Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/AS262748.roa
File:                     AS262748.roa (raw, json)
Hash identifier:          oFtFKR5VH3bBHNE+PdLAIkZRU2/0V8pS2hy4vAHo5Lc=
Subject key identifier:   2F:40:95:41:D5:01:3D:DE:93:0A:3C:23:35:0F:40:E7:FD:75:B1:9B
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       5AB510093FCDBC6D5692D58CA44EF50C571EB636
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/AS262748.roa
Signing time:             Wed 19 Jul 2023 00:33:06 +0000
ROA not before:           Wed 19 Jul 2023 00:28:06 +0000
ROA not after:            Wed 17 Jul 2024 00:33:06 +0000
asID:                     262748
IP address blocks:        138.185.164.0/22 maxlen: 24
                          168.197.72.0/22 maxlen: 24
                          177.85.88.0/22 maxlen: 24
                          186.208.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b5:10:09:3f:cd:bc:6d:56:92:d5:8c:a4:4e:f5:0c:57:1e:b6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Jul 19 00:28:06 2023 GMT
            Not After : Jul 17 00:33:06 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:00:0f:22:98:54:77:f0:65:3d:9f:34:bf:87:
                    9c:17:01:1e:f1:81:88:cd:d8:4e:df:1f:56:74:f8:
                    19:dc:44:6b:62:21:d0:88:7d:58:8e:13:62:fe:aa:
                    87:d2:58:42:e5:09:78:a8:cd:ff:a3:33:36:03:bd:
                    28:d1:f8:ef:61:d1:e4:2b:38:50:02:be:81:11:55:
                    3b:d3:49:51:04:a3:bc:6e:1b:dd:6e:1a:ab:30:56:
                    6c:9e:36:6c:49:8e:7b:4b:d2:65:a9:52:55:1d:42:
                    bc:8b:bd:13:e3:f0:13:ad:0d:a0:49:84:55:f8:b2:
                    4d:1b:79:ad:73:54:08:7b:5b:38:9a:b3:5b:23:ef:
                    08:ce:cc:b6:4d:c7:2b:9a:6b:85:1c:95:30:ee:e8:
                    99:c1:8b:41:7a:11:ef:fb:9e:85:20:ba:55:1e:74:
                    74:db:a4:0f:4e:89:53:19:f7:86:b6:10:03:f1:3b:
                    f1:4f:29:23:6f:27:5c:61:35:4a:90:58:af:2f:99:
                    9e:c5:37:3b:64:8b:c7:9b:2b:94:8d:d9:77:0d:35:
                    dd:0f:37:fa:2e:42:06:cb:33:24:f2:86:5f:8c:3a:
                    6a:a2:d4:50:04:b2:e9:b2:ed:2a:3c:ad:3f:c3:7e:
                    d7:ee:97:b3:58:ff:f8:c6:76:13:f1:f5:3e:18:19:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:95:41:D5:01:3D:DE:93:0A:3C:23:35:0F:40:E7:FD:75:B1:9B
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/AS262748.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.164.0/22
                  168.197.72.0/22
                  177.85.88.0/22
                  186.208.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:ca:68:20:93:91:71:ec:6c:42:60:28:86:32:92:b0:56:42:
         ba:af:5f:0a:2f:fc:cb:c4:b8:c0:98:1e:25:dd:a4:cc:df:99:
         f5:e0:20:00:e6:ab:af:aa:c1:6e:96:f8:d7:82:df:94:04:f1:
         14:c5:e1:2b:61:fd:62:c7:37:b2:f6:15:5f:a7:5e:8b:3b:db:
         a9:9f:49:55:33:e2:b1:a7:ad:a1:fd:34:2e:1a:b3:6d:8e:5d:
         5a:fc:fb:1f:d7:c0:6f:a1:05:10:1a:c8:69:f4:f5:69:bf:3e:
         ff:f0:33:6a:0a:1a:ef:2c:d6:16:da:fd:51:9b:30:24:00:02:
         8b:cc:61:b4:11:eb:a1:32:73:08:19:b3:72:8a:28:84:30:78:
         d9:1d:ab:b9:b3:24:b9:df:8a:47:f3:97:07:51:15:c5:79:b8:
         19:d7:46:15:04:95:83:2e:cc:a3:6c:b3:d9:0a:0e:cd:2d:8c:
         38:e6:02:e8:c1:a2:cf:7f:af:c8:fa:69:02:00:38:8f:30:60:
         2d:42:f5:1c:35:f5:f5:8a:28:e3:6d:50:21:de:b1:87:b7:49:
         cb:c4:90:fd:c0:47:df:cf:a7:04:9b:b2:e8:27:80:59:6e:b5:
         42:79:bb:8d:a9:07:6a:82:b1:6e:e1:82:32:a2:e0:cd:fa:92:
         0f:39:dd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org