Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37362e302f32322d3234203d3e20323632373733.roa
File:                     3133382e3132322e37362e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          ePe3O26s0VilmK0cdT6OPR1orjMxipXqhzQMAloG/IM=
Subject key identifier:   86:49:D8:CF:67:FA:0E:EB:09:3D:37:C1:12:57:EE:F4:FE:57:2D:C8
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1A34AF80FDF131129B2C29AE8799AD608F4267BC
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37362e302f32322d3234203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:46 +0000
ROA not before:           Tue 19 Mar 2024 21:48:46 +0000
ROA not after:            Tue 18 Mar 2025 21:53:46 +0000
asID:                     262773
IP address blocks:        138.122.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:34:af:80:fd:f1:31:12:9b:2c:29:ae:87:99:ad:60:8f:42:67:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:46 2024 GMT
            Not After : Mar 18 21:53:46 2025 GMT
        Subject: CN=8649D8CF67FA0EEB093D37C11257EEF4FE572DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:02:71:f7:2d:5d:c0:d6:70:15:d5:95:5e:eb:
                    48:c6:cc:39:fc:d2:4d:7c:5e:6c:d2:f6:85:d9:5a:
                    cb:7a:0f:35:56:39:28:95:5d:0a:ef:30:82:1a:87:
                    8c:dc:8d:7e:e0:24:0f:7e:fb:06:33:e9:d4:8f:0c:
                    a0:5c:59:0e:19:45:21:99:d5:b3:10:ca:b2:17:6b:
                    57:5a:3e:ed:2e:57:eb:bc:36:b6:0b:96:09:0d:3b:
                    98:78:67:61:88:f3:32:0d:7f:41:b2:9f:ac:55:00:
                    97:e5:43:f0:bd:a8:3f:b7:d5:c0:7f:7c:1d:93:f2:
                    93:32:34:0c:ea:7b:0a:43:09:2e:71:10:32:26:30:
                    1a:40:a6:5b:94:0f:26:ed:b9:d9:8b:21:5b:ad:9c:
                    b2:8d:a8:fc:db:43:ab:99:30:3e:80:12:f8:a1:21:
                    e5:3e:90:3d:09:b8:f3:68:7b:94:4a:14:22:d9:55:
                    d5:d1:7d:a1:1e:78:2e:2e:de:a4:0f:54:53:25:b8:
                    8f:a1:2b:12:c3:eb:9f:15:bb:26:8f:f5:43:fd:d2:
                    00:86:dd:a7:4a:de:bf:68:77:75:d4:5a:24:36:9b:
                    2d:05:84:0c:df:1b:54:eb:cf:24:61:e8:f7:fa:a5:
                    c9:9a:aa:76:b4:2e:74:4a:b0:98:3b:97:39:22:f2:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:49:D8:CF:67:FA:0E:EB:09:3D:37:C1:12:57:EE:F4:FE:57:2D:C8
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37362e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:cb:fb:03:45:ac:4a:66:f4:bf:cd:9a:f9:7c:84:89:c9:31:
         51:58:24:0f:5b:78:7a:f2:e9:ec:9c:4f:86:d2:50:c7:87:a2:
         77:b0:7f:65:e1:6a:70:ce:99:3f:c9:b4:8c:86:eb:06:e2:d4:
         7c:9d:b5:b3:e2:5c:ce:cb:41:bb:d0:ad:e6:61:bb:4e:1f:59:
         85:47:90:c3:64:9b:89:0b:1b:b7:09:89:79:08:27:e6:54:57:
         00:a7:f0:a7:07:20:45:df:87:36:10:6b:39:8e:05:72:9d:2d:
         c2:a2:0b:c1:fc:24:a2:fb:39:43:c2:c5:1b:bc:21:bf:d4:03:
         c5:ce:b9:84:69:fd:9d:3c:c3:06:51:57:d6:a3:88:8a:20:89:
         ee:0f:07:4e:35:e9:a3:ad:62:96:90:d4:19:38:9a:81:27:4c:
         89:1c:75:94:27:0a:23:d4:c9:e9:cf:a1:a2:fe:6b:3e:a5:9b:
         ae:51:2e:f8:f7:d0:ab:6d:38:56:9e:d3:b0:ae:33:35:96:b8:
         2a:e5:d6:5f:2d:25:14:e0:98:d4:a0:bf:b1:3a:ab:37:73:d4:
         03:a1:66:ae:eb:b2:87:fd:8c:4d:5f:d2:68:3a:41:e0:db:03:
         62:7f:5d:af:42:a2:f7:36:10:e9:05:f0:20:0c:32:5f:c2:c7:
         25:92:2d:14
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGjSvgP3xMRKbLCmuh5mtYI9CZ7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yNDAzMTkyMTQ4NDZaFw0yNTAzMTgyMTUzNDZaMDMxMTAvBgNV
BAMTKDg2NDlEOENGNjdGQTBFRUIwOTNEMzdDMTEyNTdFRUY0RkU1NzJEQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmAnH3LV3A1nAV1ZVe60jGzDn8
0k18XmzS9oXZWst6DzVWOSiVXQrvMIIah4zcjX7gJA9++wYz6dSPDKBcWQ4ZRSGZ
1bMQyrIXa1daPu0uV+u8NrYLlgkNO5h4Z2GI8zINf0Gyn6xVAJflQ/C9qD+31cB/
fB2T8pMyNAzqewpDCS5xEDImMBpApluUDybtudmLIVutnLKNqPzbQ6uZMD6AEvih
IeU+kD0JuPNoe5RKFCLZVdXRfaEeeC4u3qQPVFMluI+hKxLD658VuyaP9UP90gCG
3adK3r9od3XUWiQ2my0FhAzfG1TrzyRh6Pf6pcmaqna0LnRKsJg7lzki8mQtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhknYz2f6DusJPTfBElfu9P5XLcgwHwYDVR0j
BBgwFoAUE7sppLhL32bqQBmHuHBIt0hPSIgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0ODg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzQkIyOUE0Qjg0QkRGNjZF
QTQwMTk4N0I4NzA0OEI3NDg0RjQ4ODguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAv
MzEzMzM4MmUzMTMyMzIyZTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKekwwDQYJKoZIhvcNAQELBQADggEBACDL+wNF
rEpm9L/Nmvl8hInJMVFYJA9beHry6eycT4bSUMeHonewf2XhanDOmT/JtIyG6wbi
1HydtbPiXM7LQbvQreZhu04fWYVHkMNkm4kLG7cJiXkIJ+ZUVwCn8KcHIEXfhzYQ
azmOBXKdLcKiC8H8JKL7OUPCxRu8Ib/UA8XOuYRp/Z08wwZRV9ajiIogie4PB041
6aOtYpaQ1Bk4moEnTIkcdZQnCiPUyenPoaL+az6lm65RLvj30KttOFae07CuMzWW
uCrl1l8tJRTgmNSgv7E6qzdz1AOhZq7rsof9jE1f0mg6QeDbA2J/Xa9Covc2EOkF
8CAMMl/CxyWSLRQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org