Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e33382e36342e302f32342d3234203d3e20323632373733.roa
File:                     3137372e33382e36342e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          j5euIvh7yy7gqavZXZwmbI2u29jaEx2tGoeNe6Q+IkM=
Subject key identifier:   9F:5E:8F:0D:B8:E1:A8:48:62:36:C9:B4:44:D3:8D:8D:5A:70:49:C0
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       7CD466AD3FB475AF8C49306F8B5E1E1A719D58CE
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e33382e36342e302f32342d3234203d3e20323632373733.roa
Signing time:             Fri 23 Sep 2022 14:21:21 +0000
ROA not before:           Fri 23 Sep 2022 14:16:21 +0000
ROA not after:            Fri 22 Sep 2023 14:21:21 +0000
asID:                     262773
IP address blocks:        177.38.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d4:66:ad:3f:b4:75:af:8c:49:30:6f:8b:5e:1e:1a:71:9d:58:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 23 14:16:21 2022 GMT
            Not After : Sep 22 14:21:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:96:c3:70:9c:5f:12:59:84:1f:e5:e3:7a:
                    4d:36:5c:83:89:03:c8:ae:48:1c:74:6b:83:88:06:
                    37:06:e4:d7:88:fe:f4:c3:b4:4b:0e:08:41:8f:e1:
                    98:64:3b:ab:7a:cf:28:1e:29:c2:bb:11:48:ed:7e:
                    08:33:6e:b0:2b:57:d7:a9:f3:7e:b9:aa:5f:27:d9:
                    d5:8c:bd:b7:10:d5:41:d1:fd:2a:f6:16:4a:8c:91:
                    58:1a:cb:97:27:a2:f6:41:6d:85:28:6d:b9:49:67:
                    e1:ae:25:73:fc:00:f5:f1:5c:7a:67:dc:b3:26:8b:
                    a5:6f:6a:24:6d:83:7e:c1:40:1b:49:fd:62:b6:55:
                    ba:23:93:39:c8:75:87:1e:96:4f:8a:88:6f:df:5a:
                    2f:43:8b:9d:6d:80:29:39:46:77:3c:95:fb:e6:92:
                    92:f8:b2:5a:b8:13:47:25:db:f4:fd:62:e7:e3:f4:
                    ef:92:ef:8b:a0:60:1b:0d:8d:94:2c:e8:2e:8e:f6:
                    14:33:40:55:9f:6d:20:0c:88:2a:a0:31:e9:c3:c5:
                    f9:5a:d0:81:96:a9:09:f8:54:c7:d0:5d:17:ad:ff:
                    3b:c6:ae:57:dd:18:51:4e:cc:ae:bf:e9:3b:f0:fe:
                    52:52:04:43:ce:87:28:d5:be:04:cd:33:06:ef:94:
                    86:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5E:8F:0D:B8:E1:A8:48:62:36:C9:B4:44:D3:8D:8D:5A:70:49:C0
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e33382e36342e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:6b:02:17:a5:b1:6d:24:ca:40:0a:02:a2:e4:0d:1a:4f:ad:
         24:5a:a6:b9:52:4a:05:ed:fb:65:63:bb:60:57:ce:a5:03:4d:
         f6:e9:e7:ef:21:a1:fd:0e:d9:7a:93:f0:ee:49:60:01:20:c0:
         71:9a:36:7e:37:98:ec:be:d2:10:f1:52:c2:03:4b:02:18:43:
         9c:f7:dc:bd:7d:87:a3:5d:64:cb:83:8f:bf:1a:07:9e:b7:48:
         6c:8e:56:76:0e:e0:03:ec:d2:51:7e:10:74:4d:05:10:b1:c2:
         85:a4:40:da:27:b2:49:6f:b8:db:d4:31:3d:cc:99:b1:95:b2:
         d3:04:fa:78:7c:88:0d:b3:95:2c:93:43:8b:02:52:8d:27:de:
         c5:b9:46:ff:47:8a:fc:d6:0d:35:4f:54:3f:5e:04:d1:11:b5:
         4f:52:7b:88:76:78:41:34:96:04:41:72:31:4b:b8:3c:f0:b9:
         23:cc:19:38:95:76:eb:21:b2:1b:de:41:37:a6:6f:e1:4b:95:
         c5:8a:b7:89:17:dc:33:bc:6b:2c:cb:6b:57:b0:fb:5a:b7:13:
         f4:f9:a5:78:fb:17:89:60:05:b4:50:31:26:81:71:94:34:1f:
         c3:ac:a1:a4:c6:64:d5:b4:9a:c8:d2:02:14:41:37:55:23:da:
         f5:8d:52:ad
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUfNRmrT+0da+MSTBvi14eGnGdWM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA5MjMxNDE2MjFaFw0yMzA5MjIxNDIxMjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJGMzk2QzM3MDlDNUYxMjU5
ODQxRkU1RTM3QTREMzY1QzgzODkwM0M4QUU0ODFDNzQ2QjgzODgwNjM3MDZFNEQ3
ODhGRUY0QzNCNDRCMEUwODQxOEZFMTk4NjQzQkFCN0FDRjI4MUUyOUMyQkIxMTQ4
RUQ3RTA4MzM2RUIwMkI1N0Q3QTlGMzdFQjlBQTVGMjdEOUQ1OENCREI3MTBENTQx
RDFGRDJBRjYxNjRBOEM5MTU4MUFDQjk3MjdBMkY2NDE2RDg1Mjg2REI5NDk2N0Ux
QUUyNTczRkMwMEY1RjE1QzdBNjdEQ0IzMjY4QkE1NkY2QTI0NkQ4MzdFQzE0MDFC
NDlGRDYyQjY1NUJBMjM5MzM5Qzg3NTg3MUU5NjRGOEE4ODZGREY1QTJGNDM4QjlE
NkQ4MDI5Mzk0Njc3M0M5NUZCRTY5MjkyRjhCMjVBQjgxMzQ3MjVEQkY0RkQ2MkU3
RTNGNEVGOTJFRjhCQTA2MDFCMEQ4RDk0MkNFODJFOEVGNjE0MzM0MDU1OUY2RDIw
MEM4ODJBQTAzMUU5QzNDNUY5NUFEMDgxOTZBOTA5Rjg1NEM3RDA1RDE3QURGRjNC
QzZBRTU3REQxODUxNEVDQ0FFQkZFOTNCRjBGRTUyNTIwNDQzQ0U4NzI4RDVCRTA0
Q0QzMzA2RUY5NDg2MjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwvOWw3CcXxJZhB/l43pNNlyDiQPIrkgcdGuDiAY3BuTXiP70w7RL
DghBj+GYZDures8oHinCuxFI7X4IM26wK1fXqfN+uapfJ9nVjL23ENVB0f0q9hZK
jJFYGsuXJ6L2QW2FKG25SWfhriVz/AD18Vx6Z9yzJoulb2okbYN+wUAbSf1itlW6
I5M5yHWHHpZPiohv31ovQ4udbYApOUZ3PJX75pKS+LJauBNHJdv0/WLn4/Tvku+L
oGAbDY2ULOgujvYUM0BVn20gDIgqoDHpw8X5WtCBlqkJ+FTH0F0Xrf87xq5X3RhR
Tsyuv+k78P5SUgRDzoco1b4EzTMG75SGKQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJ9ejw244ahIYjbJtETTjY1acEnAMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzMzODJlMzYzNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALEm
QDANBgkqhkiG9w0BAQsFAAOCAQEAIGsCF6WxbSTKQAoCouQNGk+tJFqmuVJKBe37
ZWO7YFfOpQNN9unn7yGh/Q7ZepPw7klgASDAcZo2fjeY7L7SEPFSwgNLAhhDnPfc
vX2Ho11ky4OPvxoHnrdIbI5Wdg7gA+zSUX4QdE0FELHChaRA2ieySW+429QxPcyZ
sZWy0wT6eHyIDbOVLJNDiwJSjSfexblG/0eK/NYNNU9UP14E0RG1T1J7iHZ4QTSW
BEFyMUu4PPC5I8wZOJV26yGyG95BN6Zv4UuVxYq3iRfcM7xrLMtrV7D7WrcT9Pml
ePsXiWAFtFAxJoFxlDQfw6yhpMZk1bSayNICFEE3VSPa9Y1SrQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org