Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230302e302f32342d3234203d3e20323632373733.roa
File:                     3137372e37332e3230302e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          nz9H/4lqX9Z3t9FlCnRfnrc/T/B4KHLj/bXD5Szq7kE=
Subject key identifier:   F2:43:75:0F:99:19:A2:C3:C1:93:AC:B3:C9:8A:93:A5:05:9B:EC:F9
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       5467FBB94325B4549F0B976918DAA60CBD279E02
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230302e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:31 +0000
ROA not before:           Tue 27 Sep 2022 19:14:31 +0000
ROA not after:            Tue 26 Sep 2023 19:19:31 +0000
asID:                     262773
IP address blocks:        177.73.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:67:fb:b9:43:25:b4:54:9f:0b:97:69:18:da:a6:0c:bd:27:9e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:31 2022 GMT
            Not After : Sep 26 19:19:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:62:d3:49:0b:17:d9:92:22:0a:08:f3:ed:14:
                    96:9a:cd:6e:d3:93:4b:2c:cf:a7:93:4a:d8:6b:6a:
                    df:08:c2:a8:71:75:2c:5a:55:03:b7:a0:21:3e:87:
                    08:73:da:29:ef:bc:49:89:e4:a3:74:a6:ae:5f:c6:
                    a0:fc:d7:3f:fe:2b:50:fc:72:54:ab:21:25:38:f1:
                    93:a5:c9:f1:8b:11:96:9f:7e:46:a0:0b:24:35:89:
                    9a:85:2e:62:c2:a7:11:b1:27:f7:ae:a3:2e:dd:a4:
                    75:c1:ce:62:2d:81:94:3c:f4:ce:b5:1e:2e:f5:ef:
                    70:f6:af:9d:3c:ef:bd:4a:a7:7e:7a:40:13:0f:64:
                    f3:9b:32:eb:54:32:6b:17:9d:a6:de:91:86:a8:23:
                    bd:08:f8:c0:39:b8:00:f3:f5:63:78:53:f6:7b:5b:
                    18:8d:c7:6f:92:4c:94:a7:80:22:16:3e:e9:d2:24:
                    77:b4:f3:4e:58:7f:8a:f7:23:59:f5:b0:f0:35:a7:
                    83:84:6a:7c:9f:03:2e:66:27:42:e8:fb:8e:3e:82:
                    1a:95:b4:bb:f6:eb:2d:d4:7b:5b:f3:f0:c0:91:80:
                    5b:45:51:9b:7f:4e:68:07:3e:11:6f:8e:43:ab:cf:
                    a3:bf:0d:ad:05:6b:54:c0:30:69:91:f6:98:df:21:
                    bf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:43:75:0F:99:19:A2:C3:C1:93:AC:B3:C9:8A:93:A5:05:9B:EC:F9
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230302e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:ef:6a:00:c7:c0:d2:03:eb:f9:35:7a:0c:44:0e:1c:8d:e6:
         32:30:40:4c:ee:34:34:0a:68:d8:3f:cb:52:1f:ce:4a:2a:57:
         d3:82:94:0f:fb:10:0f:56:28:c6:af:ec:7c:7b:30:61:10:3a:
         ed:fc:a7:30:41:af:6b:0f:02:6d:6d:60:c8:dc:35:b4:fd:23:
         60:b6:93:45:dd:2b:3e:1c:ca:bf:e7:8d:99:a9:4a:80:2d:b8:
         3e:1e:28:ef:d9:80:c3:c0:bf:1d:c0:42:1f:2c:b0:1f:3a:48:
         fa:0c:8f:99:7a:27:be:78:c5:6f:6f:3e:04:4b:5e:6f:95:14:
         27:ed:eb:bf:b0:05:1b:e3:a2:dd:a3:44:d8:42:ab:c2:e6:40:
         b9:68:d9:f6:02:88:1d:25:50:91:ba:eb:f6:3a:48:6d:e6:b4:
         db:6e:a6:27:3f:6f:10:db:cb:80:e5:a6:60:b8:ce:ee:36:68:
         84:ee:d3:28:7f:77:62:bd:cf:5c:1d:51:c6:38:ae:9f:c1:07:
         d7:24:2d:b6:08:61:14:0a:37:39:6e:99:1e:9a:d5:f5:37:36:
         37:57:09:92:1d:01:44:80:28:6f:7f:32:db:cf:5b:53:7c:e3:
         f5:4d:04:e6:52:14:9f:b3:e4:c7:0c:53:df:d6:d1:50:28:1a:
         45:5c:ff:ce
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUVGf7uUMltFSfC5dpGNqmDL0nngIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA5MjcxOTE0MzFaFw0yMzA5MjYxOTE5MzFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDY2MkQzNDkwQjE3RDk5MjIy
MEEwOEYzRUQxNDk2OUFDRDZFRDM5MzRCMkNDRkE3OTM0QUQ4NkI2QURGMDhDMkE4
NzE3NTJDNUE1NTAzQjdBMDIxM0U4NzA4NzNEQTI5RUZCQzQ5ODlFNEEzNzRBNkFF
NUZDNkEwRkNENzNGRkUyQjUwRkM3MjU0QUIyMTI1MzhGMTkzQTVDOUYxOEIxMTk2
OUY3RTQ2QTAwQjI0MzU4OTlBODUyRTYyQzJBNzExQjEyN0Y3QUVBMzJFRERBNDc1
QzFDRTYyMkQ4MTk0M0NGNENFQjUxRTJFRjVFRjcwRjZBRjlEM0NFRkJENEFBNzdF
N0E0MDEzMEY2NEYzOUIzMkVCNTQzMjZCMTc5REE2REU5MTg2QTgyM0JEMDhGOEMw
MzlCODAwRjNGNTYzNzg1M0Y2N0I1QjE4OERDNzZGOTI0Qzk0QTc4MDIyMTYzRUU5
RDIyNDc3QjRGMzRFNTg3RjhBRjcyMzU5RjVCMEYwMzVBNzgzODQ2QTdDOUYwMzJF
NjYyNzQyRThGQjhFM0U4MjFBOTVCNEJCRjZFQjJERDQ3QjVCRjNGMEMwOTE4MDVC
NDU1MTlCN0Y0RTY4MDczRTExNkY4RTQzQUJDRkEzQkYwREFEMDU2QjU0QzAzMDY5
OTFGNjk4REYyMUJGMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1mLTSQsX2ZIiCgjz7RSWms1u05NLLM+nk0rYa2rfCMKocXUsWlUD
t6AhPocIc9op77xJieSjdKauX8ag/Nc//itQ/HJUqyElOPGTpcnxixGWn35GoAsk
NYmahS5iwqcRsSf3rqMu3aR1wc5iLYGUPPTOtR4u9e9w9q+dPO+9Sqd+ekATD2Tz
mzLrVDJrF52m3pGGqCO9CPjAObgA8/VjeFP2e1sYjcdvkkyUp4AiFj7p0iR3tPNO
WH+K9yNZ9bDwNaeDhGp8nwMuZidC6PuOPoIalbS79ust1Htb8/DAkYBbRVGbf05o
Bz4Rb45Dq8+jvw2tBWtUwDBpkfaY3yG/HwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FPJDdQ+ZGaLDwZOss8mKk6UFm+z5MB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzczMzJlMzIzMDMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sUnIMA0GCSqGSIb3DQEBCwUAA4IBAQCl72oAx8DSA+v5NXoMRA4cjeYyMEBM7jQ0
CmjYP8tSH85KKlfTgpQP+xAPVijGr+x8ezBhEDrt/KcwQa9rDwJtbWDI3DW0/SNg
tpNF3Ss+HMq/542ZqUqALbg+Hijv2YDDwL8dwEIfLLAfOkj6DI+Zeie+eMVvbz4E
S15vlRQn7eu/sAUb46Ldo0TYQqvC5kC5aNn2AogdJVCRuuv2Okht5rTbbqYnP28Q
28uA5aZguM7uNmiE7tMof3divc9cHVHGOK6fwQfXJC22CGEUCjc5bpkemtX1NzY3
VwmSHQFEgChvfzLbz1tTfOP1TQTmUhSfs+THDFPf1tFQKBpFXP/O
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org