Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36382e302f32332d3233203d3e20323632373733.roa
File:                     3137372e3135322e36382e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          urXJcCzDDKfd42FD8MeUBOmaPJR2LrNQbyZe4cIZj1E=
Subject key identifier:   3D:3D:C0:7F:10:18:0C:BD:EA:7B:25:B5:F4:E3:E7:37:25:55:C9:C2
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       2EB8F95F03843368855E92D25C6C839EBF6731C3
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36382e302f32332d3233203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:02:54 +0000
ROA not before:           Tue 09 Aug 2022 13:57:54 +0000
ROA not after:            Tue 08 Aug 2023 14:02:54 +0000
asID:                     262773
IP address blocks:        177.152.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b8:f9:5f:03:84:33:68:85:5e:92:d2:5c:6c:83:9e:bf:67:31:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:57:54 2022 GMT
            Not After : Aug  8 14:02:54 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:ee:81:56:fa:4b:37:c3:c8:c1:7b:b3:bc:
                    16:1e:81:d3:ce:9d:2e:a2:12:de:a0:73:9d:09:4a:
                    c0:f6:a8:32:63:bb:e6:a6:22:bf:d1:46:3a:81:44:
                    e3:6a:d0:dd:70:f5:50:11:36:aa:da:fd:db:4d:07:
                    bd:dd:55:2b:c3:41:88:d5:19:65:1a:83:ef:b2:14:
                    c0:55:2f:7e:39:5b:d6:3f:31:80:6a:fa:b7:1f:32:
                    aa:cc:4f:30:27:b3:79:7d:f0:5c:9f:67:70:e6:81:
                    79:dc:ca:7e:0b:1f:82:04:be:cf:4f:79:91:a9:0a:
                    be:d1:58:7f:0e:85:6c:74:d0:06:16:0b:92:88:15:
                    f0:9c:79:af:94:bb:78:52:f9:7a:87:82:7f:57:bc:
                    51:6a:74:f8:2d:3e:96:85:f8:be:d0:2d:52:9d:ba:
                    61:ae:3d:9f:02:d1:c3:7c:e2:ee:b8:c6:99:da:cd:
                    bd:8d:d0:b8:0b:b3:fa:c7:eb:c0:2a:a0:a4:14:2e:
                    24:09:ac:60:58:38:85:83:85:ff:c9:6a:ef:49:c2:
                    d7:6a:90:81:7f:65:37:ea:40:a0:b9:91:de:46:c2:
                    a4:87:9c:a5:10:1c:1b:5b:7c:4a:9e:48:eb:50:d7:
                    96:e2:b1:d8:f3:d3:e3:a9:d5:8a:ff:52:7c:ba:56:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3D:C0:7F:10:18:0C:BD:EA:7B:25:B5:F4:E3:E7:37:25:55:C9:C2
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e36382e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:01:80:74:ce:bd:3b:55:5d:31:09:d8:e5:c8:be:1b:30:ec:
         b3:0a:44:57:f6:c0:fc:c2:8a:72:94:fc:0d:97:3f:40:86:f7:
         8b:fd:b6:ff:0a:68:39:c4:5d:f1:8c:a7:d8:21:55:e9:f4:02:
         ad:14:84:f7:3f:7e:d4:fe:9d:52:36:73:fd:84:27:22:e9:7a:
