Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139322e302f32322d3232203d3e20323632373733.roa
File:                     3138362e3233322e3139322e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier:          eUCx7xgwRp8IAQgxDWQ4okBYb4Q/LXADk0aagPosBuo=
Subject key identifier:   15:19:23:37:75:0E:BF:26:57:DD:BD:64:2D:09:9E:74:8C:37:70:E2
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       49744F9A008D505F0E853FF67DFC595BC7C83237
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139322e302f32322d3232203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 14:05:12 +0000
ROA not before:           Tue 09 Aug 2022 14:00:12 +0000
ROA not after:            Tue 08 Aug 2023 14:05:12 +0000
asID:                     262773
IP address blocks:        186.232.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:74:4f:9a:00:8d:50:5f:0e:85:3f:f6:7d:fc:59:5b:c7:c8:32:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 14:00:12 2022 GMT
            Not After : Aug  8 14:05:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:78:d0:1f:3f:53:d2:de:d2:60:f1:16:55:
                    60:5b:19:a8:3c:f1:5b:a7:c6:52:b7:0b:28:f5:21:
                    90:7a:40:dd:08:e5:f1:16:36:bd:fa:d7:85:59:96:
                    12:e9:07:56:cc:db:8f:c2:6b:c9:21:40:a4:53:84:
                    aa:d6:7c:a5:57:65:e7:6d:b8:29:98:c9:5a:6d:79:
                    ca:2d:c2:ef:e3:9b:2c:b9:0e:36:7e:d9:54:0e:b3:
                    22:80:87:75:58:0f:5c:e0:44:dc:32:7d:0f:86:45:
                    c3:b9:4e:e2:16:c9:df:f6:90:21:c3:25:6b:a0:12:
                    be:9f:a7:31:dc:8e:fe:72:9f:75:3a:e2:c1:ad:8a:
                    85:87:f2:be:1e:b5:1f:6c:0d:f5:a7:7c:c3:67:24:
                    48:4c:d8:32:25:f7:0e:dc:94:67:6e:c8:b3:6f:19:
                    b4:13:34:85:29:78:af:63:bd:f5:ba:d8:8b:26:a2:
                    9f:97:ce:f3:d1:c8:e4:8d:2a:d2:00:e8:a3:50:1b:
                    e9:73:87:f3:2d:cd:e7:99:63:26:86:88:54:31:e4:
                    ea:03:06:6e:72:c3:36:5b:f8:bd:5c:55:80:5e:67:
                    33:ec:17:52:2a:ad:f7:c4:b9:0e:87:8d:f7:cb:37:
                    dd:4c:47:fd:d3:f6:32:05:60:f5:88:1f:30:dc:0d:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:19:23:37:75:0E:BF:26:57:DD:BD:64:2D:09:9E:74:8C:37:70:E2
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138362e3233322e3139322e302f32322d3232203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:84:4f:24:54:14:b5:b8:80:da:32:cd:fc:e3:d9:cf:1c:ee:
         76:ff:f8:8e:ba:57:dc:7d:83:77:32:4d:56:e3:5c:9c:ab:c7:
         37:bd:fd:89:87:3e:5a:01:17:9e:de:3c:39:bd:44:fb:01:f8:
         f3:9b:8f:54:2c:44:46:47:03:7d:01:90:2f:40:76:46:94:5a:
