Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37362e302f32332d3233203d3e20323632373733.roa
File:                     3133382e3132322e37362e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          eFvr3MreofOhvcTu4h/QpVvHEJfPrwWAfW84dZmge+o=
Subject key identifier:   8A:16:04:68:BD:A0:19:A7:95:F7:BD:91:0A:9C:F3:80:C5:02:DA:EE
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       0DC73F4EC1DA75E031BBCE75BD4A1DEBFB4DF8D3
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37362e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:31 +0000
ROA not before:           Tue 27 Sep 2022 19:14:31 +0000
ROA not after:            Tue 26 Sep 2023 19:19:31 +0000
asID:                     262773
IP address blocks:        138.122.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c7:3f:4e:c1:da:75:e0:31:bb:ce:75:bd:4a:1d:eb:fb:4d:f8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:31 2022 GMT
            Not After : Sep 26 19:19:31 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:98:e6:0c:4f:0a:2a:38:32:32:e4:35:cf:
                    0b:8f:1b:78:4b:7e:4b:26:ca:f8:4a:56:f8:dd:46:
                    7b:fc:68:ec:1f:90:84:f6:55:b2:97:6d:12:22:43:
                    a0:bd:21:6d:ea:e5:fe:21:ce:fc:0e:a9:2d:e3:68:
                    f3:45:26:d3:e9:76:ec:ed:68:7f:d1:53:62:75:39:
                    08:06:ee:55:8d:46:47:0a:74:bb:93:2f:2b:94:c0:
                    27:5d:23:7b:32:b1:02:d0:b4:ca:ab:72:7f:57:a7:
                    eb:1a:d4:62:64:96:49:a5:d0:d0:76:2f:f7:08:a2:
                    1f:a2:45:4f:cf:58:f3:db:5e:d0:e1:3c:d9:92:34:
                    40:98:d3:b9:68:50:07:2a:69:79:36:d8:b3:46:89:
                    40:7e:c7:01:ef:a9:be:85:63:ce:31:9a:60:13:f2:
                    12:ea:5b:51:71:a7:02:60:32:5f:60:3f:6f:61:50:
                    23:9e:76:ac:52:8f:42:8b:44:8b:f7:27:6e:bb:d2:
                    fe:d1:5a:8e:df:f6:f7:fc:25:b1:3e:96:82:e6:78:
                    ee:28:83:7b:49:d7:07:63:55:32:06:17:9e:d8:05:
                    91:38:65:82:2e:23:cf:26:d5:3a:ce:df:ca:1c:0d:
                    30:24:c3:b3:54:7a:5a:24:ca:5c:9f:da:f7:27:8b:
                    1b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:16:04:68:BD:A0:19:A7:95:F7:BD:91:0A:9C:F3:80:C5:02:DA:EE
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37362e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:6b:39:2b:9d:fd:f5:67:e4:5d:94:3c:f2:e2:ef:14:79:3d:
         97:03:7a:8d:a7:71:8e:6d:ac:09:3d:75:e7:63:7e:7d:82:e2:
         c1:79:31:71:e0:82:f7:96:9c:8f:58:e0:86:99:60:3e:4a:be:
         31:8c:4c:d3:88:4a:a2:97:35:18:c7:de:cc:be:cf:00:db:89:
         23:6b:51:04:85:26:ad:b7:e1:b2:6e:8b:21:f0:1a:76:44:3e:
         ca:7a:c3:a3:e6:09:08:96:8d:53:92:fc:9a:0a:a9:91:28:f3:
         98:d4:e2:9b:60:eb:2a:7b:46:25:bb:ab:5e:bb:3b:4b:2c:f2:
         43:2d:c7:76:6e:9c:b4:08:26:64:ed:34:fa:05:75:4f:be:34:
         39:8e:8c:1c:62:45:99:0f:d2:da:f3:3a:d8:8b:5d:f4:65:c7:
         9d:35:36:0c:fa:a0:15:0b:c1:a6:20:93:28:4d:1c:f2:44:f8:
         b1:0d:e9:79:d1:bd:fc:20:9c:b3:46:3e:3e:d9:9e:dc:87:aa:
         97:9f:7b:c8:01:91:77:bd:7a:f6:b2:f6:99:4e:f1:e1:18:8f:
         9f:a0:28:46:62:e6:60:2f:58:af:ae:7c:81:91:59:76:1e:92:
         9c:4a:b5:81:68:26:11:98:de:68:b6:b3:a0:be:58:d6:f3:8d:
         b6:35:a6:e6
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUDcc/TsHadeAxu851vUod6/tN+NMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA5MjcxOTE0MzFaFw0yMzA5MjYxOTE5MzFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjUwOTk4RTYwQzRGMEEyQTM4
MzIzMkU0MzVDRjBCOEYxQjc4NEI3RTRCMjZDQUY4NEE1NkY4REQ0NjdCRkM2OEVD
MUY5MDg0RjY1NUIyOTc2RDEyMjI0M0EwQkQyMTZERUFFNUZFMjFDRUZDMEVBOTJE
RTM2OEYzNDUyNkQzRTk3NkVDRUQ2ODdGRDE1MzYyNzUzOTA4MDZFRTU1OEQ0NjQ3
MEE3NEJCOTMyRjJCOTRDMDI3NUQyMzdCMzJCMTAyRDBCNENBQUI3MjdGNTdBN0VC
MUFENDYyNjQ5NjQ5QTVEMEQwNzYyRkY3MDhBMjFGQTI0NTRGQ0Y1OEYzREI1RUQw
RTEzQ0Q5OTIzNDQwOThEM0I5Njg1MDA3MkE2OTc5MzZEOEIzNDY4OTQwN0VDNzAx
RUZBOUJFODU2M0NFMzE5QTYwMTNGMjEyRUE1QjUxNzFBNzAyNjAzMjVGNjAzRjZG
NjE1MDIzOUU3NkFDNTI4RjQyOEI0NDhCRjcyNzZFQkJEMkZFRDE1QThFREZGNkY3
RkMyNUIxM0U5NjgyRTY3OEVFMjg4MzdCNDlENzA3NjM1NTMyMDYxNzlFRDgwNTkx
Mzg2NTgyMkUyM0NGMjZENTNBQ0VERkNBMUMwRDMwMjRDM0IzNTQ3QTVBMjRDQTVD
OUZEQUY3Mjc4QjFCNjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtQmY5gxPCio4MjLkNc8Ljxt4S35LJsr4Slb43UZ7/GjsH5CE9lWy
l20SIkOgvSFt6uX+Ic78Dqkt42jzRSbT6Xbs7Wh/0VNidTkIBu5VjUZHCnS7ky8r
lMAnXSN7MrEC0LTKq3J/V6frGtRiZJZJpdDQdi/3CKIfokVPz1jz217Q4TzZkjRA
mNO5aFAHKml5NtizRolAfscB76m+hWPOMZpgE/IS6ltRcacCYDJfYD9vYVAjnnas
Uo9Ci0SL9yduu9L+0VqO3/b3/CWxPpaC5njuKIN7SdcHY1UyBhee2AWROGWCLiPP
JtU6zt/KHA0wJMOzVHpaJMpcn9r3J4sbYQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FIoWBGi9oBmnlfe9kQqc84DFAtruMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzMzODJlMzEzMjMyMmUzNzM2
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
inpMMA0GCSqGSIb3DQEBCwUAA4IBAQB2azkrnf31Z+RdlDzy4u8UeT2XA3qNp3GO
bawJPXXnY359guLBeTFx4IL3lpyPWOCGmWA+Sr4xjEzTiEqilzUYx97Mvs8A24kj
a1EEhSatt+Gybosh8Bp2RD7KesOj5gkIlo1TkvyaCqmRKPOY1OKbYOsqe0Ylu6te
uztLLPJDLcd2bpy0CCZk7TT6BXVPvjQ5jowcYkWZD9La8zrYi130ZcedNTYM+qAV
C8GmIJMoTRzyRPixDel50b38IJyzRj4+2Z7ch6qXn3vIAZF3vXr2svaZTvHhGI+f
oChGYuZgL1ivrnyBkVl2HpKcSrWBaCYRmN5otrOgvljW8422Nabm
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org