Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32332d3233203d3e203532353638.roa
File:                     3134332e3230322e3132342e302f32332d3233203d3e203532353638.roa (raw, json)
Hash identifier:          3P9Qfz72RWVuRoqgLvRa+XicMeevxmpdbwMOEWdtHgY=
Subject key identifier:   DA:FE:42:F9:83:90:A0:18:67:45:25:88:62:05:3B:B7:85:1E:DA:A3
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       2DBB844939E833A98F92E376D79688CC4742E2F5
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32332d3233203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:10 +0000
ROA not before:           Tue 07 Feb 2023 19:59:10 +0000
ROA not after:            Tue 06 Feb 2024 20:04:10 +0000
asID:                     52568
IP address blocks:        143.202.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bb:84:49:39:e8:33:a9:8f:92:e3:76:d7:96:88:cc:47:42:e2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:10 2023 GMT
            Not After : Feb  6 20:04:10 2024 GMT
        Subject: CN=3082010A0282010100ADF8A24706249D3FBBE1F29DC1633651F88945ACFBE75BDA44FF82AC2C46BF2388105AFE49D42F711F7861AD104EE0A20E59C905BDA78A5AB3EF35356A605AC5B32A260B339B955DC8380B8EB1A0B9986E3FAF3642ECB1CA9BE62610DE5FA53ADCDD095C005B9F95CD4B0D82802FF9C97F242281E6544F91B9AEB14D4417A7F9B8FEEBB771C8F0329644A9DE5A0014E392D41BC93A43F3F8AD226809D3F2BFB455A372E5F4D136F7E9246429A68BEBC70ADE2A2506A3BFA329F6F0ADE2EB1FD56ADBAAC8D0840C000AD7AE866266AF722E6D33C4A70B0C0B0A8AC251A08E02E3CA7C6A71AD49510729CEC840179A44FBA8933EDA24BA2CE60B4212996A540DFD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:a2:47:06:24:9d:3f:bb:e1:f2:9d:c1:63:
                    36:51:f8:89:45:ac:fb:e7:5b:da:44:ff:82:ac:2c:
                    46:bf:23:88:10:5a:fe:49:d4:2f:71:1f:78:61:ad:
                    10:4e:e0:a2:0e:59:c9:05:bd:a7:8a:5a:b3:ef:35:
                    35:6a:60:5a:c5:b3:2a:26:0b:33:9b:95:5d:c8:38:
                    0b:8e:b1:a0:b9:98:6e:3f:af:36:42:ec:b1:ca:9b:
                    e6:26:10:de:5f:a5:3a:dc:dd:09:5c:00:5b:9f:95:
                    cd:4b:0d:82:80:2f:f9:c9:7f:24:22:81:e6:54:4f:
                    91:b9:ae:b1:4d:44:17:a7:f9:b8:fe:eb:b7:71:c8:
                    f0:32:96:44:a9:de:5a:00:14:e3:92:d4:1b:c9:3a:
                    43:f3:f8:ad:22:68:09:d3:f2:bf:b4:55:a3:72:e5:
                    f4:d1:36:f7:e9:24:64:29:a6:8b:eb:c7:0a:de:2a:
                    25:06:a3:bf:a3:29:f6:f0:ad:e2:eb:1f:d5:6a:db:
                    aa:c8:d0:84:0c:00:0a:d7:ae:86:62:66:af:72:2e:
                    6d:33:c4:a7:0b:0c:0b:0a:8a:c2:51:a0:8e:02:e3:
                    ca:7c:6a:71:ad:49:51:07:29:ce:c8:40:17:9a:44:
                    fb:a8:93:3e:da:24:ba:2c:e6:0b:42:12:99:6a:54:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FE:42:F9:83:90:A0:18:67:45:25:88:62:05:3B:B7:85:1E:DA:A3
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132342e302f32332d3233203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:eb:d3:c8:9e:a9:0b:b8:5d:14:53:be:4b:58:a8:87:b4:
