Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e32322e3234382e302f32322d3233203d3e20323632373733.roa
File:                     3137372e32322e3234382e302f32322d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          DZI/BJxtCGjZFuOQqrCqfA2Eu99YZrroeuksBqiB/TI=
Subject key identifier:   24:17:36:C5:53:59:B9:F1:52:B7:85:B9:27:6B:E1:FC:9A:C0:B7:8A
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3AC7AB89406EE7C3FC85AC71267230436E003324
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e32322e3234382e302f32322d3233203d3e20323632373733.roa
Signing time:             Mon 26 Sep 2022 00:00:00 +0000
ROA not before:           Sun 25 Sep 2022 23:55:00 +0000
ROA not after:            Mon 25 Sep 2023 00:00:00 +0000
asID:                     262773
IP address blocks:        177.22.248.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c7:ab:89:40:6e:e7:c3:fc:85:ac:71:26:72:30:43:6e:00:33:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 25 23:55:00 2022 GMT
            Not After : Sep 25 00:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:71:04:b8:50:7f:f8:e3:e8:2d:6c:cf:7a:
                    2a:24:ea:3c:af:3f:d1:1e:6a:d1:19:f9:90:4b:9b:
                    7a:95:25:cc:d0:eb:96:cd:90:81:8c:3c:b2:15:52:
                    df:90:0f:73:9d:82:5d:d1:55:9b:da:16:8a:21:59:
                    16:15:7d:37:02:ab:71:9a:5d:e2:7b:e6:9c:01:87:
                    b7:5e:e2:dc:b2:eb:af:93:c8:a9:81:08:48:c4:6f:
                    22:c9:da:f9:af:64:80:28:fc:d2:7f:a6:a4:18:1e:
                    3b:cf:74:4a:06:e4:18:16:2c:b3:62:58:29:1e:9c:
                    cd:46:84:54:bd:59:9b:1f:95:4e:de:19:6d:17:4e:
                    02:c9:28:86:bf:9f:d4:6e:d8:30:49:cf:5d:dc:9b:
                    83:23:e9:b0:e4:80:36:c5:c1:67:2c:30:4c:4e:a6:
                    d1:14:b5:d4:eb:6b:8f:7a:db:bb:a7:a8:b1:a7:93:
                    63:22:50:87:ee:2a:e4:e5:88:43:f9:1e:4d:00:65:
                    b9:65:bb:c2:d0:8d:b6:de:8d:2f:34:6f:8c:04:41:
                    d2:32:1d:a1:12:9e:f5:cd:5f:b1:11:2b:94:ca:e9:
                    73:09:2d:77:0e:64:26:29:78:9b:45:a6:85:d8:d8:
                    f5:73:e3:d4:37:f7:4d:4a:d7:97:fc:fa:0c:27:ac:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:17:36:C5:53:59:B9:F1:52:B7:85:B9:27:6B:E1:FC:9A:C0:B7:8A
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e32322e3234382e302f32322d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:80:06:28:37:80:07:6a:35:c9:d8:f1:f5:3b:04:b9:e9:12:
         62:e0:2e:76:f9:c9:7c:fb:ac:f5:97:44:3f:c2:2e:41:19:9e:
         7f:34:60:c2:b8:b9:98:04:81:c4:5c:97:67:06:ba:3c:62:bb:
         7e:44:5f:76:46:e2:dc:39:23:d4:aa:ec:fa:73:4a:64:9a:9c:
         eb:c7:5e:2b:51:36:34:8e:7a:03:a2:42:31:31:f3:35:96:38:
         01:21:d6:96:dd:74:13:ea:fc:03:16:46:0e:19:ca:a7:52:dd:
         6b:93:43:f0:e3:9d:d5:59:4e:ca:a7:0b:fd:ef:f2:0b:80:e1:
         57:0b:ef:14:57:ff:92:a3:ad:7e:d5:7a:bf:cf:df:95:d6:10:
         b5:af:9b:68:f6:9b:48:42:46:82:ac:33:9f:f7:cb:73:83:2e:
         e1:0c:3d:fc:96:b6:4e:e9:63:57:d4:b4:cb:a8:ba:fa:e4:60:
         76:04:56:12:ac:7c:43:9b:10:84:db:13:02:6b:86:3a:39:bd:
         38:9a:67:03:c6:4a:8c:31:14:0c:be:08:a9:27:09:0d:d9:ce:
         90:57:5b:2a:13:6e:ee:a7:4f:9c:19:af:5e:e0:53:d3:f6:33:
         ab:ae:81:36:da:b4:35:0f:2a:40:dd:34:08:bb:13:88:45:a5:
         0c:55:38:12
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUOseriUBu58P8haxxJnIwQ24AMyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA5MjUyMzU1MDBaFw0yMzA5MjUwMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzcxMDcxMDRCODUwN0ZGOEUz
RTgyRDZDQ0Y3QTJBMjRFQTNDQUYzRkQxMUU2QUQxMTlGOTkwNEI5QjdBOTUyNUND
RDBFQjk2Q0Q5MDgxOEMzQ0IyMTU1MkRGOTAwRjczOUQ4MjVERDE1NTlCREExNjhB
MjE1OTE2MTU3RDM3MDJBQjcxOUE1REUyN0JFNjlDMDE4N0I3NUVFMkRDQjJFQkFG
OTNDOEE5ODEwODQ4QzQ2RjIyQzlEQUY5QUY2NDgwMjhGQ0QyN0ZBNkE0MTgxRTNC
Q0Y3NDRBMDZFNDE4MTYyQ0IzNjI1ODI5MUU5Q0NENDY4NDU0QkQ1OTlCMUY5NTRF
REUxOTZEMTc0RTAyQzkyODg2QkY5RkQ0NkVEODMwNDlDRjVEREM5QjgzMjNFOUIw
RTQ4MDM2QzVDMTY3MkMzMDRDNEVBNkQxMTRCNUQ0RUI2QjhGN0FEQkJCQTdBOEIx
QTc5MzYzMjI1MDg3RUUyQUU0RTU4ODQzRjkxRTREMDA2NUI5NjVCQkMyRDA4REI2
REU4RDJGMzQ2RjhDMDQ0MUQyMzIxREExMTI5RUY1Q0Q1RkIxMTEyQjk0Q0FFOTcz
MDkyRDc3MEU2NDI2Mjk3ODlCNDVBNjg1RDhEOEY1NzNFM0Q0MzdGNzRENEFENzk3
RkNGQTBDMjdBQ0NBNEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxxBxBLhQf/jj6C1sz3oqJOo8rz/RHmrRGfmQS5t6lSXM0OuWzZCB
jDyyFVLfkA9znYJd0VWb2haKIVkWFX03Aqtxml3ie+acAYe3XuLcsuuvk8ipgQhI
xG8iydr5r2SAKPzSf6akGB47z3RKBuQYFiyzYlgpHpzNRoRUvVmbH5VO3hltF04C
ySiGv5/UbtgwSc9d3JuDI+mw5IA2xcFnLDBMTqbRFLXU62uPetu7p6ixp5NjIlCH
7irk5YhD+R5NAGW5ZbvC0I223o0vNG+MBEHSMh2hEp71zV+xESuUyulzCS13DmQm
KXibRaaF2Nj1c+PUN/dNSteX/PoMJ6zKTQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCQXNsVTWbnxUreFuSdr4fyawLeKMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzIzMjJlMzIzNDM4
MmUzMDJmMzIzMjJkMzIzMzIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
sRb4MA0GCSqGSIb3DQEBCwUAA4IBAQAOgAYoN4AHajXJ2PH1OwS56RJi4C52+cl8
+6z1l0Q/wi5BGZ5/NGDCuLmYBIHEXJdnBro8Yrt+RF92RuLcOSPUquz6c0pkmpzr
x14rUTY0jnoDokIxMfM1ljgBIdaW3XQT6vwDFkYOGcqnUt1rk0Pw453VWU7Kpwv9
7/ILgOFXC+8UV/+So61+1Xq/z9+V1hC1r5to9ptIQkaCrDOf98tzgy7hDD38lrZO
6WNX1LTLqLr65GB2BFYSrHxDmxCE2xMCa4Y6Ob04mmcDxkqMMRQMvgipJwkN2c6Q
V1sqE27up0+cGa9e4FPT9jOrroE22rQ1DypA3TQIuxOIRaUMVTgS
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org