Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131352e302f32342d3234203d3e20323632373733.roa
File:                     3136382e3233322e3131352e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          DhzgFTucquMPW/7vT/x9QT+bPddExCIrqF0ZstQhUvA=
Subject key identifier:   F2:A1:61:5F:58:A3:92:3B:F1:53:CD:88:74:B2:9D:49:4B:F8:DA:35
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       5470517CADF3FAE9D1B336CA9DB4F0399714DB93
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131352e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:18 +0000
ROA not before:           Tue 27 Sep 2022 19:14:18 +0000
ROA not after:            Tue 26 Sep 2023 19:19:18 +0000
asID:                     262773
IP address blocks:        168.232.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:70:51:7c:ad:f3:fa:e9:d1:b3:36:ca:9d:b4:f0:39:97:14:db:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:18 2022 GMT
            Not After : Sep 26 19:19:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:ac:56:3c:94:4e:0d:dd:3f:ea:91:f7:63:
                    d2:3b:73:14:77:9b:23:37:55:7b:ce:28:92:82:d8:
                    15:07:3c:32:d3:c5:09:48:57:d3:42:77:b0:a2:85:
                    73:db:5f:7e:dd:72:20:cb:a8:b8:e5:e1:65:78:c5:
                    5c:f9:b4:f6:d5:b2:16:5b:d1:01:ab:73:a3:4e:57:
                    06:c6:e3:82:3e:97:5c:91:df:80:1e:b0:a3:92:0e:
                    1a:90:cb:c6:31:4c:20:a3:0c:fe:1b:c5:9f:90:2c:
                    df:4c:f9:61:1f:3d:62:67:a6:21:30:29:2b:6a:b7:
                    5d:00:95:52:c3:c1:3c:7d:a7:4e:18:47:aa:e9:31:
                    a5:83:4e:be:69:05:ab:8c:89:88:65:21:bc:5e:a5:
                    65:3b:ac:c5:c4:19:d5:77:bc:4f:d5:bc:49:0b:f1:
                    8d:4c:75:7a:71:4b:f7:9f:eb:44:92:28:5a:57:e8:
                    df:62:f9:11:b1:4c:e9:3e:f6:d5:37:6c:86:19:75:
                    a5:f3:fd:b3:18:7a:f3:b2:fc:1b:ef:b1:91:d0:ba:
                    67:28:19:af:76:b0:20:e1:da:29:20:ca:32:22:54:
                    8e:10:ca:5e:18:a3:42:0b:64:97:70:3e:0c:db:b1:
                    b3:96:c7:84:2c:11:00:37:e8:ad:bb:e1:13:e3:26:
                    25:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A1:61:5F:58:A3:92:3B:F1:53:CD:88:74:B2:9D:49:4B:F8:DA:35
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3233322e3131352e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:0a:f1:38:83:50:08:3d:77:fe:ec:0f:3b:96:53:4f:d9:ff:
         98:d5:6d:4a:e2:3e:38:9e:36:15:60:3c:9f:54:a9:9d:7d:28:
         00:7b:60:94:c0:14:ed:1e:8c:86:6c:47:22:83:07:36:25:f3:
         3e:6c:37:6e:71:46:97:c7:a9:cd:26:28:1f:9f:4f:c7:92:fc:
         a2:35:c7:5c:51:11:46:8a:7b:95:83:4e:c5:e0:73:18:0e:3e:
         24:6c:02:92:6f:d5:be:85:d5:5f:c0:eb:4b:55:e0:e6:49:5b:
         ea:c5:07:bf:58:1d:17:6b:85:ff:9d:40:87:68:01:e5:c8:76:
         9c:5e:7f:6d:82:af:d9:3b:ad:07:82:1f:5a:b2:09:46:c6:9f:
         f5:a2:bc:24:74:cd:37:05:3f:fa:b1:4a:06:41:39:30:3a:9b:
         d5:4f:9e:75:15:dc:ff:d6:ba:bd:fe:9f:0a:39:b4:94:16:8c:
         f6:7b:fd:31:9e:49:a1:5a:59:c5:d4:75:79:11:db:12:a1:aa:
         b5:fe:87:f9:91:2a:f0:02:61:37:db:82:0d:a8:8a:d6:be:34:
         aa:ed:8a:a0:95:17:26:98:07:75:47:d0:42:56:c3:99:d6:65:
         f3:c5:a7:7f:0d:50:f4:a7:90:22:60:66:4f:5d:2e:77:23:7f:
         d9:b4:ca:c1
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUVHBRfK3z+unRszbKnbTwOZcU25MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA5MjcxOTE0MThaFw0yMzA5MjYxOTE5MThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjMxQUFDNTYzQzk0NEUwRERE
M0ZFQTkxRjc2M0QyM0I3MzE0Nzc5QjIzMzc1NTdCQ0UyODkyODJEODE1MDczQzMy
RDNDNTA5NDg1N0QzNDI3N0IwQTI4NTczREI1RjdFREQ3MjIwQ0JBOEI4RTVFMTY1
NzhDNTVDRjlCNEY2RDVCMjE2NUJEMTAxQUI3M0EzNEU1NzA2QzZFMzgyM0U5NzVD
OTFERjgwMUVCMEEzOTIwRTFBOTBDQkM2MzE0QzIwQTMwQ0ZFMUJDNTlGOTAyQ0RG
NENGOTYxMUYzRDYyNjdBNjIxMzAyOTJCNkFCNzVEMDA5NTUyQzNDMTNDN0RBNzRF
MTg0N0FBRTkzMUE1ODM0RUJFNjkwNUFCOEM4OTg4NjUyMUJDNUVBNTY1M0JBQ0M1
QzQxOUQ1NzdCQzRGRDVCQzQ5MEJGMThENEM3NTdBNzE0QkY3OUZFQjQ0OTIyODVB
NTdFOERGNjJGOTExQjE0Q0U5M0VGNkQ1Mzc2Qzg2MTk3NUE1RjNGREIzMTg3QUYz
QjJGQzFCRUZCMTkxRDBCQTY3MjgxOUFGNzZCMDIwRTFEQTI5MjBDQTMyMjI1NDhF
MTBDQTVFMThBMzQyMEI2NDk3NzAzRTBDREJCMUIzOTZDNzg0MkMxMTAwMzdFOEFE
QkJFMTEzRTMyNjI1MTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsxqsVjyUTg3dP+qR92PSO3MUd5sjN1V7ziiSgtgVBzwy08UJSFfT
QnewooVz219+3XIgy6i45eFleMVc+bT21bIWW9EBq3OjTlcGxuOCPpdckd+AHrCj
kg4akMvGMUwgowz+G8WfkCzfTPlhHz1iZ6YhMCkrarddAJVSw8E8fadOGEeq6TGl
g06+aQWrjImIZSG8XqVlO6zFxBnVd7xP1bxJC/GNTHV6cUv3n+tEkihaV+jfYvkR
sUzpPvbVN2yGGXWl8/2zGHrzsvwb77GR0LpnKBmvdrAg4dopIMoyIlSOEMpeGKNC
C2SXcD4M27GzlseELBEAN+itu+ET4yYlEwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FPKhYV9Yo5I78VPNiHSynUlL+No1MB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzYzODJlMzIzMzMyMmUzMTMx
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzNzM3MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACo6HMwDQYJKoZIhvcNAQELBQADggEBAI8K8TiDUAg9d/7sDzuWU0/Z/5jVbUri
PjieNhVgPJ9UqZ19KAB7YJTAFO0ejIZsRyKDBzYl8z5sN25xRpfHqc0mKB+fT8eS
/KI1x1xREUaKe5WDTsXgcxgOPiRsApJv1b6F1V/A60tV4OZJW+rFB79YHRdrhf+d
QIdoAeXIdpxef22Cr9k7rQeCH1qyCUbGn/WivCR0zTcFP/qxSgZBOTA6m9VPnnUV
3P/Wur3+nwo5tJQWjPZ7/TGeSaFaWcXUdXkR2xKhqrX+h/mRKvACYTfbgg2oita+
NKrtiqCVFyaYB3VH0EJWw5nWZfPFp38NUPSnkCJgZk9dLncjf9m0ysE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org