Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137382e302f32332d3233203d3e20323632373733.roa
File:                     3133382e33362e3137382e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          hdZviAaZKV5sbhI/qDm+4Cix2tXdEXiZWMKTUpaoaPY=
Subject key identifier:   E7:AA:BA:E2:50:F7:DC:3B:7F:06:CA:45:D6:8C:8C:30:99:FC:01:7D
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       73E29CA512044B02DA4ED9AAA0F0D45EF90C0EAD
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137382e302f32332d3233203d3e20323632373733.roa
Signing time:             Fri 10 Feb 2023 14:05:18 +0000
ROA not before:           Fri 10 Feb 2023 14:00:18 +0000
ROA not after:            Fri 09 Feb 2024 14:05:18 +0000
asID:                     262773
IP address blocks:        138.36.178.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e2:9c:a5:12:04:4b:02:da:4e:d9:aa:a0:f0:d4:5e:f9:0c:0e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb 10 14:00:18 2023 GMT
            Not After : Feb  9 14:05:18 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:27:e5:d2:4e:c4:bc:7f:0b:fe:55:fb:51:
                    da:5a:f3:52:79:07:0f:2a:67:c3:a4:16:72:f0:d4:
                    eb:c7:3b:31:0d:57:04:63:61:c0:3e:8d:77:7d:d7:
                    5f:2e:6a:fc:c4:10:e1:17:93:ec:b3:25:7c:66:59:
                    b3:56:22:54:88:90:3b:ac:c4:d6:41:7d:8d:39:9f:
                    7b:97:fc:c2:07:6c:95:34:37:ff:bf:99:01:36:b1:
                    fe:54:8d:54:90:96:9c:fa:6f:34:67:90:3a:9f:0f:
                    36:c6:80:4f:b6:24:ab:70:54:13:f8:07:39:d8:38:
                    49:db:0d:96:5e:1a:15:f9:00:6c:99:b3:ab:1d:00:
                    2e:87:2a:0e:fb:22:c6:8b:e3:88:35:a7:a0:8b:a6:
                    6f:15:90:35:95:5f:c8:69:52:d9:8b:8b:77:d2:dc:
                    99:fa:f1:13:b9:f1:a0:1f:a3:8e:a2:bd:63:dd:84:
                    30:66:b4:77:ea:e5:10:8c:5a:73:87:f6:e2:66:7e:
                    0b:17:31:f1:56:84:67:73:db:2e:97:66:ab:13:f1:
                    bc:81:98:48:df:ec:23:a5:c8:97:06:5f:45:c3:41:
                    e0:5f:63:76:b1:38:af:9e:e3:4c:2a:7b:25:34:4f:
                    4d:6d:81:bb:47:49:c0:b9:dc:a6:ac:b0:3d:c3:0c:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AA:BA:E2:50:F7:DC:3B:7F:06:CA:45:D6:8C:8C:30:99:FC:01:7D
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e33362e3137382e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:e3:d8:25:6d:85:fc:aa:84:e5:f8:b8:a9:7b:17:28:b4:4e:
         05:0a:6f:c5:18:6e:5b:60:9a:9c:60:07:d4:98:03:e1:85:92:
         b9:8e:af:07:75:e6:89:4b:51:e5:0e:a6:06:65:b4:91:b3:32:
         40:39:82:88:a5:5d:57:61:c4:a5:84:08:5a:63:ee:9e:f4:70:
         d4:52:1a:af:3a:8f:d3:ec:39:21:06:f5:54:9b:8f:c2:b2:30:
         a7:c1:9e:6d:95:f1:5f:ef:2f:a7:7c:ca:53:ec:e9:93:7c:8f:
         75:10:62:69:dc:65:91:74:e1:d0:99:0a:03:7b:28:6c:df:7c:
         7f:fd:d0:ef:1a:79:e0:14:19:37:01:cf:26:44:c8:3a:ba:8d:
         4c:4e:04:e5:46:bd:13:00:09:0e:68:e6:a7:b3:ed:68:dc:d3:
         03:c8:5c:07:f7:3e:1a:c6:2c:ec:fa:f2:c4:2f:4d:d3:ae:ee:
         61:e8:2b:94:6d:5f:37:e2:3e:89:c2:80:f3:3c:68:28:81:59:
         1a:ff:2d:d2:36:cb:32:77:ec:e7:28:e9:a7:cb:f8:82:44:b3:
         a4:bc:d9:96:d3:37:40:fe:0c:e3:c4:c6:67:d0:b3:79:73:6b:
         13:94:17:71:3e:b3:8b:5a:39:cb:00:e8:d3:63:de:55:8c:09:
         79:39:9a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:36:50 2025 by rpki-client