Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/34352e3137392e38382e302f32322d3234203d3e20323639303730.roa
File:                     34352e3137392e38382e302f32322d3234203d3e20323639303730.roa (raw, json)
Hash identifier:          SEkGBu9XwP8FqW994WgdVxyG5xmH9OzqRwhvOcEs8xg=
Subject key identifier:   E0:4C:23:53:D1:99:A2:0E:CC:9B:CB:BB:63:21:DE:A0:8D:10:2D:28
Certificate issuer:       /CN=502248B719FD13C9281385732A8072536E8D0577
Certificate serial:       25FDE6C8E62D851C3106BAA4BA155AA974242F9A
Authority key identifier: 50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/34352e3137392e38382e302f32322d3234203d3e20323639303730.roa
Signing time:             Sun 06 Nov 2022 13:00:00 +0000
ROA not before:           Sun 06 Nov 2022 12:55:00 +0000
ROA not after:            Sun 05 Nov 2023 13:00:00 +0000
asID:                     269070
IP address blocks:        45.179.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fd:e6:c8:e6:2d:85:1c:31:06:ba:a4:ba:15:5a:a9:74:24:2f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502248B719FD13C9281385732A8072536E8D0577
        Validity
            Not Before: Nov  6 12:55:00 2022 GMT
            Not After : Nov  5 13:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:bc:67:b0:60:6f:59:f7:3f:c4:35:43:36:
                    e9:6a:32:5a:99:3b:5a:29:0b:32:1a:ac:a4:15:e8:
                    9c:3c:6d:a1:e8:31:b9:aa:09:7c:29:68:ab:4b:35:
                    b1:51:31:fa:1f:c6:8a:3c:5c:82:03:89:9f:ed:b8:
                    56:2f:09:0b:b1:c7:2c:50:b6:7a:a3:c3:12:18:af:
                    7c:d7:3d:8d:8e:51:3d:c7:62:eb:f8:13:c8:c8:29:
                    40:a9:70:62:e1:96:87:27:2a:7e:a9:20:ff:94:a1:
                    37:c0:b9:2b:3d:0c:64:cc:27:99:d7:82:b5:86:3a:
                    56:e5:93:8b:3f:67:be:cd:09:e2:44:d5:fd:9b:b8:
                    b3:ff:7f:b4:e6:71:92:bc:54:dd:a1:39:36:94:55:
                    66:e2:9f:7f:08:35:28:55:ec:73:41:c3:93:cf:f0:
                    03:53:35:a3:3b:bc:0d:ab:5f:c2:ee:58:9f:71:8e:
                    a0:a9:ee:be:0a:61:61:05:f2:73:ea:e1:8b:46:9e:
                    f2:83:a9:33:59:0b:63:55:ae:cc:4c:45:f7:bf:95:
                    48:86:4a:05:11:fa:1f:61:17:70:45:8b:dd:16:4e:
                    43:da:e1:5b:e2:ca:da:e4:60:60:97:61:f0:2c:7c:
                    b6:58:32:42:b9:a7:fe:f5:06:b9:d7:ab:2d:a9:19:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4C:23:53:D1:99:A2:0E:CC:9B:CB:BB:63:21:DE:A0:8D:10:2D:28
            X509v3 Authority Key Identifier:
                keyid:50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/502248B719FD13C9281385732A8072536E8D0577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/34352e3137392e38382e302f32322d3234203d3e20323639303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:42:b3:65:1b:09:79:13:ae:11:bd:e7:88:b3:9f:10:9b:e4:
         0a:dc:11:4b:f3:c2:2c:8e:4f:18:d4:f1:93:88:dd:fc:e0:ca:
         59:e0:4f:1a:42:21:79:ba:17:2e:b7:61:5f:2d:13:cc:ec:17:
         74:dd:06:17:a1:72:7a:13:57:16:8d:a6:7e:f7:d5:92:a5:ab:
         d4:c4:6c:3c:22:be:b3:ab:41:3e:28:f2:8d:d6:b9:1e:a0:30:
         c4:c4:3c:41:41:86:44:e6:d9:19:7d:2f:d9:35:79:9c:02:c7:
         53:cc:7f:dc:1e:5a:30:67:6d:8f:1d:46:cb:6e:21:8a:f5:5d:
         58:8e:c6:a3:5b:8e:90:24:9e:1f:92:0f:92:b3:70:b8:fa:59:
         3c:36:36:3d:29:c4:48:4f:72:aa:30:74:2c:19:e2:1c:bf:0c:
         1c:c9:a2:b6:5a:13:c1:2b:09:70:db:bf:cd:b6:1f:5a:db:ca:
         bc:aa:64:4a:90:13:78:d3:1e:a8:0d:84:7a:61:2c:15:88:97:
         af:27:03:b1:40:c1:bc:37:dd:5d:ed:11:4c:71:f3:30:28:77:
         94:9c:27:11:df:be:20:e7:65:ba:37:65:fc:78:ab:7a:54:45:
         79:af:ed:ff:b8:48:fa:73:45:29:9f:cd:29:ca:af:dc:ce:1f:
         57:ac:a3:8d
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUJf3myOYthRwxBrqkuhVaqXQkL5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAyMjQ4QjcxOUZEMTNDOTI4MTM4NTczMkE4MDcyNTM2
RThEMDU3NzAeFw0yMjExMDYxMjU1MDBaFw0yMzExMDUxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkEzRkJDNjdCMDYwNkY1OUY3
M0ZDNDM1NDMzNkU5NkEzMjVBOTkzQjVBMjkwQjMyMUFBQ0E0MTVFODlDM0M2REEx
RTgzMUI5QUEwOTdDMjk2OEFCNEIzNUIxNTEzMUZBMUZDNjhBM0M1QzgyMDM4OTlG
RURCODU2MkYwOTBCQjFDNzJDNTBCNjdBQTNDMzEyMThBRjdDRDczRDhEOEU1MTNE
Qzc2MkVCRjgxM0M4QzgyOTQwQTk3MDYyRTE5Njg3MjcyQTdFQTkyMEZGOTRBMTM3
QzBCOTJCM0QwQzY0Q0MyNzk5RDc4MkI1ODYzQTU2RTU5MzhCM0Y2N0JFQ0QwOUUy
NDRENUZEOUJCOEIzRkY3RkI0RTY3MTkyQkM1NEREQTEzOTM2OTQ1NTY2RTI5RjdG
MDgzNTI4NTVFQzczNDFDMzkzQ0ZGMDAzNTMzNUEzM0JCQzBEQUI1RkMyRUU1ODlG
NzE4RUEwQTlFRUJFMEE2MTYxMDVGMjczRUFFMThCNDY5RUYyODNBOTMzNTkwQjYz
NTVBRUNDNEM0NUY3QkY5NTQ4ODY0QTA1MTFGQTFGNjExNzcwNDU4QkREMTY0RTQz
REFFMTVCRTJDQURBRTQ2MDYwOTc2MUYwMkM3Q0I2NTgzMjQyQjlBN0ZFRjUwNkI5
RDdBQjJEQTkxOUExMUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuj+8Z7Bgb1n3P8Q1QzbpajJamTtaKQsyGqykFeicPG2h6DG5qgl8
KWirSzWxUTH6H8aKPFyCA4mf7bhWLwkLsccsULZ6o8MSGK981z2NjlE9x2Lr+BPI
yClAqXBi4ZaHJyp+qSD/lKE3wLkrPQxkzCeZ14K1hjpW5ZOLP2e+zQniRNX9m7iz
/3+05nGSvFTdoTk2lFVm4p9/CDUoVexzQcOTz/ADUzWjO7wNq1/C7lifcY6gqe6+
CmFhBfJz6uGLRp7yg6kzWQtjVa7MTEX3v5VIhkoFEfofYRdwRYvdFk5D2uFb4sra
5GBgl2HwLHy2WDJCuaf+9Qa516stqRmhGwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FOBMI1PRmaIOzJvLu2Mh3qCNEC0oMB8GA1UdIwQYMBaAFFAiSLcZ/RPJKBOFcyqA
clNujQV3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNKR2taOXdTOHBHeEFr
RFI1NUVQWHUxUFhpaDlyMXZaY1RCQ1ZVenRZaVFlLzAvNTAyMjQ4QjcxOUZEMTND
OTI4MTM4NTczMkE4MDcyNTM2RThEMDU3Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81MDIyNDhCNzE5RkQxM0M5MjgxMzg1NzMyQTgwNzI1MzZFOEQw
NTc3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zSkdrWjl3UzhwR3hBa0RSNTVF
UFh1MVBYaWg5cjF2WmNUQkNWVXp0WWlRZS8wLzM0MzUyZTMxMzczOTJlMzgzODJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTMwMzczMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2z
WDANBgkqhkiG9w0BAQsFAAOCAQEAgEKzZRsJeROuEb3niLOfEJvkCtwRS/PCLI5P
GNTxk4jd/ODKWeBPGkIheboXLrdhXy0TzOwXdN0GF6FyehNXFo2mfvfVkqWr1MRs
PCK+s6tBPijyjda5HqAwxMQ8QUGGRObZGX0v2TV5nALHU8x/3B5aMGdtjx1Gy24h
ivVdWI7Go1uOkCSeH5IPkrNwuPpZPDY2PSnESE9yqjB0LBniHL8MHMmitloTwSsJ
cNu/zbYfWtvKvKpkSpATeNMeqA2EemEsFYiXrycDsUDBvDfdXe0RTHHzMCh3lJwn
Ed++IOdlujdl/HirelRFea/t/7hI+nNFKZ/NKcqv3M4fV6yjjQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org