Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232322e302f32332d3233203d3e20323632373733.roa
File:                     3137302e3233312e3232322e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          UAJSngoQtLfZGMw9raZ7w/58TivC6CkM6k22E6Ykmd0=
Subject key identifier:   2A:94:28:DB:DB:12:2C:6D:F0:83:15:B8:A1:51:4B:4C:85:0E:91:65
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       021A718E03002EE64D1C1CF2AE8E002B7C584E1B
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232322e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 19 Mar 2024 21:53:52 +0000
ROA not before:           Tue 19 Mar 2024 21:48:52 +0000
ROA not after:            Tue 18 Mar 2025 21:53:52 +0000
asID:                     262773
IP address blocks:        170.231.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1a:71:8e:03:00:2e:e6:4d:1c:1c:f2:ae:8e:00:2b:7c:58:4e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Mar 19 21:48:52 2024 GMT
            Not After : Mar 18 21:53:52 2025 GMT
        Subject: CN=2A9428DBDB122C6DF08315B8A1514B4C850E9165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:69:3c:d7:26:63:29:88:e8:64:f3:80:ed:
                    a3:f4:83:bb:f9:15:cf:ab:e8:25:4f:de:14:eb:39:
                    a3:2b:61:1a:e7:0b:57:8d:e1:ea:fd:ee:c8:04:40:
                    07:90:ca:f2:10:0b:cb:de:05:8b:d7:ab:13:b9:63:
                    ca:76:e4:c8:10:00:00:c9:9b:02:7b:2b:38:a7:3f:
                    53:9c:ac:de:71:ab:3c:97:15:78:77:3a:76:77:89:
                    f2:84:6f:38:0a:90:26:95:39:02:3f:30:d9:ad:1f:
                    16:a9:e1:d5:31:d1:de:d5:0c:66:08:c4:fb:c6:cc:
                    23:36:90:38:e4:48:16:60:f7:4f:01:94:fa:7a:d1:
                    8c:79:ce:c4:54:d9:b4:35:a4:0a:63:0f:7d:d9:01:
                    03:2f:f0:3f:62:2e:ef:7b:84:a7:c3:1b:b9:e0:7c:
                    c8:15:17:e6:4d:66:00:31:f0:d2:ad:25:6f:08:33:
                    e3:7b:bd:33:62:61:03:cc:a1:03:10:e8:31:8c:d2:
                    d8:86:5b:a2:5b:b2:e4:85:39:01:89:37:e9:60:b3:
                    a5:18:1f:56:c0:86:52:2e:c6:a7:51:d1:8b:48:8a:
                    be:97:1a:b5:a9:55:42:fe:bd:a5:b6:d1:63:fe:16:
                    bc:54:03:81:c8:73:3d:e6:ae:14:8e:ba:e7:4a:71:
                    84:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:94:28:DB:DB:12:2C:6D:F0:83:15:B8:A1:51:4B:4C:85:0E:91:65
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137302e3233312e3232322e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:7e:94:0d:2a:cc:c7:36:c4:d9:41:b8:4a:10:c1:48:ca:0f:
         1d:ca:d0:85:99:1b:4c:3c:f5:40:b3:0c:b7:31:c1:bd:53:85:
         dd:a0:dc:c6:97:6a:d8:09:02:57:c6:cd:d9:fa:99:f7:b0:fb:
         e4:6b:d0:0e:e9:51:35:ed:2e:d0:7c:5d:50:03:0f:ec:f1:32:
         8a:74:7d:f0:54:01:21:90:23:45:1b:54:0e:48:95:3b:57:a2:
         9e:a0:ce:b0:9b:68:06:fa:17:6b:62:cf:76:9c:30:dc:73:e0:
         5e:8f:da:49:3a:ae:40:8f:1e:32:93:53:d0:92:2d:7c:78:7c:
         29:77:a5:38:13:72:8e:69:73:9f:f7:98:22:14:10:3c:a1:f0:
         d8:d9:0f:8f:5c:6a:c7:d0:7b:82:13:ce:71:8f:a5:b7:98:1b:
         eb:10:28:15:f7:3b:fe:04:7c:5b:cb:49:a9:18:fc:b0:6c:34:
         3d:02:ef:97:8b:24:5f:43:65:a4:97:51:44:24:4b:4c:62:bd:
         f4:d3:5b:b7:dd:38:7c:9a:40:2b:a9:81:ae:1a:7b:96:1e:37:
         c5:8a:c2:b0:d5:b4:15:04:5d:a7:93:25:a3:14:34:3d:02:fe:
         30:70:d0:9b:df:2a:1f:2a:89:f9:e4:9b:2d:20:29:3f:70:87:
         bf:cd:1a:54
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAhpxjgMALuZNHBzyro4AK3xYThswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yNDAzMTkyMTQ4NTJaFw0yNTAzMTgyMTUzNTJaMDMxMTAvBgNV
BAMTKDJBOTQyOERCREIxMjJDNkRGMDgzMTVCOEExNTE0QjRDODUwRTkxNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCibWk81yZjKYjoZPOA7aP0g7v5
Fc+r6CVP3hTrOaMrYRrnC1eN4er97sgEQAeQyvIQC8veBYvXqxO5Y8p25MgQAADJ
mwJ7KzinP1OcrN5xqzyXFXh3OnZ3ifKEbzgKkCaVOQI/MNmtHxap4dUx0d7VDGYI
xPvGzCM2kDjkSBZg908BlPp60Yx5zsRU2bQ1pApjD33ZAQMv8D9iLu97hKfDG7ng
fMgVF+ZNZgAx8NKtJW8IM+N7vTNiYQPMoQMQ6DGM0tiGW6JbsuSFOQGJN+lgs6UY
H1bAhlIuxqdR0YtIir6XGrWpVUL+vaW20WP+FrxUA4HIcz3mrhSOuudKcYQnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKpQo29sSLG3wgxW4oVFLTIUOkWUwHwYDVR0j
BBgwFoAUE7sppLhL32bqQBmHuHBIt0hPSIgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0ODg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzQkIyOUE0Qjg0QkRGNjZF
QTQwMTk4N0I4NzA0OEI3NDg0RjQ4ODguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAv
MzEzNzMwMmUzMjMzMzEyZTMyMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarn3jANBgkqhkiG9w0BAQsFAAOCAQEAC36U
DSrMxzbE2UG4ShDBSMoPHcrQhZkbTDz1QLMMtzHBvVOF3aDcxpdq2AkCV8bN2fqZ
97D75GvQDulRNe0u0HxdUAMP7PEyinR98FQBIZAjRRtUDkiVO1einqDOsJtoBvoX
a2LPdpww3HPgXo/aSTquQI8eMpNT0JItfHh8KXelOBNyjmlzn/eYIhQQPKHw2NkP
j1xqx9B7ghPOcY+lt5gb6xAoFfc7/gR8W8tJqRj8sGw0PQLvl4skX0NlpJdRRCRL
TGK99NNbt904fJpAK6mBrhp7lh43xYrCsNW0FQRdp5MloxQ0PQL+MHDQm98qHyqJ
+eSbLSApP3CHv80aVA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org