Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37322e302f32342d3234203d3e20323632373733.roa
File:                     3137372e3135322e37322e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          njcjfmj7WpRkr1EpLTqokVENG3iqZRyTiidREOFydo0=
Subject key identifier:   28:AC:10:F7:C0:C2:B9:BC:1B:1B:2F:67:9C:1D:97:B2:E1:9D:06:69
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       67BAAF8DCA192E0AA52CA26F4A54EC32E890E2C5
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37322e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:03:05 +0000
ROA not before:           Tue 09 Aug 2022 13:58:05 +0000
ROA not after:            Tue 08 Aug 2023 14:03:05 +0000
asID:                     262773
IP address blocks:        177.152.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ba:af:8d:ca:19:2e:0a:a5:2c:a2:6f:4a:54:ec:32:e8:90:e2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:58:05 2022 GMT
            Not After : Aug  8 14:03:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f3:52:d8:69:8c:af:93:e6:22:a9:e4:9a:fc:
                    d8:b9:cf:19:f8:ab:da:ad:41:9d:64:08:f3:b9:c2:
                    bc:7f:28:61:5c:2b:67:7c:f1:98:93:74:a5:cb:4f:
                    88:79:50:3b:4b:58:b3:de:d0:98:21:ec:f6:c0:e6:
                    80:c1:b9:a9:b4:7a:21:af:15:f9:d5:6d:3f:d0:be:
                    8c:fc:3a:2f:93:9b:2a:1f:40:8e:17:5b:c2:60:9d:
                    14:cc:54:46:a9:c7:a4:60:ae:4c:ba:9b:04:d1:f1:
                    3d:ca:96:49:0d:85:4a:70:be:dd:c4:74:2c:a0:1b:
                    73:63:1c:6a:08:02:d0:21:18:2a:24:ef:9b:e5:ca:
                    1f:23:46:7a:6e:89:55:2f:5c:f4:74:d2:c7:7b:4a:
                    81:be:9b:33:67:f5:15:d6:39:47:d0:c3:95:25:b4:
                    e5:c3:35:33:b6:c9:9b:34:64:13:0b:fe:4c:83:07:
                    6e:ad:ee:bf:8e:82:2c:85:77:86:6c:58:b2:90:18:
                    f6:4f:9e:9a:aa:bb:c5:0b:97:1c:2e:d2:ce:9e:19:
                    37:16:c7:6b:73:93:ee:30:d7:d5:d4:00:f4:a2:e0:
                    61:67:d8:39:51:fd:5f:ad:9c:61:39:6b:68:d5:ac:
                    8a:cb:10:26:d6:43:03:c8:0f:8a:83:a8:73:ba:f7:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AC:10:F7:C0:C2:B9:BC:1B:1B:2F:67:9C:1D:97:B2:E1:9D:06:69
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37322e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:ec:aa:d6:59:a9:cd:ba:da:4f:f0:d3:bf:73:df:00:10:ad:
         30:3d:d3:fe:d4:70:04:62:e9:87:c2:67:a6:ab:c4:af:63:de:
         ea:fb:40:9c:5e:a1:ec:40:7f:d4:60:d1:ce:a3:ed:6c:8c:76:
         af:47:34:35:5f:8f:1b:79:76:32:3b:7a:09:04:c0:1f:02:45:
