Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39322e302f32322d3232203d3e20323632373733.roa
File:                     3137372e38362e39322e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          f2hu2kILAFKzVFKC8IppPM2KIEVuC/7+E6k1uQQCHks=
Subject key identifier:   3F:4C:55:FF:A4:7F:15:25:37:46:B6:82:F1:5B:F6:5F:BF:9E:9B:75
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       618554AB06152CE0917A989F73AD9A4E6F9B78F0
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39322e302f32322d3232203d3e20323632373733.roa
Signing time:             Fri 10 Feb 2023 14:05:03 +0000
ROA not before:           Fri 10 Feb 2023 14:00:03 +0000
ROA not after:            Fri 09 Feb 2024 14:05:03 +0000
asID:                     262773
IP address blocks:        177.86.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:85:54:ab:06:15:2c:e0:91:7a:98:9f:73:ad:9a:4e:6f:9b:78:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Feb 10 14:00:03 2023 GMT
            Not After : Feb  9 14:05:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:46:b2:4b:9f:9d:ee:9c:52:af:ab:89:89:
                    66:cc:ae:8a:8d:31:0f:1e:9c:ab:c8:19:51:dc:bc:
                    00:c6:f1:5d:a1:84:0a:26:fe:3b:4e:1e:21:8c:5e:
                    7c:53:20:a8:e2:44:b3:46:9a:65:73:63:02:7f:bf:
                    4f:ac:d3:eb:fe:ab:d1:19:41:8c:b7:99:2d:8e:c8:
                    f5:d9:3f:bc:70:65:0c:a0:30:02:6a:90:32:9c:42:
                    7c:34:13:bf:74:92:0f:1b:24:40:27:c9:fb:b2:b0:
                    17:e6:d0:23:fd:7f:62:25:ea:c3:cf:1d:8c:77:d9:
                    1c:ad:68:28:4d:23:99:18:91:f7:c9:9e:e0:8f:c2:
                    af:18:4d:0e:7c:63:08:a7:4e:02:d3:42:f5:78:73:
                    12:ab:4b:94:ae:10:dc:cb:55:68:64:46:08:d7:8b:
                    bf:b3:f6:3c:a0:98:8e:7b:35:ae:fe:2d:6a:1b:4f:
                    1e:e7:66:54:e5:9e:28:46:86:9d:9e:55:47:33:a8:
                    a8:ba:64:cb:7e:87:f2:cf:93:3e:37:56:3e:88:58:
                    58:01:ce:38:25:8e:63:64:72:4f:8e:d9:5e:ec:c2:
                    21:a7:9a:3a:fe:e5:87:4c:03:16:b4:74:97:c9:78:
                    a8:b2:67:9e:2c:9d:44:ed:10:29:cf:67:01:63:91:
                    7d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4C:55:FF:A4:7F:15:25:37:46:B6:82:F1:5B:F6:5F:BF:9E:9B:75
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e39322e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e3:69:4e:d6:8c:06:52:f0:0b:9a:0b:c1:e6:c5:2e:0a:dd:ae:
         dd:6e:0b:98:2a:d5:2b:11:4c:f9:38:8b:0d:ab:65:05:d7:1e:
         80:1b:13:38:48:ff:f4:af:16:bc:23:35:12:7a:42:00:fa:79:
         b5:88:72:61:fe:2c:e6:79:66:8f:ca:6a:ef:b3:da:f3:70:6b:
         0c:d1:81:fa:69:71:30:e5:c4:4f:64:12:c9:0d:82:fa:6d:85:
         23:4e:1a:32:83:4c:a4:a4:86:f2:74:50:81:9a:02:63:cd:9e:
         1d:b2:00:1b:41:9e:28:09:1b:67:cd:fa:9f:e2:8f:5d:ac:b9:
         11:30:e4:e7:31:bd:ab:39:f7:2c:91:28:f0:3e:70:6a:c9:8c:
         63:0d:b2:ce:c3:6b:34:1f:42:0c:94:93:37:17:65:d1:f2:7f:
         90:7f:9e:9a:16:d3:35:c3:ed:62:90:f6:ac:66:45:f5:b2:90:
         25:3b:b5:a5:3c:3e:c2:e8:4c:9b:3b:ad:52:44:cd:75:16:b7:
         9a:02:31:29:fe:45:fc:3b:6d:b3:36:a2:4d:7f:60:15:61:36:
         86:74:d1:16:74:56:73:0d:53:e2:f7:9e:e8:02:d3:9d:90:e5:
         dd:67:42:33:f6:19:dc:de:6c:99:bf:7e:b2:bc:2d:50:a1:09:
         0f:79:51:63
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUYYVUqwYVLOCRepifc62aTm+bePAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMzAyMTAxNDAwMDNaFw0yNDAyMDkxNDA1MDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzM1MDQ2QjI0QjlGOURFRTlD
NTJBRkFCODk4OTY2Q0NBRThBOEQzMTBGMUU5Q0FCQzgxOTUxRENCQzAwQzZGMTVE
QTE4NDBBMjZGRTNCNEUxRTIxOEM1RTdDNTMyMEE4RTI0NEIzNDY5QTY1NzM2MzAy
N0ZCRjRGQUNEM0VCRkVBQkQxMTk0MThDQjc5OTJEOEVDOEY1RDkzRkJDNzA2NTBD
QTAzMDAyNkE5MDMyOUM0MjdDMzQxM0JGNzQ5MjBGMUIyNDQwMjdDOUZCQjJCMDE3
RTZEMDIzRkQ3RjYyMjVFQUMzQ0YxRDhDNzdEOTFDQUQ2ODI4NEQyMzk5MTg5MUY3
Qzk5RUUwOEZDMkFGMTg0RDBFN0M2MzA4QTc0RTAyRDM0MkY1Nzg3MzEyQUI0Qjk0
QUUxMERDQ0I1NTY4NjQ0NjA4RDc4QkJGQjNGNjNDQTA5ODhFN0IzNUFFRkUyRDZB
MUI0RjFFRTc2NjU0RTU5RTI4NDY4NjlEOUU1NTQ3MzNBOEE4QkE2NENCN0U4N0Yy
Q0Y5MzNFMzc1NjNFODg1ODU4MDFDRTM4MjU4RTYzNjQ3MjRGOEVEOTVFRUNDMjIx
QTc5QTNBRkVFNTg3NEMwMzE2QjQ3NDk3Qzk3OEE4QjI2NzlFMkM5RDQ0RUQxMDI5
Q0Y2NzAxNjM5MTdEQTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw1BGskufne6cUq+riYlmzK6KjTEPHpyryBlR3LwAxvFdoYQKJv47
Th4hjF58UyCo4kSzRpplc2MCf79PrNPr/qvRGUGMt5ktjsj12T+8cGUMoDACapAy
nEJ8NBO/dJIPGyRAJ8n7srAX5tAj/X9iJerDzx2Md9kcrWgoTSOZGJH3yZ7gj8Kv
GE0OfGMIp04C00L1eHMSq0uUrhDcy1VoZEYI14u/s/Y8oJiOezWu/i1qG08e52ZU
5Z4oRoadnlVHM6ioumTLfofyz5M+N1Y+iFhYAc44JY5jZHJPjtle7MIhp5o6/uWH
TAMWtHSXyXiosmeeLJ1E7RApz2cBY5F9oQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FD9MVf+kfxUlN0a2gvFb9l+/npt1MB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzczNzJlMzgzNjJlMzkzMjJl
MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArFW
XDANBgkqhkiG9w0BAQsFAAOCAQEA42lO1owGUvALmgvB5sUuCt2u3W4LmCrVKxFM
+TiLDatlBdcegBsTOEj/9K8WvCM1EnpCAPp5tYhyYf4s5nlmj8pq77Pa83BrDNGB
+mlxMOXET2QSyQ2C+m2FI04aMoNMpKSG8nRQgZoCY82eHbIAG0GeKAkbZ836n+KP
Xay5ETDk5zG9qzn3LJEo8D5wasmMYw2yzsNrNB9CDJSTNxdl0fJ/kH+emhbTNcPt
YpD2rGZF9bKQJTu1pTw+wuhMmzutUkTNdRa3mgIxKf5F/DttszaiTX9gFWE2hnTR
FnRWcw1T4vee6ALTnZDl3WdCM/YZ3N5smb9+srwtUKEJD3lRYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org