Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3139312e3235332e31362e302f32342d3234203d3e20323632373733.roa
File:                     3139312e3235332e31362e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          GFx2TZh1gVt23MmlGX2Wplt2KY7/41TsTFYIXkjfgMA=
Subject key identifier:   58:6D:3E:CA:5A:70:8E:C3:E4:6E:F3:F6:ED:BE:C4:25:8B:01:67:AF
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       619DF2EDFF72938CB4D0EC8F5359C4271C3C3C5F
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3139312e3235332e31362e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 03 Apr 2024 13:04:19 +0000
ROA not before:           Wed 03 Apr 2024 12:59:19 +0000
ROA not after:            Wed 02 Apr 2025 13:04:19 +0000
asID:                     262773
IP address blocks:        191.253.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9d:f2:ed:ff:72:93:8c:b4:d0:ec:8f:53:59:c4:27:1c:3c:3c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Apr  3 12:59:19 2024 GMT
            Not After : Apr  2 13:04:19 2025 GMT
        Subject: CN=586D3ECA5A708EC3E46EF3F6EDBEC4258B0167AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:f0:a8:6f:aa:7b:fe:46:b0:1d:ec:97:77:
                    c3:60:7e:7b:29:e5:db:82:a9:24:85:5c:50:23:6c:
                    ef:5d:0e:d5:49:b3:54:85:3f:95:f3:ae:0d:15:ea:
                    71:ec:45:27:5c:9a:aa:02:98:a8:f9:d4:9e:4c:e3:
                    cb:2d:05:d3:97:93:69:5c:b6:e4:8f:3b:69:d5:f3:
                    01:fe:a3:cf:db:e5:bf:f3:65:a2:64:b5:8b:b5:c2:
                    82:2c:ae:4e:8d:9a:6e:2b:e4:a4:5b:08:59:92:f5:
                    f2:25:8b:29:75:a0:90:13:e3:8d:a2:2c:3c:f3:d5:
                    17:76:b3:34:9f:9c:1d:07:2d:0d:84:ee:ad:27:4e:
                    c6:89:bf:74:5c:c7:bd:fd:12:c0:2b:51:55:2c:2f:
                    ae:74:28:78:af:90:31:d9:9d:c2:15:07:76:20:af:
                    19:77:ca:20:34:53:f1:bf:6c:f1:77:d8:0f:55:29:
                    4e:50:c9:0c:19:5a:bb:c4:b3:11:13:64:99:12:03:
                    e9:33:61:c6:4e:bd:80:9a:50:39:a5:3f:b1:d8:f7:
                    0a:5d:75:85:08:20:32:06:29:fe:77:db:60:d0:35:
                    c8:8e:5d:1b:de:5c:f5:40:66:d1:83:7b:01:08:04:
                    d8:fd:0a:c2:af:9e:4e:8e:92:ea:ff:71:8c:40:09:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6D:3E:CA:5A:70:8E:C3:E4:6E:F3:F6:ED:BE:C4:25:8B:01:67:AF
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3139312e3235332e31362e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:16:50:6a:81:4b:98:14:8f:f8:20:39:bc:0b:9f:25:92:7f:
         74:43:21:10:0d:e4:fa:2d:59:c8:11:09:33:2a:51:14:5f:30:
         01:ac:39:e0:bb:a9:75:a0:68:60:41:64:2a:0e:c0:e0:20:7b:
         f6:b3:c3:ec:5a:f0:52:90:bd:f5:28:2c:3b:24:d3:22:8f:13:
         01:5b:9d:b4:44:aa:2f:1d:31:a6:97:a9:8a:01:a1:26:35:4c:
         be:80:dc:7a:fb:a3:a8:fa:db:70:57:2a:01:df:ce:47:10:75:
         0a:96:d2:25:fc:15:7d:3d:1f:58:d6:81:57:fd:83:a6:29:ff:
         48:e7:28:cf:94:87:6c:54:36:a7:56:fc:b4:ce:59:a4:bf:d6:
         21:07:b8:6c:96:4a:11:26:2d:bd:fe:43:b1:be:b0:81:4a:43:
         db:12:e6:ed:f7:c7:dc:c7:fc:c1:4a:05:ac:56:76:dd:f7:bc:
         7b:61:19:78:c4:ec:67:ee:ff:cf:67:5c:9d:4a:ee:b2:75:6e:
         83:ea:b7:7b:63:9f:4e:94:1b:3a:43:66:45:a1:b2:ea:b7:01:
         14:eb:1b:08:22:9b:4e:e0:1f:75:e5:85:3e:c1:4c:a4:ea:0f:
         6a:9c:f6:ff:f7:47:aa:5c:86:7c:09:f5:cc:e9:9a:1e:c1:12:
         47:91:18:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org