce:94:d3:4e:36:8f:
                    2e:32:ab:95:18:2d:cd:a0:27:56:12:ce:79:ea:2d:
                    4c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:72:CB:B2:BF:9D:AA:D8:21:90:14:78:03:CF:5F:49:90:2F:30:B2
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e39352e3234302e302f32302d3230203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:0c:b3:1c:e6:58:1d:33:9c:32:2a:39:25:5e:c3:bd:66:
         56:0c:04:2b:d1:d7:4d:c3:c4:59:0e:32:f5:cb:07:d6:3d:3f:
         77:03:5a:32:44:2d:19:5d:74:14:f3:bf:70:76:a0:6e:96:dd:
         cc:82:28:88:fb:19:d8:bd:4d:3d:96:6d:0e:49:eb:97:79:fb:
         bc:f0:13:7a:76:b6:3f:8e:72:46:4f:9c:bf:ca:a5:f2:93:46:
         08:da:c6:cb:f3:1e:c2:7f:02:4c:26:91:00:cf:0b:4a:d3:35:
         f0:3b:26:2b:45:7a:9d:f2:9c:f5:b5:ed:df:00:a7:ba:f6:cc:
         e7:32:37:3d:a8:29:68:76:33:2f:5d:71:0a:8c:91:88:58:45:
         d6:27:3c:40:22:10:1a:54:2a:5b:1f:50:b8:ee:d0:36:76:77:
         8b:a0:b1:18:d0:b8:aa:f7:ed:b8:e5:bd:ec:f1:9d:4f:fe:a1:
         b1:ba:d4:76:12:14:52:aa:95:88:4c:fd:a4:31:48:97:df:0d:
         bf:1f:36:f8:01:8c:79:7f:fd:5d:f7:ee:01:8e:be:74:dc:1b:
         56:a0:25:25:48:2a:35:f5:f1:93:68:6a:3b:5e:f9:62:96:e0:
         86:a9:46:ac:ba:f0:df:f9:5a:93:76:9f:8b:ff:53:a3:5c:5a:
         59:ea:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org