Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230312e302f32342d3234203d3e20323632373733.roa
File:                     3137372e37332e3230312e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          +HdDR8dPcE226Q2WJ9qpnPkurZe5KjG2ARZ0eHyckvQ=
Subject key identifier:   07:17:D0:41:E0:7C:40:A4:47:F6:D8:1E:F5:F6:02:D3:2E:AD:DE:23
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       30D6E6328219A556DD030F05521EF707AE256F08
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230312e302f32342d3234203d3e20323632373733.roa
Signing time:             Tue 27 Sep 2022 19:19:19 +0000
ROA not before:           Tue 27 Sep 2022 19:14:19 +0000
ROA not after:            Tue 26 Sep 2023 19:19:19 +0000
asID:                     262773
IP address blocks:        177.73.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d6:e6:32:82:19:a5:56:dd:03:0f:05:52:1e:f7:07:ae:25:6f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Sep 27 19:14:19 2022 GMT
            Not After : Sep 26 19:19:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:ef:c6:2e:f8:e0:5b:87:4a:78:7c:b2:28:
                    d2:88:f4:14:20:91:56:3a:e8:36:ce:de:4f:9d:68:
                    ee:13:20:25:ec:11:09:4e:46:c2:6c:79:79:f3:2f:
                    0e:e7:50:fd:ff:e4:20:7c:3a:68:c6:a6:64:70:e0:
                    f6:59:00:de:3c:11:e9:5d:25:33:70:d9:30:17:ba:
                    a8:18:bf:28:2d:3a:b2:67:c3:94:1c:90:3a:19:5e:
                    8d:c2:4a:83:f8:8f:da:0e:fe:d0:16:79:f6:7f:2c:
                    b4:22:f9:16:d1:73:37:78:5d:de:27:bb:b0:e8:62:
                    aa:3b:41:9c:39:80:6b:f4:df:91:70:08:65:31:2a:
                    8d:ea:4b:5c:fb:47:a3:32:cd:c7:a0:ea:8c:49:13:
                    92:76:49:6f:73:98:11:2b:08:95:89:c8:3c:54:6b:
                    3c:b7:3f:32:ee:29:dc:ca:76:fc:93:3b:fc:0a:2d:
                    4d:46:4d:6c:84:0b:94:a0:35:44:98:63:62:ee:5b:
                    35:38:0e:e3:ff:b9:0a:28:89:4c:a2:03:2c:75:ab:
                    5c:f8:29:46:27:8a:48:69:50:62:c5:a3:f6:6b:7a:
                    36:d2:5d:fe:70:9c:97:37:77:e5:31:5d:ff:ff:34:
                    51:82:01:9a:57:8b:59:93:af:02:51:1a:08:49:b2:
                    cc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:17:D0:41:E0:7C:40:A4:47:F6:D8:1E:F5:F6:02:D3:2E:AD:DE:23
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e37332e3230312e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:82:9a:53:05:0a:4b:37:68:9a:e4:78:f3:fd:80:94:e6:c3:
         6c:cc:76:77:33:41:0b:07:1c:28:cb:bd:33:b8:50:bc:ad:8b:
         d4:64:a4:73:d7:3a:bd:f2:0d:ca:30:cb:51:3e:08:dc:c4:bd:
         0e:b4:cd:2b:83:bd:1c:7d:d3:aa:e2:8d:8a:43:a6:a2:22:82:
         10:ee:a4:6c:0a:e4:fb:56:b0:ae:70:8e:48:3f:22:83:f4:29:
         35:60:f0:2f:f0:90:11:80:85:9d:f2:d8:04:d4:62:94:88:6d:
         c2:c8:33:b4:71:aa:97:dd:6a:83:e1:40:51:f9:38:8c:d6:ec:
         5a:b3:d5:d4:e9:b9:d4:6d:c7:ef:4f:65:c2:79:95:08:41:93:
         65:a8:ac:d2:21:fa:00:be:71:f4:06:b3:ef:a0:f5:9a:b7:71:
         7b:88:02:43:3d:5b:aa:8e:ea:e8:c0:af:74:13:a8:38:16:36:
         f6:d2:6a:10:13:1c:24:b1:e5:4e:ed:ee:fd:18:33:d0:da:96:
         61:62:a2:3b:c5:6e:6f:10:34:09:34:d5:8d:3e:e3:0c:f9:4c:
         18:27:a3:44:14:9f:98:7f:b3:51:92:6d:71:2a:c5:d4:c5:b7:
         08:74:a9:1d:e8:9b:b2:14:1d:56:7b:0b:0a:ca:c3:53:a8:fb:
         ef:3c:03:cf
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUMNbmMoIZpVbdAw8FUh73B64lbwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA5MjcxOTE0MTlaFw0yMzA5MjYxOTE5MTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDMxNUVGQzYyRUY4RTA1Qjg3
NEE3ODdDQjIyOEQyODhGNDE0MjA5MTU2M0FFODM2Q0VERTRGOUQ2OEVFMTMyMDI1
RUMxMTA5NEU0NkMyNkM3OTc5RjMyRjBFRTc1MEZERkZFNDIwN0MzQTY4QzZBNjY0
NzBFMEY2NTkwMERFM0MxMUU5NUQyNTMzNzBEOTMwMTdCQUE4MThCRjI4MkQzQUIy
NjdDMzk0MUM5MDNBMTk1RThEQzI0QTgzRjg4RkRBMEVGRUQwMTY3OUY2N0YyQ0I0
MjJGOTE2RDE3MzM3Nzg1RERFMjdCQkIwRTg2MkFBM0I0MTlDMzk4MDZCRjRERjkx
NzAwODY1MzEyQThERUE0QjVDRkI0N0EzMzJDREM3QTBFQThDNDkxMzkyNzY0OTZG
NzM5ODExMkIwODk1ODlDODNDNTQ2QjNDQjczRjMyRUUyOURDQ0E3NkZDOTMzQkZD
MEEyRDRENDY0RDZDODQwQjk0QTAzNTQ0OTg2MzYyRUU1QjM1MzgwRUUzRkZCOTBB
Mjg4OTRDQTIwMzJDNzVBQjVDRjgyOTQ2Mjc4QTQ4Njk1MDYyQzVBM0Y2NkI3QTM2
RDI1REZFNzA5Qzk3Mzc3N0U1MzE1REZGRkYzNDUxODIwMTlBNTc4QjU5OTNBRjAy
NTExQTA4NDlCMkNDNkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0xXvxi744FuHSnh8sijSiPQUIJFWOug2zt5PnWjuEyAl7BEJTkbC
bHl58y8O51D9/+QgfDpoxqZkcOD2WQDePBHpXSUzcNkwF7qoGL8oLTqyZ8OUHJA6
GV6NwkqD+I/aDv7QFnn2fyy0IvkW0XM3eF3eJ7uw6GKqO0GcOYBr9N+RcAhlMSqN
6ktc+0ejMs3HoOqMSROSdklvc5gRKwiVicg8VGs8tz8y7incynb8kzv8Ci1NRk1s
hAuUoDVEmGNi7ls1OA7j/7kKKIlMogMsdatc+ClGJ4pIaVBixaP2a3o20l3+cJyX
N3flMV3//zRRggGaV4tZk68CURoISbLMbQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FAcX0EHgfECkR/bYHvX2AtMurd4jMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzczMzJlMzIzMDMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sUnJMA0GCSqGSIb3DQEBCwUAA4IBAQCkgppTBQpLN2ia5Hjz/YCU5sNszHZ3M0EL
Bxwoy70zuFC8rYvUZKRz1zq98g3KMMtRPgjcxL0OtM0rg70cfdOq4o2KQ6aiIoIQ
7qRsCuT7VrCucI5IPyKD9Ck1YPAv8JARgIWd8tgE1GKUiG3CyDO0caqX3WqD4UBR
+TiM1uxas9XU6bnUbcfvT2XCeZUIQZNlqKzSIfoAvnH0BrPvoPWat3F7iAJDPVuq
jurowK90E6g4Fjb20moQExwkseVO7e79GDPQ2pZhYqI7xW5vEDQJNNWNPuMM+UwY
J6NEFJ+Yf7NRkm1xKsXUxbcIdKkd6JuyFB1WewsKysNTqPvvPAPP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org