Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38362e38302e302f32342d3234203d3e20323632373733.roa
File:                     3138372e38362e38302e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          9dpi+w1ojBrnFjc6E+E8pV1Gz1qm49xAVVCWp6OzZZw=
Subject key identifier:   67:CD:D8:F4:98:3A:31:F8:02:71:A2:A6:6B:CD:26:C8:AA:DF:6C:25
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       6BCCB920358FAC6EBA081D7744AD5AC3675EE9F6
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38362e38302e302f32342d3234203d3e20323632373733.roa
Signing time:             Fri 06 Jan 2023 03:27:00 +0000
ROA not before:           Fri 06 Jan 2023 03:22:00 +0000
ROA not after:            Fri 05 Jan 2024 03:27:00 +0000
asID:                     262773
IP address blocks:        187.86.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:cc:b9:20:35:8f:ac:6e:ba:08:1d:77:44:ad:5a:c3:67:5e:e9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Jan  6 03:22:00 2023 GMT
            Not After : Jan  5 03:27:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:60:05:4b:46:d8:10:33:40:19:d7:4c:f9:
                    fc:80:93:8c:da:72:72:f8:21:8a:21:f8:59:be:d1:
                    f1:43:3e:72:a3:22:87:8e:af:21:89:57:aa:9d:da:
                    bc:04:b3:62:a4:06:09:94:19:7f:ee:aa:27:72:6e:
                    5b:88:39:00:a2:91:eb:68:39:e6:b2:8f:87:25:6a:
                    f3:75:30:1d:5a:ce:78:be:76:0f:a4:0c:e4:d0:18:
                    36:be:81:42:c4:10:48:8d:b5:1c:f3:43:aa:df:7a:
                    2b:8b:ba:cd:61:e0:2c:88:f9:71:5a:11:f3:d7:56:
                    32:3a:89:17:97:95:dc:ac:82:de:ca:f3:36:8c:1f:
                    31:26:3c:32:27:a5:33:4e:b3:0d:de:96:a6:ca:c4:
                    1e:f7:14:98:57:48:b7:3d:49:dc:5e:5e:65:fe:a0:
                    f7:f5:81:a3:64:8c:1c:57:0a:80:68:3a:42:46:6a:
                    cd:32:78:1e:ec:e0:82:15:1d:a6:a0:fc:09:81:88:
                    88:8c:75:b8:85:62:f7:1f:72:2d:d3:d3:f0:72:74:
                    bc:ec:c9:bf:4a:26:db:56:1d:6f:53:ef:95:f8:5c:
                    6d:b7:bf:ce:14:ea:00:34:c7:5a:45:54:b6:c2:18:
                    3e:a9:27:18:6d:8c:ec:eb:12:6b:c9:05:c9:68:b1:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CD:D8:F4:98:3A:31:F8:02:71:A2:A6:6B:CD:26:C8:AA:DF:6C:25
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138372e38362e38302e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:47:22:97:57:ee:bb:ab:66:90:79:36:56:ce:d9:d4:bc:74:
         49:58:8a:c2:24:7d:b3:79:64:a1:49:00:1e:ec:45:df:b5:e3:
         05:5d:2a:9b:b2:57:75:9e:a3:69:db:cc:4a:61:e5:34:b2:97:
         dc:67:46:4f:6a:26:91:01:bb:c3:d6:60:8e:85:02:2f:53:8f:
         ca:aa:4d:e5:98:5c:af:6c:57:26:b2:5d:02:9e:15:13:e7:dd:
         f0:e6:df:1b:3d:a1:b5:14:3e:0e:55:b4:25:81:95:92:08:7b:
         c1:97:95:69:f6:99:ef:04:7d:80:c8:6a:ea:04:d4:8c:f0:6b:
         d5:00:53:78:50:fc:77:5f:a2:91:a5:ca:2e:cb:5f:ac:77:47:
         33:58:7f:54:43:db:f6:96:7c:ca:80:c2:0b:40:ae:8a:8f:61:
         ce:c4:7d:06:13:2c:21:72:23:cc:31:19:e1:c5:b4:26:d7:ac:
         d7:71:2a:da:1e:5b:1e:27:5a:51:ed:68:40:87:aa:0e:a0:dd:
         93:7b:58:fe:11:44:4f:60:e5:ab:87:c5:5b:68:f1:b7:4a:fe:
         59:fc:25:f6:18:b9:92:77:a4:bd:2c:d6:07:6a:f5:d8:ce:7a:
         29:65:bb:9b:ef:97:ae:4c:31:20:c1:3b:53:b7:61:e7:e0:7f:
         5c:d9:fa:38
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUa8y5IDWPrG66CB13RK1aw2de6fYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMzAxMDYwMzIyMDBaFw0yNDAxMDUwMzI3MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0JEOTYwMDU0QjQ2RDgxMDMz
NDAxOUQ3NENGOUZDODA5MzhDREE3MjcyRjgyMThBMjFGODU5QkVEMUYxNDMzRTcy
QTMyMjg3OEVBRjIxODk1N0FBOUREQUJDMDRCMzYyQTQwNjA5OTQxOTdGRUVBQTI3
NzI2RTVCODgzOTAwQTI5MUVCNjgzOUU2QjI4Rjg3MjU2QUYzNzUzMDFENUFDRTc4
QkU3NjBGQTQwQ0U0RDAxODM2QkU4MTQyQzQxMDQ4OERCNTFDRjM0M0FBREY3QTJC
OEJCQUNENjFFMDJDODhGOTcxNUExMUYzRDc1NjMyM0E4OTE3OTc5NURDQUM4MkRF
Q0FGMzM2OEMxRjMxMjYzQzMyMjdBNTMzNEVCMzBEREU5NkE2Q0FDNDFFRjcxNDk4
NTc0OEI3M0Q0OURDNUU1RTY1RkVBMEY3RjU4MUEzNjQ4QzFDNTcwQTgwNjgzQTQy
NDY2QUNEMzI3ODFFRUNFMDgyMTUxREE2QTBGQzA5ODE4ODg4OEM3NUI4ODU2MkY3
MUY3MjJERDNEM0YwNzI3NEJDRUNDOUJGNEEyNkRCNTYxRDZGNTNFRjk1Rjg1QzZE
QjdCRkNFMTRFQTAwMzRDNzVBNDU1NEI2QzIxODNFQTkyNzE4NkQ4Q0VDRUIxMjZC
QzkwNUM5NjhCMThDNTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy9lgBUtG2BAzQBnXTPn8gJOM2nJy+CGKIfhZvtHxQz5yoyKHjq8h
iVeqndq8BLNipAYJlBl/7qoncm5biDkAopHraDnmso+HJWrzdTAdWs54vnYPpAzk
0Bg2voFCxBBIjbUc80Oq33ori7rNYeAsiPlxWhHz11YyOokXl5XcrILeyvM2jB8x
JjwyJ6UzTrMN3pamysQe9xSYV0i3PUncXl5l/qD39YGjZIwcVwqAaDpCRmrNMnge
7OCCFR2moPwJgYiIjHW4hWL3H3It09PwcnS87Mm/SibbVh1vU++V+Fxtt7/OFOoA
NMdaRVS2whg+qScYbYzs6xJryQXJaLGMWQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FGfN2PSYOjH4AnGipmvNJsiq32wlMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzMxMzgzNzJlMzgzNjJlMzgzMDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALtW
UDANBgkqhkiG9w0BAQsFAAOCAQEAdUcil1fuu6tmkHk2Vs7Z1Lx0SViKwiR9s3lk
oUkAHuxF37XjBV0qm7JXdZ6jadvMSmHlNLKX3GdGT2omkQG7w9ZgjoUCL1OPyqpN
5Zhcr2xXJrJdAp4VE+fd8ObfGz2htRQ+DlW0JYGVkgh7wZeVafaZ7wR9gMhq6gTU
jPBr1QBTeFD8d1+ikaXKLstfrHdHM1h/VEPb9pZ8yoDCC0Cuio9hzsR9BhMsIXIj
zDEZ4cW0Jtes13Eq2h5bHidaUe1oQIeqDqDdk3tY/hFET2Dlq4fFW2jxt0r+Wfwl
9hi5knekvSzWB2r12M56KWW7m++XrkwxIME7U7dh5+B/XNn6OA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org