Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32332d3233203d3e20323632373733.roa
File:                     3134332e3230322e3132342e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          8onN37u1AD5VG0Qo9tNxJtNCvN3CoRu/UQDD/99bgfg=
Subject key identifier:   5A:FD:64:66:6A:91:8D:46:3D:38:EE:B1:10:91:7F:86:17:C8:9B:72
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       7407DC5C26477DCCA7D1411DDE6BF1C3B944DE53
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32332d3233203d3e20323632373733.roa
Signing time:             Fri 10 Feb 2023 14:05:17 +0000
ROA not before:           Fri 10 Feb 2023 14:00:17 +0000
ROA not after:            Fri 09 Feb 2024 14:05:17 +0000
asID:                     262773
IP address blocks:        143.202.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:07:dc:5c:26:47:7d:cc:a7:d1:41:1d:de:6b:f1:c3:b9:44:de:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb 10 14:00:17 2023 GMT
            Not After : Feb  9 14:05:17 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:8a:11:f2:06:17:5d:1a:07:f9:63:01:31:
                    4e:71:29:da:18:3e:f9:7a:cc:bc:e1:1e:89:c3:5f:
                    af:79:eb:6b:05:75:ad:28:06:0e:c7:a9:1a:af:11:
                    3b:39:27:c9:d3:05:0a:09:d1:95:a9:9d:b6:bf:cd:
                    45:1c:29:68:5f:17:0d:27:e1:37:66:59:2b:2a:97:
                    99:54:f7:ff:db:8d:55:6b:bc:29:31:ab:83:ae:81:
                    ef:d9:a5:30:01:78:6b:73:dd:cf:7f:8f:75:7e:59:
                    31:89:b6:39:b8:db:41:3b:b8:37:85:14:df:e5:04:
                    86:54:f4:91:75:40:e8:fe:a7:d4:57:e3:d5:03:52:
                    ae:a7:d3:78:37:d4:fa:3a:49:7a:59:27:7a:03:0f:
                    17:a6:17:5a:2f:1b:ba:d8:87:de:e6:22:68:9f:bd:
                    b8:0d:5a:2a:4b:b1:03:13:bd:3d:4f:54:ad:a0:6a:
                    c8:80:49:82:32:8e:4e:86:fa:c6:df:47:82:71:97:
                    b1:56:49:79:3b:1b:f6:b0:97:e4:d0:6f:a5:33:9a:
                    fe:f3:ba:3e:25:6d:57:4b:fd:11:da:22:42:e1:2d:
                    4a:2b:af:42:83:4f:36:e8:a5:30:d7:33:55:af:84:
                    6a:ef:45:5b:6d:e0:04:1e:67:e3:fb:62:6d:b1:54:
                    ba:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FD:64:66:6A:91:8D:46:3D:38:EE:B1:10:91:7F:86:17:C8:9B:72
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:6f:d2:06:75:e5:45:02:c6:f0:bd:8c:0e:20:ea:3a:fd:7b:
         74:a0:43:1a:87:ed:29:1f:c9:21:eb:2a:60:02:b5:1f:82:db:
         e6:3b:35:96:64:c5:38:9a:ad:ae:f0:9a:3f:80:60:01:70:8b:
         a6:4c:38:43:25:54:33:bd:e6:ca:b4:5d:cd:88:79:c6:21:a9:
         31:b0:97:91:23:69:71:e2:ca:7b:7a:10:ad:39:63:0c:55:47:
