Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3230312e3135382e32342e302f32312d3231203d3e20323632373733.roa
File:                     3230312e3135382e32342e302f32312d3231203d3e20323632373733.roa (raw, json)
Hash identifier:          juaB/LOuaq4dzkhf5Ak/k1uYW5XJgs1qmtwYGQFNOSE=
Subject key identifier:   69:DC:2B:A8:DA:F7:4A:54:86:B0:09:6A:15:65:67:28:D2:09:14:48
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       28858C463E495CBBF58745F636F696CFC582203D
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3230312e3135382e32342e302f32312d3231203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:53 +0000
ROA not before:           Tue 19 Mar 2024 21:48:53 +0000
ROA not after:            Tue 18 Mar 2025 21:53:53 +0000
asID:                     262773
IP address blocks:        201.158.24.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:85:8c:46:3e:49:5c:bb:f5:87:45:f6:36:f6:96:cf:c5:82:20:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:53 2024 GMT
            Not After : Mar 18 21:53:53 2025 GMT
        Subject: CN=69DC2BA8DAF74A5486B0096A15656728D2091448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:36:ee:6e:0a:db:35:13:2b:84:9c:c2:76:
                    00:f4:88:0b:60:a3:32:3e:e9:91:69:eb:f6:30:03:
                    63:ac:30:de:90:d3:1e:bd:f4:84:86:0a:17:87:20:
                    d8:97:18:84:15:c6:a1:69:fd:d4:db:c3:d0:c6:91:
                    00:19:cb:98:d3:49:73:8a:12:1f:24:5c:ab:6f:8d:
                    77:c2:c2:ba:bc:f1:d1:8d:e4:f0:06:a8:a5:9c:22:
                    20:81:fd:d4:dc:59:51:2b:69:8f:f2:fa:a2:ca:97:
                    ff:8b:a3:02:d7:b9:66:9c:0d:6e:ea:c0:1d:12:a1:
                    f1:d3:1a:6a:e8:5f:6d:c3:e5:8d:b1:05:8a:4a:4d:
                    64:1b:3c:e6:aa:d8:ec:da:0d:71:cc:29:47:c8:aa:
                    fa:5c:55:7a:4e:7f:23:14:ae:28:18:bf:c0:0b:a7:
                    e4:e2:f4:dd:47:33:eb:a8:0e:47:89:13:28:d2:18:
                    89:d3:2f:ac:0b:97:09:a3:4c:1a:63:fe:4e:22:de:
                    2e:c5:03:73:c6:eb:f5:7d:41:10:a7:2d:fd:bd:30:
                    9e:1f:1a:d6:f8:51:7e:4b:d1:73:5c:b7:53:e7:8f:
                    9b:39:ad:b0:1c:1e:aa:88:a7:18:b5:0b:7d:b7:69:
                    9a:14:84:4a:bb:eb:dd:3f:06:65:c1:6f:6d:37:58:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DC:2B:A8:DA:F7:4A:54:86:B0:09:6A:15:65:67:28:D2:09:14:48
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3230312e3135382e32342e302f32312d3231203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:76:78:99:9a:60:b3:ce:8a:77:09:54:bc:b1:1e:0a:99:6e:
         be:a4:78:e0:75:d0:2b:a0:09:10:7b:a2:dd:1c:4d:56:75:93:
         eb:64:78:e9:07:fc:09:27:3a:6b:74:95:1e:11:fb:46:c3:eb:
         5d:9b:68:ea:ce:5b:b8:62:8f:4b:65:8c:84:e2:b4:32:e1:bc:
         31:fd:5e:bf:33:f1:89:c9:bd:52:c8:ff:c9:e6:b4:d6:76:92:
         fa:ba:21:c3:e9:5b:5d:c1:2b:0c:e2:37:4e:b6:b2:df:74:f9:
         5d:6d:dd:be:5c:a3:eb:40:3a:68:ee:4c:74:a7:3e:e7:32:76:
         c8:3c:c9:a1:25:92:05:7d:99:f8:d9:e8:18:4d:d0:0c:ce:0c:
         5b:5d:8f:50:c9:a0:74:ac:ab:43:0a:4b:de:65:dc:0f:18:98:
         58:da:d1:51:10:fb:87:6f:02:30:20:4a:18:26:f3:4c:8f:d3:
         60:8c:32:47:11:f9:d7:da:95:08:0d:29:8f:cb:70:1d:13:7e:
         a0:a8:0c:ae:77:af:58:65:35:99:4f:6c:2e:24:2d:b0:4c:09:
         98:36:d6:85:c2:af:d9:6a:c4:25:33:9d:5a:3b:3a:ee:7d:1f:
         7e:f9:0c:e9:02:69:05:c4:dc:a7:fe:33:91:ff:59:6b:eb:4b:
         33:56:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org