Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/34352e3137392e38382e302f32322d3332203d3e20323639303730.roa
File:                     34352e3137392e38382e302f32322d3332203d3e20323639303730.roa (raw, json)
Hash identifier:          19IuszoZ8Vh8/6bUhpB1LXUjCW1cy93cawhDIu8j80g=
Subject key identifier:   1F:92:AA:CE:35:0F:E5:C3:9A:31:DA:DE:22:38:83:27:FA:F1:9D:6D
Certificate issuer:       /CN=502248B719FD13C9281385732A8072536E8D0577
Certificate serial:       64D0B0FDA3A0A2057F1E01612D74E6B1657E3C4D
Authority key identifier: 50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/34352e3137392e38382e302f32322d3332203d3e20323639303730.roa
Signing time:             Mon 31 Jul 2023 21:21:23 +0000
ROA not before:           Mon 31 Jul 2023 21:16:23 +0000
ROA not after:            Mon 29 Jul 2024 21:21:23 +0000
asID:                     269070
IP address blocks:        45.179.88.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d0:b0:fd:a3:a0:a2:05:7f:1e:01:61:2d:74:e6:b1:65:7e:3c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502248B719FD13C9281385732A8072536E8D0577
        Validity
            Not Before: Jul 31 21:16:23 2023 GMT
            Not After : Jul 29 21:21:23 2024 GMT
        Subject: CN=3082010A0282010100D9E5A7BCA631CB37A2F83E87968F9CBF2ECA113DD608D029F9704051D2F81CA15BD43273B33B615D987DB2E98F7A41A3DF0FBB5659586DE7EE4A2F174F47633075EC2A50D822F08D8A679730FF57F003FBC81927E5C5C04330EBDEBCAC7E8656797883B21E4405DB46019841261E0786D189B77DBB1A54AC4A99CF31A5503C2E5FE955F2B96DC47DBE11CF0B0C7BA1A2FCF9B9F709F6CCC9CE12514DEA52C42CF1D2F86E936F1A08D6FE1CA087B3C3C3DCC0B269694BF692482F88D35AE8CACEC598C985F354FCD46B01976B2D21122BD9F9C52E85F98A89F78C067463B704231F3CED908ACBCD7CA49BF2DBE757AD056F031A3D36085D223DDA40623F13FED50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e5:a7:bc:a6:31:cb:37:a2:f8:3e:87:96:8f:
                    9c:bf:2e:ca:11:3d:d6:08:d0:29:f9:70:40:51:d2:
                    f8:1c:a1:5b:d4:32:73:b3:3b:61:5d:98:7d:b2:e9:
                    8f:7a:41:a3:df:0f:bb:56:59:58:6d:e7:ee:4a:2f:
                    17:4f:47:63:30:75:ec:2a:50:d8:22:f0:8d:8a:67:
                    97:30:ff:57:f0:03:fb:c8:19:27:e5:c5:c0:43:30:
                    eb:de:bc:ac:7e:86:56:79:78:83:b2:1e:44:05:db:
                    46:01:98:41:26:1e:07:86:d1:89:b7:7d:bb:1a:54:
                    ac:4a:99:cf:31:a5:50:3c:2e:5f:e9:55:f2:b9:6d:
                    c4:7d:be:11:cf:0b:0c:7b:a1:a2:fc:f9:b9:f7:09:
                    f6:cc:c9:ce:12:51:4d:ea:52:c4:2c:f1:d2:f8:6e:
                    93:6f:1a:08:d6:fe:1c:a0:87:b3:c3:c3:dc:c0:b2:
                    69:69:4b:f6:92:48:2f:88:d3:5a:e8:ca:ce:c5:98:
                    c9:85:f3:54:fc:d4:6b:01:97:6b:2d:21:12:2b:d9:
                    f9:c5:2e:85:f9:8a:89:f7:8c:06:74:63:b7:04:23:
                    1f:3c:ed:90:8a:cb:cd:7c:a4:9b:f2:db:e7:57:ad:
                    05:6f:03:1a:3d:36:08:5d:22:3d:da:40:62:3f:13:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:92:AA:CE:35:0F:E5:C3:9A:31:DA:DE:22:38:83:27:FA:F1:9D:6D
            X509v3 Authority Key Identifier:
                keyid:50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/502248B719FD13C9281385732A8072536E8D0577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/34352e3137392e38382e302f32322d3332203d3e20323639303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:04:8d:ea:02:63:01:dd:c5:63:6f:85:27:f6:26:34:01:
         8b:05:93:9d:ed:75:d0:34:63:7b:6a:71:f7:0a:b8:66:3c:bc:
         19:41:e3:f9:9f:3a:4b:8e:c0:e5:13:0f:23:45:9b:8f:15:02:
         6a:11:0f:d8:39:40:ef:44:9f:c6:da:10:ac:d9:2b:90:33:92:
         dc:aa:04:db:b6:a7:5c:d4:14:f6:18:bd:7b:33:ae:c7:1e:6a:
         c2:55:6f:60:46:e9:a5:9e:cc:c0:5b:f2:59:ce:d0:f2:ea:db:
         57:76:7c:bc:51:6a:81:87:57:ef:cc:33:d5:87:cf:56:44:f2:
         34:f5:16:df:d1:0b:de:a5:76:0f:dd:f7:08:81:c0:6b:c6:a1:
         7b:79:99:e9:3f:89:33:1a:9a:4f:60:85:8b:3b:88:49:9b:76:
         a0:3f:d2:04:84:69:2c:88:64:aa:6c:0d:f0:8e:46:6f:1f:04:
         9e:40:15:d0:a4:d0:8c:2a:aa:a7:86:9b:c8:34:66:92:e9:ee:
         22:83:0e:01:94:11:48:f9:bb:13:1f:58:aa:f0:ef:c9:3c:74:
         27:a1:21:e0:62:13:d4:d9:b2:df:14:1c:89:33:89:85:5d:e6:
         91:d5:38:25:bc:f4:1e:9e:bd:09:6e:53:56:ad:43:ad:d9:09:
         7d:a2:7a:30
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUZNCw/aOgogV/HgFhLXTmsWV+PE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAyMjQ4QjcxOUZEMTNDOTI4MTM4NTczMkE4MDcyNTM2
RThEMDU3NzAeFw0yMzA3MzEyMTE2MjNaFw0yNDA3MjkyMTIxMjNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDlFNUE3QkNBNjMxQ0IzN0Ey
RjgzRTg3OTY4RjlDQkYyRUNBMTEzREQ2MDhEMDI5Rjk3MDQwNTFEMkY4MUNBMTVC
RDQzMjczQjMzQjYxNUQ5ODdEQjJFOThGN0E0MUEzREYwRkJCNTY1OTU4NkRFN0VF
NEEyRjE3NEY0NzYzMzA3NUVDMkE1MEQ4MjJGMDhEOEE2Nzk3MzBGRjU3RjAwM0ZC
QzgxOTI3RTVDNUMwNDMzMEVCREVCQ0FDN0U4NjU2Nzk3ODgzQjIxRTQ0MDVEQjQ2
MDE5ODQxMjYxRTA3ODZEMTg5Qjc3REJCMUE1NEFDNEE5OUNGMzFBNTUwM0MyRTVG
RTk1NUYyQjk2REM0N0RCRTExQ0YwQjBDN0JBMUEyRkNGOUI5RjcwOUY2Q0NDOUNF
MTI1MTRERUE1MkM0MkNGMUQyRjg2RTkzNkYxQTA4RDZGRTFDQTA4N0IzQzNDM0RD
QzBCMjY5Njk0QkY2OTI0ODJGODhEMzVBRThDQUNFQzU5OEM5ODVGMzU0RkNENDZC
MDE5NzZCMkQyMTEyMkJEOUY5QzUyRTg1Rjk4QTg5Rjc4QzA2NzQ2M0I3MDQyMzFG
M0NFRDkwOEFDQkNEN0NBNDlCRjJEQkU3NTdBRDA1NkYwMzFBM0QzNjA4NUQyMjNE
REE0MDYyM0YxM0ZFRDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2eWnvKYxyzei+D6Hlo+cvy7KET3WCNAp+XBAUdL4HKFb1DJzszth
XZh9sumPekGj3w+7VllYbefuSi8XT0djMHXsKlDYIvCNimeXMP9X8AP7yBkn5cXA
QzDr3rysfoZWeXiDsh5EBdtGAZhBJh4HhtGJt327GlSsSpnPMaVQPC5f6VXyuW3E
fb4RzwsMe6Gi/Pm59wn2zMnOElFN6lLELPHS+G6TbxoI1v4coIezw8PcwLJpaUv2
kkgviNNa6MrOxZjJhfNU/NRrAZdrLSESK9n5xS6F+YqJ94wGdGO3BCMfPO2QisvN
fKSb8tvnV60FbwMaPTYIXSI92kBiPxP+1QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FB+Sqs41D+XDmjHa3iI4gyf68Z1tMB8GA1UdIwQYMBaAFFAiSLcZ/RPJKBOFcyqA
clNujQV3MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNKR2taOXdTOHBHeEFr
RFI1NUVQWHUxUFhpaDlyMXZaY1RCQ1ZVenRZaVFlLzAvNTAyMjQ4QjcxOUZEMTND
OTI4MTM4NTczMkE4MDcyNTM2RThEMDU3Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81MDIyNDhCNzE5RkQxM0M5MjgxMzg1NzMyQTgwNzI1MzZFOEQw
NTc3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zSkdrWjl3UzhwR3hBa0RSNTVF
UFh1MVBYaWg5cjF2WmNUQkNWVXp0WWlRZS8wLzM0MzUyZTMxMzczOTJlMzgzODJl
MzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzOTMwMzczMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2z
WDANBgkqhkiG9w0BAQsFAAOCAQEAbbEEjeoCYwHdxWNvhSf2JjQBiwWTne110DRj
e2px9wq4Zjy8GUHj+Z86S47A5RMPI0WbjxUCahEP2DlA70SfxtoQrNkrkDOS3KoE
27anXNQU9hi9ezOuxx5qwlVvYEbppZ7MwFvyWc7Q8urbV3Z8vFFqgYdX78wz1YfP
VkTyNPUW39EL3qV2D933CIHAa8ahe3mZ6T+JMxqaT2CFizuISZt2oD/SBIRpLIhk
qmwN8I5Gbx8EnkAV0KTQjCqqp4abyDRmkunuIoMOAZQRSPm7Ex9YqvDvyTx0J6Eh
4GIT1Nmy3xQciTOJhV3mkdU4Jbz0Hp69CW5TVq1DrdkJfaJ6MA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org