Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39302e302f32332d3233203d3e203532353638.roa
File:                     3137372e38362e39302e302f32332d3233203d3e203532353638.roa (raw, json)
Hash identifier:          vR9uUs/tx+QPc6rVFR8Qg8R8TC/aQF6Bb2hG9/92ViU=
Subject key identifier:   D6:85:00:BC:15:6D:9A:98:57:62:A3:6F:E9:B8:18:00:F3:74:F7:C3
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       4FE6FA21E5938221DD6939DD143295325C4C85AD
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39302e302f32332d3233203d3e203532353638.roa
Signing time:             Tue 07 Feb 2023 20:04:10 +0000
ROA not before:           Tue 07 Feb 2023 19:59:10 +0000
ROA not after:            Tue 06 Feb 2024 20:04:10 +0000
asID:                     52568
IP address blocks:        177.86.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e6:fa:21:e5:93:82:21:dd:69:39:dd:14:32:95:32:5c:4c:85:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb  7 19:59:10 2023 GMT
            Not After : Feb  6 20:04:10 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:63:27:e0:f4:23:37:58:05:ba:b7:94:35:
                    16:04:27:2f:9c:12:d7:c7:56:84:02:c5:6e:71:fb:
                    94:df:43:ac:ef:67:f9:0c:f4:02:79:df:f3:80:46:
                    54:03:72:a0:89:21:ea:f8:37:33:09:d5:37:52:6f:
                    3b:c6:20:1e:a6:fb:22:9a:b0:38:20:c3:21:5e:fe:
                    26:d5:9e:71:53:e4:2b:a1:6f:7b:cc:fd:b0:3a:68:
                    6d:9d:f1:52:36:36:df:d3:e7:0c:68:b2:ba:58:34:
                    bf:1d:82:70:32:f1:f9:25:8e:1e:97:63:81:03:dd:
                    67:48:51:a3:4a:b0:a3:d2:dc:cb:65:6d:bf:3b:db:
                    47:81:c3:1c:ee:45:a8:45:ef:68:b7:2d:2c:4e:e8:
                    be:4c:dc:b5:97:3b:c1:66:0c:61:ea:92:94:4a:97:
                    52:0c:20:ba:a5:dd:43:8d:51:19:80:cd:53:05:d5:
                    ef:c7:70:64:62:72:49:39:b6:74:be:ea:35:ca:79:
                    ad:af:8b:af:89:ea:38:92:a1:e3:ce:96:3e:aa:c0:
                    c1:ef:33:c9:86:d6:86:c1:b6:c3:df:cb:d8:da:13:
                    49:cc:5f:2d:79:53:fb:8b:c7:11:0f:40:b8:ca:1d:
                    9d:99:9b:f0:80:7a:ca:41:a6:cb:aa:3e:de:09:18:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:85:00:BC:15:6D:9A:98:57:62:A3:6F:E9:B8:18:00:F3:74:F7:C3
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39302e302f32332d3233203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:57:91:6f:29:19:8f:0f:30:39:59:84:90:89:fa:6e:bc:db:
         8d:6a:ce:20:60:ce:e5:56:59:a5:c2:6f:9b:a4:7f:e6:6f:67:
         0c:ab:c9:5a:4c:a3:58:a1:12:7f:7e:35:73:a9:74:0e:5b:b6:
         98:c7:39:50:45:7e:a4:ee:e6:86:b9:2e:d9:f5:14:c3:ca:ed:
         7f:f3:ea:72:de:ba:26:ab:79:b6:38:08:7e:66:90:df:cd:a6:
         07:18:8e:7b:66:5e:58:e9:78:20:b0:5e:95:f9:06:ca:a5:65:
         ec:7f:f5:76:94:51:32:83:fe:b2:17:21:05:23:72:91:5a:b0:
         1d:2d:fc:bf:2e:28:7f:fc:a4:51:d4:c2:1b:94:58:38:2f:cb:
         fb:f7:7a:5a:0a:99:cc:b0:aa:3f:87:8b:e9:2f:6f:81:1e:29:
         fc:f6:ab:34:b7:81:67:af:00:46:01:79:98:a5:ba:91:84:8a:
         87:f6:5f:ef:02:9f:de:bd:fa:fd:5b:54:07:91:79:94:24:34:
         19:97:ea:8c:00:ba:5b:0d:af:b5:09:6a:d8:a7:eb:a9:19:c3:
         bf:53:2f:ae:8f:b0:6b:68:64:4f:ec:51:00:01:a8:ad:df:99:
         7a:42:93:d3:15:a4:91:75:44:f8:7d:d1:b2:5e:fb:c0:78:7d:
         d8:28:2f:c2
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUT+b6IeWTgiHdaTndFDKVMlxMha0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMzAyMDcxOTU5MTBaFw0yNDAyMDYyMDA0MTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDI4NDYzMjdFMEY0MjMzNzU4
MDVCQUI3OTQzNTE2MDQyNzJGOUMxMkQ3Qzc1Njg0MDJDNTZFNzFGQjk0REY0M0FD
RUY2N0Y5MENGNDAyNzlERkYzODA0NjU0MDM3MkEwODkyMUVBRjgzNzMzMDlENTM3
NTI2RjNCQzYyMDFFQTZGQjIyOUFCMDM4MjBDMzIxNUVGRTI2RDU5RTcxNTNFNDJC
QTE2RjdCQ0NGREIwM0E2ODZEOURGMTUyMzYzNkRGRDNFNzBDNjhCMkJBNTgzNEJG
MUQ4MjcwMzJGMUY5MjU4RTFFOTc2MzgxMDNERDY3NDg1MUEzNEFCMEEzRDJEQ0NC
NjU2REJGM0JEQjQ3ODFDMzFDRUU0NUE4NDVFRjY4QjcyRDJDNEVFOEJFNENEQ0I1
OTczQkMxNjYwQzYxRUE5Mjk0NEE5NzUyMEMyMEJBQTVERDQzOEQ1MTE5ODBDRDUz
MDVENUVGQzc3MDY0NjI3MjQ5MzlCNjc0QkVFQTM1Q0E3OUFEQUY4QkFGODlFQTM4
OTJBMUUzQ0U5NjNFQUFDMEMxRUYzM0M5ODZENjg2QzFCNkMzREZDQkQ4REExMzQ5
Q0M1RjJENzk1M0ZCOEJDNzExMEY0MEI4Q0ExRDlEOTk5QkYwODA3QUNBNDFBNkNC
QUEzRURFMDkxOENCQ0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0oRjJ+D0IzdYBbq3lDUWBCcvnBLXx1aEAsVucfuU30Os72f5DPQC
ed/zgEZUA3KgiSHq+DczCdU3Um87xiAepvsimrA4IMMhXv4m1Z5xU+QroW97zP2w
OmhtnfFSNjbf0+cMaLK6WDS/HYJwMvH5JY4el2OBA91nSFGjSrCj0tzLZW2/O9tH
gcMc7kWoRe9oty0sTui+TNy1lzvBZgxh6pKUSpdSDCC6pd1DjVEZgM1TBdXvx3Bk
YnJJObZ0vuo1ynmtr4uvieo4kqHjzpY+qsDB7zPJhtaGwbbD38vY2hNJzF8teVP7
i8cRD0C4yh2dmZvwgHrKQabLqj7eCRjLzwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FNaFALwVbZqYV2Kjb+m4GADzdPfDMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzgzNjJlMzkzMDJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1MzIzNTM2Mzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGxVlow
DQYJKoZIhvcNAQELBQADggEBAFhXkW8pGY8PMDlZhJCJ+m68241qziBgzuVWWaXC
b5ukf+ZvZwyryVpMo1ihEn9+NXOpdA5btpjHOVBFfqTu5oa5Ltn1FMPK7X/z6nLe
uiarebY4CH5mkN/NpgcYjntmXljpeCCwXpX5BsqlZex/9XaUUTKD/rIXIQUjcpFa
sB0t/L8uKH/8pFHUwhuUWDgvy/v3eloKmcywqj+Hi+kvb4EeKfz2qzS3gWevAEYB
eZilupGEiof2X+8Cn969+v1bVAeReZQkNBmX6owAulsNr7UJatin66kZw79TL66P
sGtoZE/sUQABqK3fmXpCk9MVpJF1RPh90bJe+8B4fdgoL8I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org