         72:4c:59:a3:4c:54:d2:98:41:b3:f7:d0:44:1b:9b:10:e3:72:
         e0:2c:6f:c6:ef:e7:76:f5:5d:bc:20:1e:97:4b:fb:40:9d:16:
         d8:0c:df:7c:fd:64:c4:56:f9:e0:cc:95:5a:2e:2a:cd:d7:ec:
         9b:d8:86:5e:d8:71:09:fe:80:4e:8c:51:3b:45:e3:35:47:38:
         e5:21:eb:b7:bf:7b:01:9f:ac:74:a3:9f:8d:09:e1:91:7c:2a:
         26:f7:94:45:7f:ac:b5:30:d9:e1:29:8f:9e:b0:68:99:14:6b:
         41:05:53:fa:f2:bd:94:53:db:31:0e:d7:5d:41:19:af:7b:b8:
         86:ca:32:ff:84:6e:6f:9b:1b:22:fc:5a:ba:b0:2b:c6:62:bb:
         64:47:e5:f6:0e:b7:ad:72:d0:c6:b9:5a:7f:ea:a1:37:2a:24:
         67:6b:9a:02
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUdAfcXCZHfcyn0UEd3mvxw7lE3lMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMzAyMTAxNDAwMTdaFw0yNDAyMDkxNDA1MTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQ2NThBMTFGMjA2MTc1RDFB
MDdGOTYzMDEzMTRFNzEyOURBMTgzRUY5N0FDQ0JDRTExRTg5QzM1RkFGNzlFQjZC
MDU3NUFEMjgwNjBFQzdBOTFBQUYxMTNCMzkyN0M5RDMwNTBBMDlEMTk1QTk5REI2
QkZDRDQ1MUMyOTY4NUYxNzBEMjdFMTM3NjY1OTJCMkE5Nzk5NTRGN0ZGREI4RDU1
NkJCQzI5MzFBQjgzQUU4MUVGRDlBNTMwMDE3ODZCNzNERENGN0Y4Rjc1N0U1OTMx
ODlCNjM5QjhEQjQxM0JCODM3ODUxNERGRTUwNDg2NTRGNDkxNzU0MEU4RkVBN0Q0
NTdFM0Q1MDM1MkFFQTdEMzc4MzdENEZBM0E0OTdBNTkyNzdBMDMwRjE3QTYxNzVB
MkYxQkJBRDg4N0RFRTYyMjY4OUZCREI4MEQ1QTJBNEJCMTAzMTNCRDNENEY1NEFE
QTA2QUM4ODA0OTgyMzI4RTRFODZGQUM2REY0NzgyNzE5N0IxNTY0OTc5M0IxQkY2
QjA5N0U0RDA2RkE1MzM5QUZFRjNCQTNFMjU2RDU3NEJGRDExREEyMjQyRTEyRDRB
MkJBRjQyODM0RjM2RThBNTMwRDczMzU1QUY4NDZBRUY0NTVCNkRFMDA0MUU2N0Uz
RkI2MjZEQjE1NEJBMUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtGWKEfIGF10aB/ljATFOcSnaGD75esy84R6Jw1+veetrBXWtKAYO
x6karxE7OSfJ0wUKCdGVqZ22v81FHCloXxcNJ+E3ZlkrKpeZVPf/241Va7wpMauD
roHv2aUwAXhrc93Pf491flkxibY5uNtBO7g3hRTf5QSGVPSRdUDo/qfUV+PVA1Ku
p9N4N9T6Okl6WSd6Aw8XphdaLxu62Ife5iJon724DVoqS7EDE709T1StoGrIgEmC
Mo5OhvrG30eCcZexVkl5Oxv2sJfk0G+lM5r+87o+JW1XS/0R2iJC4S1KK69Cg082
6KUw1zNVr4Rq70VbbeAEHmfj+2JtsVS6GwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FFr9ZGZqkY1GPTjusRCRf4YXyJtyMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzQzMzJlMzIzMDMyMmUzMTMy
MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNzM3MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGPynwwDQYJKoZIhvcNAQELBQADggEBAJdv0gZ15UUCxvC9jA4g6jr9e3SgQxqH
7SkfySHrKmACtR+C2+Y7NZZkxTiara7wmj+AYAFwi6ZMOEMlVDO95sq0Xc2IecYh
qTGwl5EjaXHiynt6EK05YwxVR3JMWaNMVNKYQbP30EQbmxDjcuAsb8bv53b1Xbwg
HpdL+0CdFtgM33z9ZMRW+eDMlVouKs3X7JvYhl7YcQn+gE6MUTtF4zVHOOUh67e/
ewGfrHSjn40J4ZF8Kib3lEV/rLUw2eEpj56waJkUa0EFU/ryvZRT2zEO111BGa97
uIbKMv+Ebm+bGyL8WrqwK8Ziu2RH5fYOt61y0Ma5Wn/qoTcqJGdrmgI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org