         d2:33:03:7a:1d:60:72:0a:30:52:db:35:f2:5e:8b:c4:8a:ef:
         6c:51:fa:73:6a:7b:69:4d:b0:dd:61:c0:9d:74:5c:c9:91:e5:
         bc:15:77:75:47:51:fc:24:8d:cd:25:9a:c4:aa:fb:23:ee:8d:
         2b:1c:c5:8b:10:8f:4b:1d:a4:79:c3:38:36:2d:00:6a:be:6b:
         58:32:a0:51:fc:1b:23:bd:ba:de:fa:fb:9e:a6:54:32:f4:45:
         21:61:c9:d1:a2:60:37:7a:89:7d:f1:c5:5d:ab:82:ae:51:d2:
         24:02:31:a2:dc:8c:1e:2c:3d:a0:ff:0d:1c:04:ef:3e:88:8b:
         9b:86:b5:5c:67:fe:b4:87:70:f8:62:b4:aa:0c:34:fa:de:05:
         08:ee:56:72:c6:dd:69:51:9a:ba:c2:3b:ad:0f:df:b7:9c:5a:
         9a:48:a0:56:f3:51:16:b9:01:35:4f:b9:0b:ef:9c:3e:bc:be:
         1e:79:7d:78
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIULrj5XwOEM2iFXpLSXGyDnr9nMcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA4MDkxMzU3NTRaFw0yMzA4MDgxNDAyNTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTkyQUVFODE1NkZBNEIzN0Mz
QzhDMTdCQjNCQzE2MUU4MUQzQ0U5RDJFQTIxMkRFQTA3MzlEMDk0QUMwRjZBODMy
NjNCQkU2QTYyMkJGRDE0NjNBODE0NEUzNkFEMERENzBGNTUwMTEzNkFBREFGRERC
NEQwN0JEREQ1NTJCQzM0MTg4RDUxOTY1MUE4M0VGQjIxNEMwNTUyRjdFMzk1QkQ2
M0YzMTgwNkFGQUI3MUYzMkFBQ0M0RjMwMjdCMzc5N0RGMDVDOUY2NzcwRTY4MTc5
RENDQTdFMEIxRjgyMDRCRUNGNEY3OTkxQTkwQUJFRDE1ODdGMEU4NTZDNzREMDA2
MTYwQjkyODgxNUYwOUM3OUFGOTRCQjc4NTJGOTdBODc4MjdGNTdCQzUxNkE3NEY4
MkQzRTk2ODVGOEJFRDAyRDUyOURCQTYxQUUzRDlGMDJEMUMzN0NFMkVFQjhDNjk5
REFDREJEOEREMEI4MEJCM0ZBQzdFQkMwMkFBMEE0MTQyRTI0MDlBQzYwNTgzODg1
ODM4NUZGQzk2QUVGNDlDMkQ3NkE5MDgxN0Y2NTM3RUE0MEEwQjk5MURFNDZDMkE0
ODc5Q0E1MTAxQzFCNUI3QzRBOUU0OEVCNTBENzk2RTJCMUQ4RjNEM0UzQTlENThB
RkY1MjdDQkE1Njc0MkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmSrugVb6SzfDyMF7s7wWHoHTzp0uohLeoHOdCUrA9qgyY7vmpiK/
0UY6gUTjatDdcPVQETaq2v3bTQe93VUrw0GI1RllGoPvshTAVS9+OVvWPzGAavq3
HzKqzE8wJ7N5ffBcn2dw5oF53Mp+Cx+CBL7PT3mRqQq+0Vh/DoVsdNAGFguSiBXw
nHmvlLt4Uvl6h4J/V7xRanT4LT6Whfi+0C1Snbphrj2fAtHDfOLuuMaZ2s29jdC4
C7P6x+vAKqCkFC4kCaxgWDiFg4X/yWrvScLXapCBf2U36kCguZHeRsKkh5ylEBwb
W3xKnkjrUNeW4rHY89PjqdWK/1J8ulZ0LQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FD09wH8QGAy96nsltfTj5zclVcnCMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzEzNTMyMmUzNjM4
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
sZhEMA0GCSqGSIb3DQEBCwUAA4IBAQBkAYB0zr07VV0xCdjlyL4bMOyzCkRX9sD8
wopylPwNlz9AhveL/bb/Cmg5xF3xjKfYIVXp9AKtFIT3P37U/p1SNnP9hCci6XrS
MwN6HWByCjBS2zXyXovEiu9sUfpzantpTbDdYcCddFzJkeW8FXd1R1H8JI3NJZrE
qvsj7o0rHMWLEI9LHaR5wzg2LQBqvmtYMqBR/Bsjvbre+vueplQy9EUhYcnRomA3
eol98cVdq4KuUdIkAjGi3IweLD2g/w0cBO8+iIubhrVcZ/60h3D4YrSqDDT63gUI
7lZyxt1pUZq6wjutD9+3nFqaSKBW81EWuQE1T7kL75w+vL4eeX14
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org