Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31322e302f32322d3234203d3e20323730363834.roa
File:                     34352e3232382e31322e302f32322d3234203d3e20323730363834.roa (raw, json)
Hash identifier:          asDGSYZKsKxZ8JEF8lE+deB5q6iLYzgsLhE6B2f+rms=
Subject key identifier:   7A:13:7B:2C:88:9C:56:01:90:D4:8D:48:FD:12:AA:AD:7C:02:26:61
Certificate issuer:       /CN=CACFB04CE41DC1652185A18E41D1795590416E50
Certificate serial:       359A4B11E3937F50E9DFB25A9D5E3A23637851C0
Authority key identifier: CA:CF:B0:4C:E4:1D:C1:65:21:85:A1:8E:41:D1:79:55:90:41:6E:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CACFB04CE41DC1652185A18E41D1795590416E50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31322e302f32322d3234203d3e20323730363834.roa
Signing time:             Wed 11 May 2022 11:13:29 +0000
ROA not before:           Wed 11 May 2022 11:08:29 +0000
ROA not after:            Wed 10 May 2023 11:13:29 +0000
asID:                     270684
IP address blocks:        45.228.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9a:4b:11:e3:93:7f:50:e9:df:b2:5a:9d:5e:3a:23:63:78:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACFB04CE41DC1652185A18E41D1795590416E50
        Validity
            Not Before: May 11 11:08:29 2022 GMT
            Not After : May 10 11:13:29 2023 GMT
        Subject: CN=7A137B2C889C560190D48D48FD12AAAD7C022661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:f2:a4:50:36:0b:d6:50:67:2a:bb:03:ad:
                    f9:b8:d7:db:fb:2e:bd:36:ea:e4:e7:8b:22:6b:6e:
                    71:22:1d:ab:99:e0:85:4c:05:72:51:24:31:c5:02:
                    b1:98:fd:1d:b3:12:ea:0d:b7:7b:96:b9:d5:72:71:
                    56:43:a0:41:47:c3:60:71:ed:0c:f8:23:71:4c:52:
                    a9:d7:35:01:a8:e8:3c:38:4e:c5:5e:b8:ad:4e:3e:
                    c3:1b:67:04:8a:8b:90:72:5c:07:bd:23:52:82:a4:
                    1e:30:23:09:95:ef:26:48:19:c6:69:d5:dc:12:e1:
                    02:22:e3:0b:4a:48:53:9f:07:b6:6a:e2:ef:ec:c3:
                    43:84:9a:10:4c:bf:ef:24:e5:dd:47:a5:80:35:20:
                    a3:04:bd:94:33:d2:d2:13:ef:81:68:b4:7a:12:e5:
                    3d:9f:d0:fd:b3:7b:86:83:36:61:6d:87:ef:72:80:
                    a9:dc:eb:1d:9a:34:56:57:6d:80:d8:c7:78:25:0b:
                    1e:3d:e5:1a:c5:34:fc:be:27:fc:41:37:f6:72:a8:
                    1d:b7:19:dc:26:0c:64:98:56:01:1f:ab:04:18:f9:
                    a6:ae:7d:be:ee:34:0a:24:de:2c:1a:8f:74:0c:4a:
                    09:ca:6b:3f:1c:73:d0:71:22:95:3e:0f:8a:1b:b8:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:13:7B:2C:88:9C:56:01:90:D4:8D:48:FD:12:AA:AD:7C:02:26:61
            X509v3 Authority Key Identifier:
                keyid:CA:CF:B0:4C:E4:1D:C1:65:21:85:A1:8E:41:D1:79:55:90:41:6E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/CACFB04CE41DC1652185A18E41D1795590416E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CACFB04CE41DC1652185A18E41D1795590416E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31322e302f32322d3234203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:ea:41:d0:0d:06:1b:66:b8:c7:01:8a:13:f0:23:e6:4d:4d:
         02:64:76:36:0f:3c:83:33:88:db:17:80:1e:4e:ef:6b:8d:ba:
         8e:6c:5b:69:2f:01:a2:3a:35:10:91:f7:b5:11:61:ff:bd:55:
         2e:16:72:39:9b:bd:6e:23:46:2f:44:cb:2b:68:1e:8e:51:3d:
         52:be:1e:cb:de:9b:1f:4e:e2:e5:77:10:87:10:73:a3:b2:8b:
         42:02:17:74:50:00:ea:b6:fe:64:1b:2b:e4:3b:13:6d:ea:48:
         b1:92:2d:af:e8:c0:22:de:a1:2a:28:9c:44:3c:6c:57:36:f7:
         a5:d6:e4:12:5f:8b:a0:2c:c2:76:6f:86:7c:f0:13:c1:5e:f8:
         a5:36:af:4f:d1:e6:ca:bb:2c:ec:65:f9:59:88:dc:00:56:ee:
         19:12:e4:41:1a:f6:d1:5e:b4:88:4b:cc:23:13:fc:a1:d2:7e:
         57:91:4c:16:ea:fc:8e:40:01:3f:3f:e0:db:19:94:9c:4e:d1:
         c7:57:a8:79:8b:9c:00:d8:91:7e:51:bf:35:16:54:81:58:af:
         1c:23:7c:e7:65:e8:c1:0f:25:b4:82:0d:c8:47:aa:71:cc:12:
         d4:e3:fc:67:48:68:d1:5a:41:04:00:18:f0:a6:69:7a:e5:26:
         47:29:09:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:52 2023 by rpki-client on console-ams.rpki-client.org