Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132372e302f32342d3234203d3e203532353638.roa
File:                     3134332e3230322e3132372e302f32342d3234203d3e203532353638.roa (raw, json)
Hash identifier:          Ahs060Vg52A9X7ydIEr7fhqw3wh7Y5xbHk1+4+lj8f0=
Subject key identifier:   53:9E:4C:3B:EA:47:39:58:26:8C:EF:41:80:47:7E:65:29:25:BC:6F
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       01088F0B11CF345098AA82E02D79A64BA1BC4B50
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132372e302f32342d3234203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:12 +0000
ROA not before:           Tue 07 Feb 2023 19:59:12 +0000
ROA not after:            Tue 06 Feb 2024 20:04:12 +0000
asID:                     52568
IP address blocks:        143.202.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:08:8f:0b:11:cf:34:50:98:aa:82:e0:2d:79:a6:4b:a1:bc:4b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:12 2023 GMT
            Not After : Feb  6 20:04:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:80:d6:e1:94:18:d2:a4:f6:a7:1b:64:57:
                    14:12:c4:b1:1c:4b:76:09:a6:d5:20:b0:3c:3b:0c:
                    18:42:d3:ea:9d:a3:23:ba:1b:75:75:9d:a5:d2:7c:
                    21:5e:c6:52:a2:37:20:e1:a2:1d:e6:ba:3a:18:2f:
                    96:c5:8b:10:e8:47:96:b4:52:9f:ad:2a:17:ed:36:
                    6f:e9:95:d3:42:e9:3e:4c:08:b9:04:95:0b:99:46:
                    13:7a:50:ca:8e:79:67:9e:07:2f:e4:0e:95:c7:37:
                    ef:21:53:a8:7f:e1:2f:2e:99:34:e3:60:9a:de:fa:
                    69:4e:95:97:89:15:84:25:a7:91:d3:94:18:b1:b0:
                    cb:a6:d3:3d:96:d1:46:8f:8f:34:83:55:9e:7f:e7:
                    64:31:55:92:e6:4f:71:2e:07:b2:e4:20:a4:c4:58:
                    76:45:c1:fb:76:d2:ca:07:ed:bf:e1:91:13:6e:b5:
                    c1:0d:14:f1:73:dd:19:a3:35:29:96:0b:bb:3b:cf:
                    0a:43:b1:26:5d:86:89:f4:73:2b:ba:8f:71:38:d8:
                    07:2c:46:f6:ed:fc:b9:32:73:9c:34:b9:e9:65:1a:
                    c0:88:59:23:43:7e:94:72:06:e5:91:fb:a9:fc:d2:
                    7d:c8:8f:ed:71:34:fc:21:30:95:e6:b3:42:59:fc:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9E:4C:3B:EA:47:39:58:26:8C:EF:41:80:47:7E:65:29:25:BC:6F
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132372e302f32342d3234203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:6b:4f:1b:fe:41:d0:a0:db:80:00:d8:36:bf:de:a6:d8:df:
         e8:d5:8f:62:ce:c8:a5:18:2b:1d:3a:6d:54:e1:64:6c:6f:92:
         54:19:7a:67:0e:ba:79:0a:5a:da:65:e9:c1:89:8f:1f:f3:5b:
         ce:c7:21:ab:f8:10:96:11:73:c5:99:e9:04:02:72:52:29:17:
         15:36:17:62:a8:78:10:a0:cb:ce:80:66:e5:08:26:f9:d5:59:
         73:73:ba:90:d6:35:a4:61:58:fe:da:4f:eb:f5:81:46:54:2f:
         80:f4:32:1e:28:6f:ff:47:3b:ef:b6:80:c8:f8:7c:c4:f5:48:
         e4:d9:d0:0f:cd:36:d9:3f:63:12:72:2b:02:2a:e1:48:ff:8d:
         9e:42:b2:fd:f9:98:52:cd:89:ad:e3:b1:23:f2:a8:68:73:17:
         a2:96:c9:e9:7e:a4:8a:1b:8b:e3:ea:40:ef:d0:b3:3f:21:7a:
         ed:87:7b:5b:c2:63:17:f2:05:b3:93:77:1a:79:9b:bb:32:6c:
         06:0a:ab:04:2e:ad:4e:79:8b:54:64:e7:f3:a6:5d:44:47:c2:
         3f:9d:ae:30:cf:45:b5:db:ef:5b:c8:7c:60:15:ea:36:a0:6f:
         46:0d:b9:d8:76:4b:29:02:d9:4d:8d:05:8c:ed:fa:7a:4c:0e:
         6c:6d:c0:ef
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUAQiPCxHPNFCYqoLgLXmmS6G8S1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMzAyMDcxOTU5MTJaFw0yNDAyMDYyMDA0MTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQ5QzgwRDZFMTk0MThEMkE0
RjZBNzFCNjQ1NzE0MTJDNEIxMUM0Qjc2MDlBNkQ1MjBCMDNDM0IwQzE4NDJEM0VB
OURBMzIzQkExQjc1NzU5REE1RDI3QzIxNUVDNjUyQTIzNzIwRTFBMjFERTZCQTNB
MTgyRjk2QzU4QjEwRTg0Nzk2QjQ1MjlGQUQyQTE3RUQzNjZGRTk5NUQzNDJFOTNF
NEMwOEI5MDQ5NTBCOTk0NjEzN0E1MENBOEU3OTY3OUUwNzJGRTQwRTk1QzczN0VG
MjE1M0E4N0ZFMTJGMkU5OTM0RTM2MDlBREVGQTY5NEU5NTk3ODkxNTg0MjVBNzkx
RDM5NDE4QjFCMENCQTZEMzNEOTZEMTQ2OEY4RjM0ODM1NTlFN0ZFNzY0MzE1NTky
RTY0RjcxMkUwN0IyRTQyMEE0QzQ1ODc2NDVDMUZCNzZEMkNBMDdFREJGRTE5MTEz
NkVCNUMxMEQxNEYxNzNERDE5QTMzNTI5OTYwQkJCM0JDRjBBNDNCMTI2NUQ4Njg5
RjQ3MzJCQkE4RjcxMzhEODA3MkM0NkY2RURGQ0I5MzI3MzlDMzRCOUU5NjUxQUMw
ODg1OTIzNDM3RTk0NzIwNkU1OTFGQkE5RkNEMjdEQzg4RkVENzEzNEZDMjEzMDk1
RTZCMzQyNTlGQ0JEQkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtJyA1uGUGNKk9qcbZFcUEsSxHEt2CabVILA8OwwYQtPqnaMjuht1
dZ2l0nwhXsZSojcg4aId5ro6GC+WxYsQ6EeWtFKfrSoX7TZv6ZXTQuk+TAi5BJUL
mUYTelDKjnlnngcv5A6VxzfvIVOof+EvLpk042Ca3vppTpWXiRWEJaeR05QYsbDL
ptM9ltFGj480g1Wef+dkMVWS5k9xLgey5CCkxFh2RcH7dtLKB+2/4ZETbrXBDRTx
c90ZozUplgu7O88KQ7EmXYaJ9HMruo9xONgHLEb27fy5MnOcNLnpZRrAiFkjQ36U
cgblkfup/NJ9yI/tcTT8ITCV5rNCWfy9vQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFOeTDvqRzlYJozvQYBHfmUpJbxvMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzQzMzJlMzIzMDMyMmUzMTMy
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
j8p/MA0GCSqGSIb3DQEBCwUAA4IBAQB7a08b/kHQoNuAANg2v96m2N/o1Y9izsil
GCsdOm1U4WRsb5JUGXpnDrp5ClraZenBiY8f81vOxyGr+BCWEXPFmekEAnJSKRcV
NhdiqHgQoMvOgGblCCb51Vlzc7qQ1jWkYVj+2k/r9YFGVC+A9DIeKG//RzvvtoDI
+HzE9Ujk2dAPzTbZP2MScisCKuFI/42eQrL9+ZhSzYmt47Ej8qhocxeilsnpfqSK
G4vj6kDv0LM/IXrth3tbwmMX8gWzk3caeZu7MmwGCqsELq1OeYtUZOfzpl1ER8I/
na4wz0W12+9byHxgFeo2oG9GDbnYdkspAtlNjQWM7fp6TA5sbcDv
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org