         26:a4:aa:39:30:17:8d:85:5f:ec:0d:b4:af:37:2e:17:c6:85:
         0c:61:27:de:ed:a9:a9:51:6b:c0:9d:2c:ad:73:e0:9c:41:3d:
         7c:2d:66:45:bd:a0:5a:f0:d7:be:11:dd:39:d2:9a:9f:29:83:
         77:cb:04:81:2d:d2:d8:b6:fd:85:c2:56:be:2a:a0:9c:d8:79:
         38:ef:88:67:0b:ba:3f:65:92:f6:ae:14:a7:8d:75:39:b8:de:
         7e:e4:e6:be:b2:17:3e:60:fb:e5:a7:e1:22:28:81:5b:ec:81:
         de:1a:08:b7:02:ac:df:ce:7c:99:6c:46:4c:f4:59:e0:52:a9:
         b4:81:e9:57:78:2b:2e:b8:b5:95:3b:e4:fe:da:13:02:63:b3:
         db:d2:9e:de:8e:e2:6b:3d:3f:64:2d:1d:9a:21:63:80:ad:94:
         6b:3f:1b:0b:46:2e:67:c6:53:2a:bb:da:c3:01:95:fd:60:d6:
         3b:a9:c9:a8:45:51:22:a9:1a:1a:87:b6:d3:73:93:17:27:aa:
         6b:17:74:08:87:19:87:09:f5:52:57:06:54:53:0c:ff:da:cf:
         6b:62:da:8f:dd:81:e4:93:1b:2c:b9:7d:ea:d7:2e:b8:e3:29:
         74:c3:0a:34
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIULbuESTnoM6mPkuN215aIzEdC4vUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMzAyMDcxOTU5MTBaFw0yNDAyMDYyMDA0MTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQURGOEEyNDcwNjI0OUQzRkJC
RTFGMjlEQzE2MzM2NTFGODg5NDVBQ0ZCRTc1QkRBNDRGRjgyQUMyQzQ2QkYyMzg4
MTA1QUZFNDlENDJGNzExRjc4NjFBRDEwNEVFMEEyMEU1OUM5MDVCREE3OEE1QUIz
RUYzNTM1NkE2MDVBQzVCMzJBMjYwQjMzOUI5NTVEQzgzODBCOEVCMUEwQjk5ODZF
M0ZBRjM2NDJFQ0IxQ0E5QkU2MjYxMERFNUZBNTNBRENERDA5NUMwMDVCOUY5NUNE
NEIwRDgyODAyRkY5Qzk3RjI0MjI4MUU2NTQ0RjkxQjlBRUIxNEQ0NDE3QTdGOUI4
RkVFQkI3NzFDOEYwMzI5NjQ0QTlERTVBMDAxNEUzOTJENDFCQzkzQTQzRjNGOEFE
MjI2ODA5RDNGMkJGQjQ1NUEzNzJFNUY0RDEzNkY3RTkyNDY0MjlBNjhCRUJDNzBB
REUyQTI1MDZBM0JGQTMyOUY2RjBBREUyRUIxRkQ1NkFEQkFBQzhEMDg0MEMwMDBB
RDdBRTg2NjI2NkFGNzIyRTZEMzNDNEE3MEIwQzBCMEE4QUMyNTFBMDhFMDJFM0NB
N0M2QTcxQUQ0OTUxMDcyOUNFQzg0MDE3OUE0NEZCQTg5MzNFREEyNEJBMkNFNjBC
NDIxMjk5NkE1NDBERkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArfiiRwYknT+74fKdwWM2UfiJRaz751vaRP+CrCxGvyOIEFr+SdQv
cR94Ya0QTuCiDlnJBb2nilqz7zU1amBaxbMqJgszm5VdyDgLjrGguZhuP682Quyx
ypvmJhDeX6U63N0JXABbn5XNSw2CgC/5yX8kIoHmVE+Rua6xTUQXp/m4/uu3ccjw
MpZEqd5aABTjktQbyTpD8/itImgJ0/K/tFWjcuX00Tb36SRkKaaL68cK3iolBqO/
oyn28K3i6x/VatuqyNCEDAAK166GYmavci5tM8SnCwwLCorCUaCOAuPKfGpxrUlR
BynOyEAXmkT7qJM+2iS6LOYLQhKZalQN/QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNr+QvmDkKAYZ0UliGIFO7eFHtqjMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzQzMzJlMzIzMDMyMmUzMTMy
MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMyMzUzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
j8p8MA0GCSqGSIb3DQEBCwUAA4IBAQAi6evTyJ6pC7hdFFO+S1ioh7QmpKo5MBeN
hV/sDbSvNy4XxoUMYSfe7ampUWvAnSytc+CcQT18LWZFvaBa8Ne+Ed050pqfKYN3
ywSBLdLYtv2Fwla+KqCc2Hk474hnC7o/ZZL2rhSnjXU5uN5+5Oa+shc+YPvlp+Ei
KIFb7IHeGgi3AqzfznyZbEZM9FngUqm0gelXeCsuuLWVO+T+2hMCY7Pb0p7ejuJr
PT9kLR2aIWOArZRrPxsLRi5nxlMqu9rDAZX9YNY7qcmoRVEiqRoah7bTc5MXJ6pr
F3QIhxmHCfVSVwZUUwz/2s9rYtqP3YHkkxssuX3q1y644yl0wwo0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org