Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230302e302f32312d3234203d3e20323632373733.roa
File:                     3137372e37332e3230302e302f32312d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          y44LrR7aepZfuQ0DMj4RhD4zwNyjn5/5vPyMMoEadDY=
Subject key identifier:   B8:C6:F4:AF:77:E1:98:7B:C2:E8:AF:38:24:22:FA:25:43:8A:46:13
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3CB54A70CA091AE5A6427F50EBA579ABA8D198A8
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230302e302f32312d3234203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:50:50 +0000
ROA not before:           Tue 09 Aug 2022 13:45:50 +0000
ROA not after:            Tue 08 Aug 2023 13:50:50 +0000
asID:                     262773
IP address blocks:        177.73.200.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b5:4a:70:ca:09:1a:e5:a6:42:7f:50:eb:a5:79:ab:a8:d1:98:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:45:50 2022 GMT
            Not After : Aug  8 13:50:50 2023 GMT
        Subject: CN=3082010A0282010100AA54E27AD04836357C81F2A7DD392AF9A888E2E06D51C0A0958B85FEA7D1E5FA9CC06B3AD0613D33CDC46C58E2582794D76648611CDBDF556A65E0BA576F1EE57324BDC4510172F3ACD060B77008E2E2BA2BC21A07385125FA8FC2B1340EB409493F7BC700BD4EE2C4EB09CD936F870F006F736B83FE9E8DB6F1E4E67F0570B5D850343CA0382E5329C30E44D462828B0957A2327594E540CB42D3B43122CFB05C715A5D378085F81CF0AB580A554F3DADB5642346F3390F10AC0D4A3877312C47D8BF89E1E0ACFBAF411C2D5A96EF6D683B829C5CA85DB7E77A30471A9E26A6805F19EFCF1A65A70938B8F0E031CD1EC49EFBC7242FE3922FFC0E832E912EB90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:e2:7a:d0:48:36:35:7c:81:f2:a7:dd:39:
                    2a:f9:a8:88:e2:e0:6d:51:c0:a0:95:8b:85:fe:a7:
                    d1:e5:fa:9c:c0:6b:3a:d0:61:3d:33:cd:c4:6c:58:
                    e2:58:27:94:d7:66:48:61:1c:db:df:55:6a:65:e0:
                    ba:57:6f:1e:e5:73:24:bd:c4:51:01:72:f3:ac:d0:
                    60:b7:70:08:e2:e2:ba:2b:c2:1a:07:38:51:25:fa:
                    8f:c2:b1:34:0e:b4:09:49:3f:7b:c7:00:bd:4e:e2:
                    c4:eb:09:cd:93:6f:87:0f:00:6f:73:6b:83:fe:9e:
                    8d:b6:f1:e4:e6:7f:05:70:b5:d8:50:34:3c:a0:38:
                    2e:53:29:c3:0e:44:d4:62:82:8b:09:57:a2:32:75:
                    94:e5:40:cb:42:d3:b4:31:22:cf:b0:5c:71:5a:5d:
                    37:80:85:f8:1c:f0:ab:58:0a:55:4f:3d:ad:b5:64:
                    23:46:f3:39:0f:10:ac:0d:4a:38:77:31:2c:47:d8:
                    bf:89:e1:e0:ac:fb:af:41:1c:2d:5a:96:ef:6d:68:
                    3b:82:9c:5c:a8:5d:b7:e7:7a:30:47:1a:9e:26:a6:
                    80:5f:19:ef:cf:1a:65:a7:09:38:b8:f0:e0:31:cd:
                    1e:c4:9e:fb:c7:24:2f:e3:92:2f:fc:0e:83:2e:91:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C6:F4:AF:77:E1:98:7B:C2:E8:AF:38:24:22:FA:25:43:8A:46:13