         e6:74:7e:18:e2:95:d2:fc:cc:74:b2:b9:a9:0e:87:b8:50:4f:
         92:85:14:ac:4f:88:c3:83:26:42:f0:10:c7:9a:06:b8:4a:28:
         17:b7:76:ac:0b:a0:03:e2:ae:72:c4:8a:43:35:6e:17:e6:8c:
         aa:9b:af:7a:1b:78:36:cb:11:79:fc:2d:52:2c:8d:41:7c:56:
         d0:65:de:3f:60:b5:67:b3:5b:2e:d6:60:eb:e8:84:2d:a0:06:
         d7:28:fb:78:d1:4c:b1:fe:da:74:b3:21:f1:48:2f:fc:b3:b0:
         bd:84:03:01:d6:98:9b:d0:21:3a:0f:5f:b5:33:b8:e1:67:0b:
         65:4f:9c:69:b6:4a:46:c2:7b:94:40:99:50:ca:3b:b7:66:38:
         2d:a9:0f:05:92:37:cc:10:77:a3:ac:89:53:20:72:bd:4b:1f:
         d2:c3:fa:6d:56:ec:dd:b6:38:cf:be:7e:16:ee:de:6d:08:13:
         65:b3:fa:5e
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUSXRPmgCNUF8OhT/2ffxZW8fIMjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA4MDkxNDAwMTJaFw0yMzA4MDgxNDA1MTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkNEQjc4RDAxRjNGNTNEMkRF
RDI2MEYxMTY1NTYwNUIxOUE4M0NGMTVCQTdDNjUyQjcwQjI4RjUyMTkwN0E0MERE
MDhFNUYxMTYzNkJERkFENzg1NTk5NjEyRTkwNzU2Q0NEQjhGQzI2QkM5MjE0MEE0
NTM4NEFBRDY3Q0E1NTc2NUU3NkRCODI5OThDOTVBNkQ3OUNBMkRDMkVGRTM5QjJD
QjkwRTM2N0VEOTU0MEVCMzIyODA4Nzc1NTgwRjVDRTA0NERDMzI3RDBGODY0NUMz
Qjk0RUUyMTZDOURGRjY5MDIxQzMyNTZCQTAxMkJFOUZBNzMxREM4RUZFNzI5Rjc1
M0FFMkMxQUQ4QTg1ODdGMkJFMUVCNTFGNkMwREY1QTc3Q0MzNjcyNDQ4NENEODMy
MjVGNzBFREM5NDY3NkVDOEIzNkYxOUI0MTMzNDg1Mjk3OEFGNjNCREY1QkFEODhC
MjZBMjlGOTdDRUYzRDFDOEU0OEQyQUQyMDBFOEEzNTAxQkU5NzM4N0YzMkRDREU3
OTk2MzI2ODY4ODU0MzFFNEVBMDMwNjZFNzJDMzM2NUJGOEJENUM1NTgwNUU2NzMz
RUMxNzUyMkFBREY3QzRCOTBFODc4REY3Q0IzN0RENEM0N0ZERDNGNjMyMDU2MEY1
ODgxRjMwREMwREIwMEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvNt40B8/U9Le0mDxFlVgWxmoPPFbp8ZStwso9SGQekDdCOXxFja9
+teFWZYS6QdWzNuPwmvJIUCkU4Sq1nylV2XnbbgpmMlabXnKLcLv45ssuQ42ftlU
DrMigId1WA9c4ETcMn0PhkXDuU7iFsnf9pAhwyVroBK+n6cx3I7+cp91OuLBrYqF
h/K+HrUfbA31p3zDZyRITNgyJfcO3JRnbsizbxm0EzSFKXivY731utiLJqKfl87z
0cjkjSrSAOijUBvpc4fzLc3nmWMmhohUMeTqAwZucsM2W/i9XFWAXmcz7BdSKq33
xLkOh433yzfdTEf90/YyBWD1iB8w3A2wCwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FBUZIzd1Dr8mV929ZC0JnnSMN3DiMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzgzNjJlMzIzMzMyMmUzMTM5
MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzNzM3MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAK66MAwDQYJKoZIhvcNAQELBQADggEBAMOETyRUFLW4gNoyzfzj2c8c7nb/+I66
V9x9g3cyTVbjXJyrxze9/YmHPloBF57ePDm9RPsB+PObj1QsREZHA30BkC9AdkaU
WuZ0fhjildL8zHSyuakOh7hQT5KFFKxPiMODJkLwEMeaBrhKKBe3dqwLoAPirnLE
ikM1bhfmjKqbr3obeDbLEXn8LVIsjUF8VtBl3j9gtWezWy7WYOvohC2gBtco+3jR
TLH+2nSzIfFIL/yzsL2EAwHWmJvQIToPX7UzuOFnC2VPnGm2SkbCe5RAmVDKO7dm
OC2pDwWSN8wQd6OsiVMgcr1LH9LD+m1W7N22OM++fhbu3m0IE2Wz+l4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org