         25:d0:90:84:77:51:cd:4e:cc:28:db:0a:38:78:37:b9:ec:dd:
         8c:71:ff:04:8a:81:ce:fa:b6:38:4a:6e:6b:1f:38:c4:5e:44:
         4b:49:91:1e:68:63:6c:b0:ea:05:d0:7a:6b:c9:31:83:25:2a:
         85:86:cb:bd:d1:ad:2e:e1:cc:cc:3f:68:8a:a7:0b:6f:78:5e:
         2f:1b:80:ad:31:1b:23:9e:6b:57:a5:f1:19:e3:da:3d:18:c6:
         35:23:b6:ec:bf:51:22:cd:4e:12:a9:74:7e:51:ec:9f:47:1a:
         e6:a0:c1:d2:12:31:79:ea:cb:3a:85:ea:25:b6:8f:34:e2:f5:
         9c:50:0b:a0:e8:0b:1b:5a:ff:2a:a8:66:0f:72:a3:6b:6f:26:
         b3:d6:72:4f:54:47:5d:dd:b9:a0:fd:97:a2:35:2c:70:95:32:
         3c:27:57:9a:8d:06:a3:da:f4:81:9f:11:44:55:dc:d4:d7:58:
         b6:2c:9b:96
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUZ7qvjcoZLgqlLKJvSlTsMuiQ4sUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA4MDkxMzU4MDVaFw0yMzA4MDgxNDAzMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREFGMzUyRDg2OThDQUY5M0U2
MjJBOUU0OUFGQ0Q4QjlDRjE5RjhBQkRBQUQ0MTlENjQwOEYzQjlDMkJDN0YyODYx
NUMyQjY3N0NGMTk4OTM3NEE1Q0I0Rjg4Nzk1MDNCNEI1OEIzREVEMDk4MjFFQ0Y2
QzBFNjgwQzFCOUE5QjQ3QTIxQUYxNUY5RDU2RDNGRDBCRThDRkMzQTJGOTM5QjJB
MUY0MDhFMTc1QkMyNjA5RDE0Q0M1NDQ2QTlDN0E0NjBBRTRDQkE5QjA0RDFGMTNE
Q0E5NjQ5MEQ4NTRBNzBCRUREQzQ3NDJDQTAxQjczNjMxQzZBMDgwMkQwMjExODJB
MjRFRjlCRTVDQTFGMjM0NjdBNkU4OTU1MkY1Q0Y0NzREMkM3N0I0QTgxQkU5QjMz
NjdGNTE1RDYzOTQ3RDBDMzk1MjVCNEU1QzMzNTMzQjZDOTlCMzQ2NDEzMEJGRTRD
ODMwNzZFQURFRUJGOEU4MjJDODU3Nzg2NkM1OEIyOTAxOEY2NEY5RTlBQUFCQkM1
MEI5NzFDMkVEMkNFOUUxOTM3MTZDNzZCNzM5M0VFMzBEN0Q1RDQwMEY0QTJFMDYx
NjdEODM5NTFGRDVGQUQ5QzYxMzk2QjY4RDVBQzhBQ0IxMDI2RDY0MzAzQzgwRjhB
ODNBODczQkFGNzYyRjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2vNS2GmMr5PmIqnkmvzYuc8Z+KvarUGdZAjzucK8fyhhXCtnfPGY
k3Sly0+IeVA7S1iz3tCYIez2wOaAwbmptHohrxX51W0/0L6M/Dovk5sqH0COF1vC
YJ0UzFRGqcekYK5MupsE0fE9ypZJDYVKcL7dxHQsoBtzYxxqCALQIRgqJO+b5cof
I0Z6bolVL1z0dNLHe0qBvpszZ/UV1jlH0MOVJbTlwzUztsmbNGQTC/5Mgwdure6/
joIshXeGbFiykBj2T56aqrvFC5ccLtLOnhk3Fsdrc5PuMNfV1AD0ouBhZ9g5Uf1f
rZxhOWto1ayKyxAm1kMDyA+Kg6hzuvdi+QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCisEPfAwrm8GxsvZ5wdl7LhnQZpMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzEzNTMyMmUzNzMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sZhIMA0GCSqGSIb3DQEBCwUAA4IBAQDF7KrWWanNutpP8NO/c98AEK0wPdP+1HAE
YumHwmemq8SvY97q+0CcXqHsQH/UYNHOo+1sjHavRzQ1X48beXYyO3oJBMAfAkUl
0JCEd1HNTswo2wo4eDe57N2Mcf8EioHO+rY4Sm5rHzjEXkRLSZEeaGNssOoF0Hpr
yTGDJSqFhsu90a0u4czMP2iKpwtveF4vG4CtMRsjnmtXpfEZ49o9GMY1I7bsv1Ei
zU4SqXR+UeyfRxrmoMHSEjF56ss6heolto804vWcUAug6AsbWv8qqGYPcqNrbyaz
1nJPVEdd3bmg/ZeiNSxwlTI8J1eajQaj2vSBnxFEVdzU11i2LJuW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org