Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37382e302f32332d3233203d3e20323632373733.roa
File:                     3133382e3132322e37382e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          cH3iiwOAMqDngs62IF6NoXvFU2+dZPHdMDdLBdEwPwk=
Subject key identifier:   56:68:F9:62:2C:D4:77:30:60:D8:4B:2A:60:2C:37:96:CC:02:89:68
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3EAE6FB0FDF131583268CAC6449DB7EA7FC9D1F2
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37382e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:20 +0000
ROA not before:           Tue 27 Sep 2022 19:14:20 +0000
ROA not after:            Tue 26 Sep 2023 19:19:20 +0000
asID:                     262773
IP address blocks:        138.122.78.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ae:6f:b0:fd:f1:31:58:32:68:ca:c6:44:9d:b7:ea:7f:c9:d1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:20 2022 GMT
            Not After : Sep 26 19:19:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:96:fe:d4:c5:2b:5e:23:2a:8e:b0:67:6b:9d:
                    a2:4b:94:ec:c0:4c:77:47:88:f5:30:3c:95:12:30:
                    b3:ec:e0:64:fc:df:9c:3c:ef:6d:a4:85:73:a6:fd:
                    7b:25:33:db:2a:d5:84:60:d6:9d:82:be:fd:6e:a9:
                    cb:b7:e1:f1:d7:9e:e1:71:e6:d2:2a:c1:5e:58:b4:
                    68:52:06:e0:24:93:28:ae:c9:ad:07:69:a6:76:c2:
                    0c:6c:11:d4:ea:db:b3:c2:bd:cd:99:de:12:05:0e:
                    b3:cf:76:15:8d:dc:cf:22:d1:9f:8f:ad:cd:bb:62:
                    45:0f:3d:f4:24:b0:64:10:f7:f2:9f:e6:1e:3a:d4:
                    44:03:ee:ba:8f:57:3d:35:cb:53:95:7a:9c:2a:e8:
                    66:64:a6:ff:4e:19:a3:3e:7c:06:ec:26:1a:62:d1:
                    58:0b:87:d0:60:55:70:c8:80:16:80:30:9b:4a:0a:
                    bc:a8:81:ce:6c:40:84:38:ac:e7:cc:7c:a3:1f:30:
                    b9:29:3a:c7:c7:1f:74:fd:f9:41:60:34:67:c8:99:
                    8d:d8:c5:4c:8e:d9:6d:dc:6c:3f:02:17:5e:35:76:
                    2f:ee:16:25:12:c0:c2:c5:31:0e:c0:3b:94:7c:73:
                    c6:9d:cf:90:fd:57:22:a3:40:1c:68:ea:be:dd:75:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:68:F9:62:2C:D4:77:30:60:D8:4B:2A:60:2C:37:96:CC:02:89:68
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3133382e3132322e37382e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:4e:66:84:dc:c0:5a:cc:17:57:94:39:c6:39:c4:99:1a:46:
         51:e3:cd:a8:b7:d3:d9:c4:ab:47:a6:64:21:5b:41:96:ce:5c:
         8c:1d:a1:ed:87:b7:65:e4:d6:34:d4:65:de:d5:41:31:45:bc:
         0a:97:31:d4:4f:46:2a:43:4f:24:97:a8:89:f8:74:87:b6:0a:
         cc:e0:22:05:cf:64:c4:06:60:20:9c:66:10:75:b0:b9:d9:d7:
         df:c9:74:fc:ec:3a:b0:3e:07:8a:56:13:0d:c5:e7:db:78:d6:
         02:23:6d:85:07:aa:fc:f1:61:b3:62:1c:ea:86:f1:44:7f:4f:
         cb:c4:58:a6:09:c1:6e:8a:aa:6d:5a:bf:f2:ab:44:f9:b7:bb:
         43:16:f7:30:54:e7:2e:57:2d:80:fb:3c:2b:be:99:22:f2:93:
         58:cf:27:94:c5:87:90:a0:cf:cc:58:a3:67:05:3a:0e:12:f3:
         25:af:24:a2:04:cd:03:ef:25:b5:f2:73:be:11:60:47:cf:37:
         56:a8:d4:c9:6f:67:c4:4d:62:a7:c4:b8:bc:cd:35:95:f8:ed:
         8e:c0:d2:dc:17:67:60:76:7a:15:4c:31:17:12:3b:e6:bc:66:
         95:28:ef:8e:42:a9:3c:3f:4a:93:64:ec:22:f6:1e:67:b5:f9:
         b6:0d:77:d4
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUPq5vsP3xMVgyaMrGRJ236n/J0fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA5MjcxOTE0MjBaFw0yMzA5MjYxOTE5MjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTQ5NkZFRDRDNTJCNUUyMzJB
OEVCMDY3NkI5REEyNEI5NEVDQzA0Qzc3NDc4OEY1MzAzQzk1MTIzMEIzRUNFMDY0
RkNERjlDM0NFRjZEQTQ4NTczQTZGRDdCMjUzM0RCMkFENTg0NjBENjlEODJCRUZE
NkVBOUNCQjdFMUYxRDc5RUUxNzFFNkQyMkFDMTVFNThCNDY4NTIwNkUwMjQ5MzI4
QUVDOUFEMDc2OUE2NzZDMjBDNkMxMUQ0RUFEQkIzQzJCRENEOTlERTEyMDUwRUIz
Q0Y3NjE1OEREQ0NGMjJEMTlGOEZBRENEQkI2MjQ1MEYzREY0MjRCMDY0MTBGN0Yy
OUZFNjFFM0FENDQ0MDNFRUJBOEY1NzNEMzVDQjUzOTU3QTlDMkFFODY2NjRBNkZG
NEUxOUEzM0U3QzA2RUMyNjFBNjJEMTU4MEI4N0QwNjA1NTcwQzg4MDE2ODAzMDlC
NEEwQUJDQTg4MUNFNkM0MDg0MzhBQ0U3Q0M3Q0EzMUYzMEI5MjkzQUM3QzcxRjc0
RkRGOTQxNjAzNDY3Qzg5OThERDhDNTRDOEVEOTZEREM2QzNGMDIxNzVFMzU3NjJG
RUUxNjI1MTJDMEMyQzUzMTBFQzAzQjk0N0M3M0M2OURDRjkwRkQ1NzIyQTM0MDFD
NjhFQUJFREQ3NTFBRkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5Jb+1MUrXiMqjrBna52iS5TswEx3R4j1MDyVEjCz7OBk/N+cPO9t
pIVzpv17JTPbKtWEYNadgr79bqnLt+Hx157hcebSKsFeWLRoUgbgJJMorsmtB2mm
dsIMbBHU6tuzwr3Nmd4SBQ6zz3YVjdzPItGfj63Nu2JFDz30JLBkEPfyn+YeOtRE
A+66j1c9NctTlXqcKuhmZKb/ThmjPnwG7CYaYtFYC4fQYFVwyIAWgDCbSgq8qIHO
bECEOKznzHyjHzC5KTrHxx90/flBYDRnyJmN2MVMjtlt3Gw/AhdeNXYv7hYlEsDC
xTEOwDuUfHPGnc+Q/Vcio0AcaOq+3XUa/wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFZo+WIs1HcwYNhLKmAsN5bMAoloMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzMzODJlMzEzMjMyMmUzNzM4
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
inpOMA0GCSqGSIb3DQEBCwUAA4IBAQBGTmaE3MBazBdXlDnGOcSZGkZR482ot9PZ
xKtHpmQhW0GWzlyMHaHth7dl5NY01GXe1UExRbwKlzHUT0YqQ08kl6iJ+HSHtgrM
4CIFz2TEBmAgnGYQdbC52dffyXT87DqwPgeKVhMNxefbeNYCI22FB6r88WGzYhzq
hvFEf0/LxFimCcFuiqptWr/yq0T5t7tDFvcwVOcuVy2A+zwrvpki8pNYzyeUxYeQ
oM/MWKNnBToOEvMlrySiBM0D7yW18nO+EWBHzzdWqNTJb2fETWKnxLi8zTWV+O2O
wNLcF2dgdnoVTDEXEjvmvGaVKO+OQqk8P0qTZOwi9h5ntfm2DXfU
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org