Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37302e3137362e302f32302d3234203d3e20323632373733.roa
File:                     3137372e37302e3137362e302f32302d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          slnriVGgIfh0WsSV0hi8Z+yvKlx31ZoKFTUtuyb1ijw=
Subject key identifier:   4A:D7:7C:A2:32:84:10:04:CC:8F:25:7D:94:29:15:FD:30:A1:C9:55
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       1F24E56D8772141B814DE04C80D68206C797621F
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37302e3137362e302f32302d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:06:56 +0000
ROA not before:           Tue 09 Aug 2022 14:01:56 +0000
ROA not after:            Tue 08 Aug 2023 14:06:56 +0000
asID:                     262773
IP address blocks:        177.70.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:24:e5:6d:87:72:14:1b:81:4d:e0:4c:80:d6:82:06:c7:97:62:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 14:01:56 2022 GMT
            Not After : Aug  8 14:06:56 2023 GMT
        Subject: CN=3082010A0282010100BDD90112BC8E5EACD65FD6F690734BD5965A2F3548D6FA8ADD1D445A25946A295581027057F90545EEA99F02C565B8E6562C2911F8FA3993167BAD515461C6BE6DC4E8A21416A8190964C647F742849FAE3B47D6698A665306C8B7D636E41CF92EDD04F89FE0DECBA7E5475A3691A7778140FAB586BAFAE3D0CF526DA95D8B1C3C5D385CDAC704EA4306BC4BD787619AD36978C5C81636159B0B5E3EE032134C48C64E1A5882F1AD89BCF0D17152E49FE53DDE429EFC82958016417CF3D617149082F76CD68248D5F7B55A4762D8E09C7A09273786F6F25817C186677EA8EC76238EDF49849BF364259CC6BF1911BAE05FDA35117BD77029FD45E5AF8E79B5C90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:01:12:bc:8e:5e:ac:d6:5f:d6:f6:90:73:
                    4b:d5:96:5a:2f:35:48:d6:fa:8a:dd:1d:44:5a:25:
                    94:6a:29:55:81:02:70:57:f9:05:45:ee:a9:9f:02:
                    c5:65:b8:e6:56:2c:29:11:f8:fa:39:93:16:7b:ad:
                    51:54:61:c6:be:6d:c4:e8:a2:14:16:a8:19:09:64:
                    c6:47:f7:42:84:9f:ae:3b:47:d6:69:8a:66:53:06:
                    c8:b7:d6:36:e4:1c:f9:2e:dd:04:f8:9f:e0:de:cb:
                    a7:e5:47:5a:36:91:a7:77:81:40:fa:b5:86:ba:fa:
                    e3:d0:cf:52:6d:a9:5d:8b:1c:3c:5d:38:5c:da:c7:
                    04:ea:43:06:bc:4b:d7:87:61:9a:d3:69:78:c5:c8:
                    16:36:15:9b:0b:5e:3e:e0:32:13:4c:48:c6:4e:1a:
                    58:82:f1:ad:89:bc:f0:d1:71:52:e4:9f:e5:3d:de:
                    42:9e:fc:82:95:80:16:41:7c:f3:d6:17:14:90:82:
                    f7:6c:d6:82:48:d5:f7:b5:5a:47:62:d8:e0:9c:7a:
                    09:27:37:86:f6:f2:58:17:c1:86:67:7e:a8:ec:76:
                    23:8e:df:49:84:9b:f3:64:25:9c:c6:bf:19:11:ba:
                    e0:5f:da:35:11:7b:d7:70:29:fd:45:e5:af:8e:79:
                    b5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D7:7C:A2:32:84:10:04:CC:8F:25:7D:94:29:15:FD:30:A1:C9:55