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230302e302f32312d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:17:cd:9d:a4:6c:d6:48:bd:29:3c:b9:26:3c:14:01:75:59:
         db:ef:79:4c:47:40:2d:07:8e:2d:d3:e6:6c:5a:fe:bc:9a:13:
         bd:85:dc:b8:aa:e4:cf:16:47:6b:e3:e0:22:50:4f:12:c2:3b:
         f1:96:48:bd:84:d7:a2:8b:e3:8b:92:1f:b5:81:73:23:30:74:
         07:60:81:32:5e:34:89:c2:51:9c:a7:2d:ca:bf:a2:61:da:90:
         48:49:b9:da:12:9f:c6:22:8a:75:36:7d:e9:48:13:11:d2:15:
         b3:75:96:e9:2b:c2:06:ae:64:ae:2b:94:75:ad:99:9a:a0:cd:
         0b:d1:24:ff:ac:e8:ce:4c:a0:ac:37:ef:45:de:80:33:23:41:
         e9:e6:b6:5e:c3:c6:79:7d:95:1f:d6:91:07:35:69:ee:2a:cf:
         12:2a:40:c7:53:c1:c7:45:cb:ef:9c:fc:b8:6b:a1:1e:5b:81:
         ff:71:bd:61:b1:71:39:24:1b:bd:4f:db:39:46:fb:44:de:93:
         bb:1d:eb:fc:42:9d:81:96:65:c1:9d:07:64:4e:3d:56:59:ef:
         1f:02:71:5a:23:d9:47:04:6b:56:cd:e4:b1:00:2e:13:f1:0a:
         2d:9e:42:ed:0c:3f:88:f8:3d:24:1b:e4:5f:ba:2b:74:c3:61:
         bb:7f:c3:70
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUPLVKcMoJGuWmQn9Q66V5q6jRmKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA4MDkxMzQ1NTBaFw0yMzA4MDgxMzUwNTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUE1NEUyN0FEMDQ4MzYzNTdD
ODFGMkE3REQzOTJBRjlBODg4RTJFMDZENTFDMEEwOTU4Qjg1RkVBN0QxRTVGQTlD
QzA2QjNBRDA2MTNEMzNDREM0NkM1OEUyNTgyNzk0RDc2NjQ4NjExQ0RCREY1NTZB
NjVFMEJBNTc2RjFFRTU3MzI0QkRDNDUxMDE3MkYzQUNEMDYwQjc3MDA4RTJFMkJB
MkJDMjFBMDczODUxMjVGQThGQzJCMTM0MEVCNDA5NDkzRjdCQzcwMEJENEVFMkM0
RUIwOUNEOTM2Rjg3MEYwMDZGNzM2QjgzRkU5RThEQjZGMUU0RTY3RjA1NzBCNUQ4
NTAzNDNDQTAzODJFNTMyOUMzMEU0NEQ0NjI4MjhCMDk1N0EyMzI3NTk0RTU0MENC
NDJEM0I0MzEyMkNGQjA1QzcxNUE1RDM3ODA4NUY4MUNGMEFCNTgwQTU1NEYzREFE
QjU2NDIzNDZGMzM5MEYxMEFDMEQ0QTM4NzczMTJDNDdEOEJGODlFMUUwQUNGQkFG
NDExQzJENUE5NkVGNkQ2ODNCODI5QzVDQTg1REI3RTc3QTMwNDcxQTlFMjZBNjgw
NUYxOUVGQ0YxQTY1QTcwOTM4QjhGMEUwMzFDRDFFQzQ5RUZCQzcyNDJGRTM5MjJG
RkMwRTgzMkU5MTJFQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqlTietBINjV8gfKn3Tkq+aiI4uBtUcCglYuF/qfR5fqcwGs60GE9
M83EbFjiWCeU12ZIYRzb31VqZeC6V28e5XMkvcRRAXLzrNBgt3AI4uK6K8IaBzhR
JfqPwrE0DrQJST97xwC9TuLE6wnNk2+HDwBvc2uD/p6NtvHk5n8FcLXYUDQ8oDgu
UynDDkTUYoKLCVeiMnWU5UDLQtO0MSLPsFxxWl03gIX4HPCrWApVTz2ttWQjRvM5
DxCsDUo4dzEsR9i/ieHgrPuvQRwtWpbvbWg7gpxcqF2353owRxqeJqaAXxnvzxpl
pwk4uPDgMc0exJ77xyQv45Iv/A6DLpEuuQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLjG9K934Zh7wuivOCQi+iVDikYTMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzczMzJlMzIzMDMw
MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
sUnIMA0GCSqGSIb3DQEBCwUAA4IBAQAXF82dpGzWSL0pPLkmPBQBdVnb73lMR0At
B44t0+ZsWv68mhO9hdy4quTPFkdr4+AiUE8Swjvxlki9hNeii+OLkh+1gXMjMHQH
YIEyXjSJwlGcpy3Kv6Jh2pBISbnaEp/GIop1Nn3pSBMR0hWzdZbpK8IGrmSuK5R1
rZmaoM0L0ST/rOjOTKCsN+9F3oAzI0Hp5rZew8Z5fZUf1pEHNWnuKs8SKkDHU8HH
RcvvnPy4a6EeW4H/cb1hsXE5JBu9T9s5RvtE3pO7Hev8Qp2BlmXBnQdkTj1WWe8f
AnFaI9lHBGtWzeSxAC4T8QotnkLtDD+I+D0kG+Rfuit0w2G7f8Nw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org