Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37372e302f32342d3234203d3e20323632373733.roa
File:                     3133382e3132322e37372e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          gdoOfcTlK/5Wlh17IPjTrIg3ytd0+WXhxoHKgxxjQNc=
Subject key identifier:   FB:F5:B0:42:83:CF:C1:BF:F3:A2:58:E8:3A:B8:AD:5B:E9:5D:0A:22
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       6E7CEB323979F9957C5FCDF672ECB5435582EB99
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37372e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:29 +0000
ROA not before:           Tue 27 Sep 2022 19:14:29 +0000
ROA not after:            Tue 26 Sep 2023 19:19:29 +0000
asID:                     262773
IP address blocks:        138.122.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7c:eb:32:39:79:f9:95:7c:5f:cd:f6:72:ec:b5:43:55:82:eb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:29 2022 GMT
            Not After : Sep 26 19:19:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:b7:47:b7:a7:17:71:1c:68:3c:b2:2c:08:
                    12:e8:e4:bd:fe:0e:f2:93:a9:0b:dc:55:14:6f:09:
                    1d:46:68:73:19:b4:9a:ac:e4:9a:32:8f:fe:09:5f:
                    ef:f6:34:e7:b3:56:a0:60:fa:4e:ae:28:2a:af:bb:
                    95:47:bf:91:b8:63:fa:5d:4e:1a:c9:69:29:41:0b:
                    23:e6:ec:ef:f3:9f:6a:4c:18:21:1b:84:08:fd:49:
                    21:ff:c4:ba:e8:5e:9c:9e:3b:a7:83:48:97:f2:79:
                    5d:2e:9a:0d:c2:3e:5d:df:66:8b:9f:cd:1b:b5:ec:
                    96:df:6e:3b:c1:92:e8:ac:d4:44:bb:c5:b9:79:40:
                    38:86:56:97:f8:01:f1:65:80:b6:8f:2f:f8:ab:7d:
                    6c:06:d5:71:64:34:e3:e7:73:9f:e2:a0:9f:e8:1d:
                    c7:e2:63:b9:a6:12:57:42:73:77:99:2d:80:98:9d:
                    0e:5d:cd:ea:25:0a:73:d1:da:6f:4e:e4:24:0c:74:
                    e1:d9:e4:c2:64:82:24:07:48:eb:b7:69:e4:b1:7d:
                    0a:94:aa:77:57:fe:c6:55:f5:70:52:48:41:e1:fb:
                    8e:7a:2b:9f:3c:b4:1f:1a:9a:a8:8a:9e:e6:28:7a:
                    8b:20:d2:82:8a:03:b4:7e:50:b9:33:a2:4e:fe:83:
                    09:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F5:B0:42:83:CF:C1:BF:F3:A2:58:E8:3A:B8:AD:5B:E9:5D:0A:22
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37372e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:2e:f6:c5:64:d9:65:b0:a0:8a:98:2c:44:b9:3c:03:e7:3f:
         3f:2d:96:ef:df:af:c8:fb:ba:86:d4:b2:13:cb:9b:f4:dd:e0:
         84:ea:18:90:58:da:05:e5:6f:95:18:61:20:ff:a5:f8:da:51:
         60:06:34:4f:3b:de:7d:d8:8e:74:48:2f:4f:e5:81:0d:54:21:
         10:af:c1:98:d0:53:6a:99:d6:9f:e5:1f:5c:03:db:69:6d:60:
         af:8a:fc:a6:f5:44:62:62:a0:02:77:15:15:71:9f:40:13:ab:
         c7:2b:78:9a:76:0b:c8:d4:15:01:c8:f6:3c:f1:5a:d8:73:af:
         b8:cb:3b:7c:8f:20:75:25:99:e5:cb:c7:2e:a1:f1:af:75:71:
         9c:63:fa:25:54:a2:62:bd:25:15:0f:05:da:f7:c9:a1:d9:12:
         7d:4d:ff:48:90:7f:d7:ea:bd:6a:84:fb:27:73:91:b2:f1:91:
         1b:a5:e9:9d:79:df:ea:3e:50:c0:f6:71:52:4b:6d:37:db:bf:
         64:89:9d:ac:ea:cf:51:63:66:f5:2e:f4:62:70:ba:6b:70:09:
         9f:30:77:15:42:a1:fe:f0:c3:3c:ef:ab:28:71:98:e0:4d:d9:
         aa:ce:aa:1a:43:23:a2:28:82:d1:3a:f2:68:5c:c3:2d:ed:24:
         de:c4:49:22
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUbnzrMjl5+ZV8X832cuy1Q1WC65kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA5MjcxOTE0MjlaFw0yMzA5MjYxOTE5MjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDBDQUI3NDdCN0E3MTc3MTFD
NjgzQ0IyMkMwODEyRThFNEJERkUwRUYyOTNBOTBCREM1NTE0NkYwOTFENDY2ODcz
MTlCNDlBQUNFNDlBMzI4RkZFMDk1RkVGRjYzNEU3QjM1NkEwNjBGQTRFQUUyODJB
QUZCQjk1NDdCRjkxQjg2M0ZBNUQ0RTFBQzk2OTI5NDEwQjIzRTZFQ0VGRjM5RjZB
NEMxODIxMUI4NDA4RkQ0OTIxRkZDNEJBRTg1RTlDOUUzQkE3ODM0ODk3RjI3OTVE
MkU5QTBEQzIzRTVEREY2NjhCOUZDRDFCQjVFQzk2REY2RTNCQzE5MkU4QUNENDQ0
QkJDNUI5Nzk0MDM4ODY1Njk3RjgwMUYxNjU4MEI2OEYyRkY4QUI3RDZDMDZENTcx
NjQzNEUzRTc3MzlGRTJBMDlGRTgxREM3RTI2M0I5QTYxMjU3NDI3Mzc3OTkyRDgw
OTg5RDBFNURDREVBMjUwQTczRDFEQTZGNEVFNDI0MEM3NEUxRDlFNEMyNjQ4MjI0
MDc0OEVCQjc2OUU0QjE3RDBBOTRBQTc3NTdGRUM2NTVGNTcwNTI0ODQxRTFGQjhF
N0EyQjlGM0NCNDFGMUE5QUE4OEE5RUU2Mjg3QThCMjBEMjgyOEEwM0I0N0U1MEI5
MzNBMjRFRkU4MzA5MjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0Mq3R7enF3EcaDyyLAgS6OS9/g7yk6kL3FUUbwkdRmhzGbSarOSa
Mo/+CV/v9jTns1agYPpOrigqr7uVR7+RuGP6XU4ayWkpQQsj5uzv859qTBghG4QI
/Ukh/8S66F6cnjung0iX8nldLpoNwj5d32aLn80bteyW3247wZLorNREu8W5eUA4
hlaX+AHxZYC2jy/4q31sBtVxZDTj53Of4qCf6B3H4mO5phJXQnN3mS2AmJ0OXc3q
JQpz0dpvTuQkDHTh2eTCZIIkB0jrt2nksX0KlKp3V/7GVfVwUkhB4fuOeiufPLQf
Gpqoip7mKHqLINKCigO0flC5M6JO/oMJIwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FPv1sEKDz8G/86JY6Dq4rVvpXQoiMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzMzODJlMzEzMjMyMmUzNzM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
inpNMA0GCSqGSIb3DQEBCwUAA4IBAQDRLvbFZNllsKCKmCxEuTwD5z8/LZbv36/I
+7qG1LITy5v03eCE6hiQWNoF5W+VGGEg/6X42lFgBjRPO9592I50SC9P5YENVCEQ
r8GY0FNqmdaf5R9cA9tpbWCvivym9URiYqACdxUVcZ9AE6vHK3iadgvI1BUByPY8
8VrYc6+4yzt8jyB1JZnly8cuofGvdXGcY/olVKJivSUVDwXa98mh2RJ9Tf9IkH/X
6r1qhPsnc5Gy8ZEbpemded/qPlDA9nFSS203279kiZ2s6s9RY2b1LvRicLprcAmf
MHcVQqH+8MM876socZjgTdmqzqoaQyOiKILROvJoXMMt7STexEki
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org