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37302e3137362e302f32302d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:c7:ef:86:0b:67:1a:ac:d8:03:1b:ea:73:d8:6f:60:65:77:
         f3:2a:ef:0b:5f:57:ba:74:10:52:d0:42:32:18:ff:83:c1:5e:
         46:38:9e:a6:b1:83:bb:e6:f6:5e:a0:7a:1c:f0:50:57:8f:c8:
         3a:42:f3:31:ac:b5:b5:59:44:39:57:79:b0:39:f4:77:10:1c:
         88:30:97:f2:dd:56:a9:ee:bd:6d:d4:7d:f7:44:7c:6b:92:5c:
         65:77:65:f1:e9:0d:7c:16:1e:55:8a:16:f1:ff:6a:77:a3:7f:
         66:83:b5:46:23:52:d1:85:52:79:e1:66:40:ab:55:85:b7:d0:
         0e:2e:3e:42:de:63:f7:4e:48:0d:0b:0d:53:7b:63:57:41:c2:
         65:69:d4:53:bc:03:9a:47:2a:92:79:bb:76:0d:98:28:f3:d2:
         9e:f4:58:3f:13:3c:8b:79:d2:c0:a9:63:e5:fc:51:a1:c2:7b:
         d7:bf:90:49:6a:03:a0:d8:93:4c:76:7a:55:7a:d3:8d:dd:46:
         e6:04:87:7b:3e:62:4b:5a:8f:05:7e:a2:58:ee:b9:66:60:af:
         75:e4:20:8b:84:88:bc:56:15:75:6b:42:84:ae:b8:1c:17:1e:
         42:8e:a2:57:c0:7b:5a:e4:1b:8a:01:bf:22:8f:dc:4e:18:b0:
         9a:f5:2c:8c
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUHyTlbYdyFBuBTeBMgNaCBseXYh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA4MDkxNDAxNTZaFw0yMzA4MDgxNDA2NTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkREOTAxMTJCQzhFNUVBQ0Q2
NUZENkY2OTA3MzRCRDU5NjVBMkYzNTQ4RDZGQThBREQxRDQ0NUEyNTk0NkEyOTU1
ODEwMjcwNTdGOTA1NDVFRUE5OUYwMkM1NjVCOEU2NTYyQzI5MTFGOEZBMzk5MzE2
N0JBRDUxNTQ2MUM2QkU2REM0RThBMjE0MTZBODE5MDk2NEM2NDdGNzQyODQ5RkFF
M0I0N0Q2Njk4QTY2NTMwNkM4QjdENjM2RTQxQ0Y5MkVERDA0Rjg5RkUwREVDQkE3
RTU0NzVBMzY5MUE3Nzc4MTQwRkFCNTg2QkFGQUUzRDBDRjUyNkRBOTVEOEIxQzND
NUQzODVDREFDNzA0RUE0MzA2QkM0QkQ3ODc2MTlBRDM2OTc4QzVDODE2MzYxNTlC
MEI1RTNFRTAzMjEzNEM0OEM2NEUxQTU4ODJGMUFEODlCQ0YwRDE3MTUyRTQ5RkU1
M0RERTQyOUVGQzgyOTU4MDE2NDE3Q0YzRDYxNzE0OTA4MkY3NkNENjgyNDhENUY3
QjU1QTQ3NjJEOEUwOUM3QTA5MjczNzg2RjZGMjU4MTdDMTg2Njc3RUE4RUM3NjIz
OEVERjQ5ODQ5QkYzNjQyNTlDQzZCRjE5MTFCQUUwNUZEQTM1MTE3QkQ3NzAyOUZE
NDVFNUFGOEU3OUI1QzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvdkBEryOXqzWX9b2kHNL1ZZaLzVI1vqK3R1EWiWUailVgQJwV/kF
Re6pnwLFZbjmViwpEfj6OZMWe61RVGHGvm3E6KIUFqgZCWTGR/dChJ+uO0fWaYpm
UwbIt9Y25Bz5Lt0E+J/g3sun5UdaNpGnd4FA+rWGuvrj0M9Sbaldixw8XThc2scE
6kMGvEvXh2Ga02l4xcgWNhWbC14+4DITTEjGThpYgvGtibzw0XFS5J/lPd5CnvyC
lYAWQXzz1hcUkIL3bNaCSNX3tVpHYtjgnHoJJzeG9vJYF8GGZ36o7HYjjt9JhJvz
ZCWcxr8ZEbrgX9o1EXvXcCn9ReWvjnm1yQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FErXfKIyhBAEzI8lfZQpFf0woclVMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzczMDJlMzEzNzM2
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
sUawMA0GCSqGSIb3DQEBCwUAA4IBAQAix++GC2carNgDG+pz2G9gZXfzKu8LX1e6
dBBS0EIyGP+DwV5GOJ6msYO75vZeoHoc8FBXj8g6QvMxrLW1WUQ5V3mwOfR3EByI
MJfy3Vap7r1t1H33RHxrklxld2Xx6Q18Fh5Vihbx/2p3o39mg7VGI1LRhVJ54WZA
q1WFt9AOLj5C3mP3TkgNCw1Te2NXQcJladRTvAOaRyqSebt2DZgo89Ke9Fg/EzyL
edLAqWPl/FGhwnvXv5BJagOg2JNMdnpVetON3UbmBId7PmJLWo8FfqJY7rlmYK91
5CCLhIi8VhV1a0KErrgcFx5CjqJXwHta5BuKAb8ij9xOGLCa9SyM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org