Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37362e302f32342d3234203d3e20323632373733.roa
File:                     3137372e3135322e37362e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          plS0L/fOXgfWFdLboZut023yQDflNA9P5s6fDMeaWzE=
Subject key identifier:   D4:80:73:B4:7D:7D:EC:7F:F2:B4:CF:D3:E7:B7:47:AE:68:1D:88:FE
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       49B5427AFBD32D4888F5903FA47F2CC93558EF51
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37362e302f32342d3234203d3e20323632373733.roa
Signing time:             Thu 01 Jun 2023 01:09:43 +0000
ROA not before:           Thu 01 Jun 2023 01:04:43 +0000
ROA not after:            Thu 30 May 2024 01:09:43 +0000
asID:                     262773
IP address blocks:        177.152.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b5:42:7a:fb:d3:2d:48:88:f5:90:3f:a4:7f:2c:c9:35:58:ef:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Jun  1 01:04:43 2023 GMT
            Not After : May 30 01:09:43 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f0:8a:75:3d:bd:c8:45:9f:33:62:1c:32:99:
                    87:ee:25:d4:3b:c6:2d:07:e4:56:0b:ef:97:5a:8b:
                    bb:70:df:f4:c8:b9:5a:90:4b:93:d6:47:d3:49:40:
                    b6:14:6e:b9:10:73:76:fc:e5:df:75:67:c3:07:bc:
                    37:b7:82:93:bf:fd:70:4a:84:9c:35:13:88:58:14:
                    e3:a9:94:b1:07:0c:a6:b9:34:ac:ac:54:68:b8:b0:
                    36:a1:69:87:fb:46:e7:5d:81:47:49:5a:98:9e:a2:
                    97:80:5f:28:70:53:4d:96:b8:f8:66:56:9f:db:05:
                    6a:17:40:31:24:b4:f2:4a:84:a0:74:ac:e4:ab:2c:
                    ed:68:12:54:d7:16:1d:6a:0c:ee:e4:0d:51:7c:80:
                    fc:40:ea:06:08:f1:6e:f6:2a:de:e4:ed:6f:a1:77:
                    cc:ef:88:c9:57:d6:6b:3d:04:60:07:52:ff:df:f1:
                    e5:e8:c2:c7:c4:59:69:48:17:59:97:55:25:b1:9b:
                    db:61:d5:67:f9:ed:24:7b:23:5f:af:a1:5c:34:4b:
                    b4:4d:8f:96:c6:8f:8b:e6:25:dc:30:3e:83:b2:eb:
                    d6:8a:29:04:c0:0f:d9:c6:69:04:75:de:c2:4a:85:
                    a0:e9:3e:d1:82:15:8e:b0:0a:f9:34:5d:ad:73:6d:
                    e4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:80:73:B4:7D:7D:EC:7F:F2:B4:CF:D3:E7:B7:47:AE:68:1D:88:FE
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e3135322e37362e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:87:ea:11:47:1f:d6:4c:1a:9f:26:6d:eb:52:66:01:85:9c:
         a1:5a:a5:63:aa:6b:17:f8:97:8a:9d:91:f4:38:f5:14:5d:ef:
         fa:6e:ab:6f:99:33:06:4b:8b:7c:db:b0:87:3b:d3:04:52:85:
         7b:23:f4:60:b8:a6:8f:aa:ec:ca:62:83:26:3d:14:cd:b8:d6:
         0e:81:b7:bc:f2:59:fb:59:a4:f9:b5:f4:76:fe:9f:16:45:66:
         6a:6a:4a:5c:a6:ff:e8:f6:8a:d5:dd:0c:86:ba:c2:f8:ed:ce:
         56:a0:e8:2d:23:2b:a0:16:5b:bd:2e:1b:f6:ba:ad:08:e0:91:
         47:cf:a0:96:fe:11:79:8e:9f:22:a2:77:7c:91:e0:2b:10:65:
         b0:d6:16:05:7e:f3:0a:18:80:08:85:74:31:9f:66:72:ff:93:
         99:ad:dc:50:08:37:ee:26:16:95:9c:f0:df:14:6b:25:06:c6:
         b0:3e:ec:cf:94:2d:23:be:74:77:8b:65:1f:d7:82:78:76:53:
         94:39:14:0a:d4:c1:d7:bf:48:37:54:e4:d0:9b:2a:86:9c:c6:
         22:69:89:6e:85:bb:ed:d7:16:0d:fd:c0:cd:47:13:40:3f:62:
         ae:54:05:d8:19:a3:5e:2c:07:fa:cc:64:23:80:52:89:f5:ee:
         25:18:88:b7
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUSbVCevvTLUiI9ZA/pH8syTVY71EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMzA2MDEwMTA0NDNaFw0yNDA1MzAwMTA5NDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTBGMDhBNzUzREJEQzg0NTlG
MzM2MjFDMzI5OTg3RUUyNUQ0M0JDNjJEMDdFNDU2MEJFRjk3NUE4QkJCNzBERkY0
QzhCOTVBOTA0QjkzRDY0N0QzNDk0MEI2MTQ2RUI5MTA3Mzc2RkNFNURGNzU2N0Mz
MDdCQzM3Qjc4MjkzQkZGRDcwNEE4NDlDMzUxMzg4NTgxNEUzQTk5NEIxMDcwQ0E2
QjkzNEFDQUM1NDY4QjhCMDM2QTE2OTg3RkI0NkU3NUQ4MTQ3NDk1QTk4OUVBMjk3
ODA1RjI4NzA1MzREOTZCOEY4NjY1NjlGREIwNTZBMTc0MDMxMjRCNEYyNEE4NEEw
NzRBQ0U0QUIyQ0VENjgxMjU0RDcxNjFENkEwQ0VFRTQwRDUxN0M4MEZDNDBFQTA2
MDhGMTZFRjYyQURFRTRFRDZGQTE3N0NDRUY4OEM5NTdENjZCM0QwNDYwMDc1MkZG
REZGMUU1RThDMkM3QzQ1OTY5NDgxNzU5OTc1NTI1QjE5QkRCNjFENTY3RjlFRDI0
N0IyMzVGQUZBMTVDMzQ0QkI0NEQ4Rjk2QzY4RjhCRTYyNURDMzAzRTgzQjJFQkQ2
OEEyOTA0QzAwRkQ5QzY2OTA0NzVERUMyNEE4NUEwRTkzRUQxODIxNThFQjAwQUY5
MzQ1REFENzM2REU0RjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4PCKdT29yEWfM2IcMpmH7iXUO8YtB+RWC++XWou7cN/0yLlakEuT
1kfTSUC2FG65EHN2/OXfdWfDB7w3t4KTv/1wSoScNROIWBTjqZSxBwymuTSsrFRo
uLA2oWmH+0bnXYFHSVqYnqKXgF8ocFNNlrj4Zlaf2wVqF0AxJLTySoSgdKzkqyzt
aBJU1xYdagzu5A1RfID8QOoGCPFu9ire5O1voXfM74jJV9ZrPQRgB1L/3/Hl6MLH
xFlpSBdZl1UlsZvbYdVn+e0keyNfr6FcNEu0TY+Wxo+L5iXcMD6DsuvWiikEwA/Z
xmkEdd7CSoWg6T7RghWOsAr5NF2tc23k8wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNSAc7R9fex/8rTP0+e3R65oHYj+MB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzEzNTMyMmUzNzM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sZhMMA0GCSqGSIb3DQEBCwUAA4IBAQA2h+oRRx/WTBqfJm3rUmYBhZyhWqVjqmsX
+JeKnZH0OPUUXe/6bqtvmTMGS4t827CHO9MEUoV7I/RguKaPquzKYoMmPRTNuNYO
gbe88ln7WaT5tfR2/p8WRWZqakpcpv/o9orV3QyGusL47c5WoOgtIyugFlu9Lhv2
uq0I4JFHz6CW/hF5jp8iond8keArEGWw1hYFfvMKGIAIhXQxn2Zy/5OZrdxQCDfu
JhaVnPDfFGslBsawPuzPlC0jvnR3i2Uf14J4dlOUORQK1MHXv0g3VOTQmyqGnMYi
aYluhbvt1xYN/cDNRxNAP2KuVAXYGaNeLAf6zGQjgFKJ9e4lGIi3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org