Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32322d3232203d3e20323632373733.roa
File:                     3137372e38362e38382e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          f9DOXo+wsyY+HC9ETgApgHUA+kwJ1xEGxJl52Lxwfk0=
Subject key identifier:   8D:9D:BF:7E:53:E5:4D:3D:6C:15:8F:4A:EA:EA:82:BA:9F:6E:F8:63
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       2EFBB4ACE59B2C1FED34FB4A65B9AC573BC67930
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32322d3232203d3e20323632373733.roa
Signing time:             Fri 10 Feb 2023 14:05:03 +0000
ROA not before:           Fri 10 Feb 2023 14:00:03 +0000
ROA not after:            Fri 09 Feb 2024 14:05:03 +0000
asID:                     262773
IP address blocks:        177.86.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fb:b4:ac:e5:9b:2c:1f:ed:34:fb:4a:65:b9:ac:57:3b:c6:79:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb 10 14:00:03 2023 GMT
            Not After : Feb  9 14:05:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:ad:85:af:9d:53:fd:96:96:2e:fd:21:61:
                    f2:58:a6:01:5d:1f:dc:dd:90:96:1e:b4:d4:75:a5:
                    52:a4:3b:90:2e:9e:5a:77:3a:3b:08:27:c7:c0:d5:
                    d1:65:e5:3f:fc:34:d1:1b:c9:e5:f3:ac:25:e9:6e:
                    26:3e:0b:f7:39:42:2e:b4:24:66:03:f1:bc:0b:ba:
                    03:b4:f6:6a:70:75:ec:c8:2c:3e:25:3f:30:cb:c3:
                    85:38:4e:1f:b6:ef:c0:27:5d:11:7a:d8:54:9b:5e:
                    5b:87:c9:b4:fc:b9:f7:58:3e:78:26:59:d9:04:24:
                    b9:fd:05:b3:e4:06:8a:13:ac:e7:9a:d2:ad:2e:c8:
                    01:db:d7:b6:67:e1:1b:c0:75:37:80:46:25:e8:0b:
                    bb:6c:8b:e0:be:55:9a:c0:9e:4d:62:37:7c:d0:e5:
                    4b:39:c7:31:70:64:6b:b4:d5:77:03:81:ef:a8:5f:
                    1b:74:86:50:b8:a8:4f:7c:12:ae:23:fd:3c:56:7a:
                    c6:b6:8e:47:7b:7c:53:99:d8:b0:2c:f4:3b:e6:50:
                    fe:93:3e:40:d2:11:d5:fa:06:5f:56:a9:0b:3c:eb:
                    55:a5:38:46:04:4d:9a:39:12:c5:43:74:23:85:17:
                    14:c6:4e:bd:e2:aa:95:37:ea:7d:dd:ef:df:ca:1e:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9D:BF:7E:53:E5:4D:3D:6C:15:8F:4A:EA:EA:82:BA:9F:6E:F8:63
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e38382e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:56:7d:d0:a7:58:14:6a:41:db:c1:59:dc:a3:a9:f2:91:e3:
         6c:0b:a3:d8:1a:d1:ed:61:27:c3:46:d4:25:8c:dc:a5:3a:8b:
         4d:ff:3e:be:e0:52:d2:25:87:86:81:f7:c4:a8:91:b1:7d:67:
         94:f1:69:88:73:97:32:6e:f3:45:8c:05:a5:a0:78:67:04:ce:
         07:64:e3:ce:a8:52:04:04:2d:4d:a4:0c:24:b0:9e:af:1b:b7:
         7a:07:b1:99:29:0f:15:24:bc:74:d6:5c:1a:d7:18:0c:56:e1:
         75:0d:5a:f0:cf:72:d6:8d:8f:85:7e:08:8f:df:55:ad:64:71:
         d3:31:49:da:b9:6a:d8:6d:ce:89:fa:ae:d2:c4:54:32:6d:5c:
         bf:a7:10:93:de:19:36:93:75:15:c9:e4:d2:c2:2d:40:93:e8:
         37:89:98:9c:e3:d4:27:e1:7e:9f:0e:74:2d:b2:93:eb:6a:4c:
         fe:cf:52:e4:c4:de:8c:01:34:a2:11:a9:ce:f6:57:e6:e5:cf:
         a5:a2:d2:8c:b0:cb:78:d5:72:5f:e5:de:90:89:c2:42:0c:ab:
         f2:22:fc:9b:d5:20:ee:50:22:0a:50:ac:69:f6:42:ca:be:7b:
         da:c7:45:c9:b1:fe:24:d4:30:dd:e3:1b:26:bb:a2:97:57:3d:
         d4:51:bc:dd
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIULvu0rOWbLB/tNPtKZbmsVzvGeTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMzAyMTAxNDAwMDNaFw0yNDAyMDkxNDA1MDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg0RkFEODVBRjlENTNGRDk2
OTYyRUZEMjE2MUYyNThBNjAxNUQxRkRDREQ5MDk2MUVCNEQ0NzVBNTUyQTQzQjkw
MkU5RTVBNzczQTNCMDgyN0M3QzBENUQxNjVFNTNGRkMzNEQxMUJDOUU1RjNBQzI1
RTk2RTI2M0UwQkY3Mzk0MjJFQjQyNDY2MDNGMUJDMEJCQTAzQjRGNjZBNzA3NUVD
QzgyQzNFMjUzRjMwQ0JDMzg1Mzg0RTFGQjZFRkMwMjc1RDExN0FEODU0OUI1RTVC
ODdDOUI0RkNCOUY3NTgzRTc4MjY1OUQ5MDQyNEI5RkQwNUIzRTQwNjhBMTNBQ0U3
OUFEMkFEMkVDODAxREJEN0I2NjdFMTFCQzA3NTM3ODA0NjI1RTgwQkJCNkM4QkUw
QkU1NTlBQzA5RTRENjIzNzdDRDBFNTRCMzlDNzMxNzA2NDZCQjRENTc3MDM4MUVG
QTg1RjFCNzQ4NjUwQjhBODRGN0MxMkFFMjNGRDNDNTY3QUM2QjY4RTQ3N0I3QzUz
OTlEOEIwMkNGNDNCRTY1MEZFOTMzRTQwRDIxMUQ1RkEwNjVGNTZBOTBCM0NFQjU1
QTUzODQ2MDQ0RDlBMzkxMkM1NDM3NDIzODUxNzE0QzY0RUJERTJBQTk1MzdFQTdE
RERFRkRGQ0ExRUZGQ0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyE+tha+dU/2Wli79IWHyWKYBXR/c3ZCWHrTUdaVSpDuQLp5adzo7
CCfHwNXRZeU//DTRG8nl86wl6W4mPgv3OUIutCRmA/G8C7oDtPZqcHXsyCw+JT8w
y8OFOE4ftu/AJ10RethUm15bh8m0/Ln3WD54JlnZBCS5/QWz5AaKE6znmtKtLsgB
29e2Z+EbwHU3gEYl6Au7bIvgvlWawJ5NYjd80OVLOccxcGRrtNV3A4HvqF8bdIZQ
uKhPfBKuI/08VnrGto5He3xTmdiwLPQ75lD+kz5A0hHV+gZfVqkLPOtVpThGBE2a
ORLFQ3QjhRcUxk694qqVN+p93e/fyh7/zwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FI2dv35T5U09bBWPSurqgrqfbvhjMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzgzNjJlMzgzODJl
MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArFW
WDANBgkqhkiG9w0BAQsFAAOCAQEAnlZ90KdYFGpB28FZ3KOp8pHjbAuj2BrR7WEn
w0bUJYzcpTqLTf8+vuBS0iWHhoH3xKiRsX1nlPFpiHOXMm7zRYwFpaB4ZwTOB2Tj
zqhSBAQtTaQMJLCerxu3egexmSkPFSS8dNZcGtcYDFbhdQ1a8M9y1o2PhX4Ij99V
rWRx0zFJ2rlq2G3Oifqu0sRUMm1cv6cQk94ZNpN1Fcnk0sItQJPoN4mYnOPUJ+F+
nw50LbKT62pM/s9S5MTejAE0ohGpzvZX5uXPpaLSjLDLeNVyX+XekInCQgyr8iL8
m9Ug7lAiClCsafZCyr572sdFybH+JNQw3eMbJruil1c91FG83Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org