Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37322e302f32322d3232203d3e20323632373733.roa
File:                     3137372e3135322e37322e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          zR/yAkoR5lbrcA80CoGWfEUGLw4UFtx84p7KcFNUdSA=
Subject key identifier:   ED:AD:6A:B3:1F:1D:F5:CA:56:7C:EF:68:2F:C9:1B:98:1D:1A:84:4E
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       7790020DEB46DC02253268F5BAA457E090075BB0
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37322e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:03:06 +0000
ROA not before:           Tue 09 Aug 2022 13:58:06 +0000
ROA not after:            Tue 08 Aug 2023 14:03:06 +0000
asID:                     262773
IP address blocks:        177.152.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:90:02:0d:eb:46:dc:02:25:32:68:f5:ba:a4:57:e0:90:07:5b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:58:06 2022 GMT
            Not After : Aug  8 14:03:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5d:05:14:44:7f:02:dc:d8:8b:1f:79:0d:6e:
                    5f:8e:6a:a5:28:5f:ed:91:7d:8f:45:ef:68:00:14:
                    0c:19:5e:f8:d2:82:67:3a:73:a5:ce:cb:48:27:fc:
                    6f:04:b7:a2:5d:13:1a:73:3b:28:85:a8:79:3f:35:
                    2e:67:78:2b:fd:d2:7a:1e:ed:38:24:57:d2:6b:e7:
                    70:5b:49:51:dc:67:61:c7:f0:c1:0a:83:92:36:e3:
                    06:7c:22:94:f0:f0:68:e5:01:9a:b1:1c:60:2c:bf:
                    13:4d:1e:9d:e6:22:cb:5a:05:f0:f3:16:d6:32:49:
                    54:6c:0e:3e:3b:77:38:58:b9:e3:19:30:73:75:5a:
                    18:3f:05:49:68:b4:e3:10:84:8a:05:25:aa:01:a6:
                    46:40:5c:84:0e:58:2b:ba:ab:c1:26:9e:00:2c:17:
                    81:8a:e7:ab:b8:f5:57:d1:b9:63:82:85:00:a6:90:
                    d1:af:ce:57:61:6a:9c:32:ec:46:89:1b:d4:f7:e9:
                    83:bf:81:a1:14:67:4a:a3:bb:a2:34:53:8c:11:11:
                    fc:98:a9:d7:c1:a6:b1:aa:fc:d3:22:bc:ad:49:38:
                    74:18:87:da:c8:cd:be:57:de:78:d6:d2:6d:35:5f:
                    97:f9:c4:8e:04:25:af:d8:96:99:41:ad:ab:0b:1b:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AD:6A:B3:1F:1D:F5:CA:56:7C:EF:68:2F:C9:1B:98:1D:1A:84:4E
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37322e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:3c:41:da:59:c4:6d:8a:f8:f2:fa:fc:5a:f7:23:b7:23:ca:
         b2:29:22:eb:08:7b:78:50:0b:0a:77:4e:31:5d:59:e3:96:d6:
         78:a3:1c:65:ca:32:f7:a9:4f:e1:bd:07:2c:e6:6f:3f:59:fe:
         12:ec:25:6b:f3:09:b0:6b:46:32:69:c0:67:4d:aa:aa:3d:af:
         ce:d8:18:17:9e:ef:64:89:f5:b7:56:4d:2e:04:f9:2a:7b:87:
         17:ba:83:22:ea:88:64:33:65:2a:b2:f0:5a:69:f3:53:fb:ca:
         71:bc:1d:c7:d1:9a:14:a9:45:ee:97:9e:8b:7b:b8:fd:05:9f:
         ef:f4:98:5f:dc:f1:19:cd:4d:ce:d2:91:ee:2f:60:f5:fa:67:
         4b:1a:d2:a0:75:50:03:7b:82:54:c2:09:c7:a0:12:86:7c:40:
         8f:b1:b0:7b:10:7e:07:99:28:92:89:92:49:9b:4c:6e:2b:da:
         ad:e5:ad:19:a3:db:b0:67:aa:82:26:2a:66:da:67:75:85:56:
         0f:70:7e:32:5d:4c:62:0c:0a:6b:d6:5a:1c:a5:6e:7b:9b:c8:
         67:ba:3f:86:5c:34:a2:78:08:87:ca:81:bd:78:60:90:0c:cd:
         ba:fd:a6:6b:54:d1:93:ff:1a:4d:93:04:42:dd:36:4e:83:ea:
         8f:45:bd:c8
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUd5ACDetG3AIlMmj1uqRX4JAHW7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA4MDkxMzU4MDZaFw0yMzA4MDgxNDAzMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDc1RDA1MTQ0NDdGMDJEQ0Q4
OEIxRjc5MEQ2RTVGOEU2QUE1Mjg1RkVEOTE3RDhGNDVFRjY4MDAxNDBDMTk1RUY4
RDI4MjY3M0E3M0E1Q0VDQjQ4MjdGQzZGMDRCN0EyNUQxMzFBNzMzQjI4ODVBODc5
M0YzNTJFNjc3ODJCRkREMjdBMUVFRDM4MjQ1N0QyNkJFNzcwNUI0OTUxREM2NzYx
QzdGMEMxMEE4MzkyMzZFMzA2N0MyMjk0RjBGMDY4RTUwMTlBQjExQzYwMkNCRjEz
NEQxRTlERTYyMkNCNUEwNUYwRjMxNkQ2MzI0OTU0NkMwRTNFM0I3NzM4NThCOUUz
MTkzMDczNzU1QTE4M0YwNTQ5NjhCNEUzMTA4NDhBMDUyNUFBMDFBNjQ2NDA1Qzg0
MEU1ODJCQkFBQkMxMjY5RTAwMkMxNzgxOEFFN0FCQjhGNTU3RDFCOTYzODI4NTAw
QTY5MEQxQUZDRTU3NjE2QTlDMzJFQzQ2ODkxQkQ0RjdFOTgzQkY4MUExMTQ2NzRB
QTNCQkEyMzQ1MzhDMTExMUZDOThBOUQ3QzFBNkIxQUFGQ0QzMjJCQ0FENDkzODc0
MTg4N0RBQzhDREJFNTdERTc4RDZEMjZEMzU1Rjk3RjlDNDhFMDQyNUFGRDg5Njk5
NDFBREFCMEIxQjBCNUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA110FFER/AtzYix95DW5fjmqlKF/tkX2PRe9oABQMGV740oJnOnOl
zstIJ/xvBLeiXRMaczsohah5PzUuZ3gr/dJ6Hu04JFfSa+dwW0lR3Gdhx/DBCoOS
NuMGfCKU8PBo5QGasRxgLL8TTR6d5iLLWgXw8xbWMklUbA4+O3c4WLnjGTBzdVoY
PwVJaLTjEISKBSWqAaZGQFyEDlgruqvBJp4ALBeBiueruPVX0bljgoUAppDRr85X
YWqcMuxGiRvU9+mDv4GhFGdKo7uiNFOMERH8mKnXwaaxqvzTIrytSTh0GIfayM2+
V9541tJtNV+X+cSOBCWv2JaZQa2rCxsLXwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FO2tarMfHfXKVnzvaC/JG5gdGoROMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzEzNTMyMmUzNzMy
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
sZhIMA0GCSqGSIb3DQEBCwUAA4IBAQCGPEHaWcRtivjy+vxa9yO3I8qyKSLrCHt4
UAsKd04xXVnjltZ4oxxlyjL3qU/hvQcs5m8/Wf4S7CVr8wmwa0YyacBnTaqqPa/O
2BgXnu9kifW3Vk0uBPkqe4cXuoMi6ohkM2UqsvBaafNT+8pxvB3H0ZoUqUXul56L
e7j9BZ/v9Jhf3PEZzU3O0pHuL2D1+mdLGtKgdVADe4JUwgnHoBKGfECPsbB7EH4H
mSiSiZJJm0xuK9qt5a0Zo9uwZ6qCJipm2md1hVYPcH4yXUxiDApr1locpW57m8hn
uj+GXDSieAiHyoG9eGCQDM26/aZrVNGT/xpNkwRC3TZOg+qPRb3I
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org