Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32322d3232203d3e203532353638.roa
File:                     34352e3232382e3134342e302f32322d3232203d3e203532353638.roa (raw, json)
Hash identifier:          TfRXK7Pg7OVVrg//4qI0ysAhIH5FGK0WzL5A2fcXAGY=
Subject key identifier:   3C:36:82:1A:91:57:8D:58:49:C1:03:34:22:82:89:3F:C6:A0:13:CF
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       19B73C796EFF11BDF1D876D2555CC99385F83ED0
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32322d3232203d3e203532353638.roa
Signing time:             Wed 02 Nov 2022 07:25:11 +0000
ROA not before:           Wed 02 Nov 2022 07:20:11 +0000
ROA not after:            Wed 01 Nov 2023 07:25:11 +0000
asID:                     52568
IP address blocks:        45.228.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b7:3c:79:6e:ff:11:bd:f1:d8:76:d2:55:5c:c9:93:85:f8:3e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Nov  2 07:20:11 2022 GMT
            Not After : Nov  1 07:25:11 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e4:35:68:e2:f8:6d:f4:2e:ba:26:42:7b:55:
                    0f:7a:e7:fa:56:99:23:ee:bb:2a:42:5b:7f:80:b7:
                    af:a6:31:63:3f:70:b5:78:d6:cc:23:80:4f:2c:e5:
                    ed:7e:c0:a3:eb:67:4c:00:99:79:fd:36:f7:80:83:
                    61:b3:68:22:3c:14:a3:b1:dc:5d:b7:eb:5c:97:61:
                    03:fe:10:b4:6b:71:5d:5e:d9:7c:87:9e:be:33:41:
                    24:6b:2b:c0:76:0c:26:fe:ff:f2:e8:38:02:ba:1d:
                    d2:a8:78:36:48:c2:94:c9:86:28:e3:25:ab:09:c7:
                    fe:85:38:3f:a1:b9:8f:ca:6f:d2:58:58:ca:9b:0c:
                    d5:9a:d6:42:73:8e:c8:f1:9c:12:0f:d4:14:5b:8b:
                    94:c4:31:98:3a:1e:5f:82:23:a8:06:0b:bd:5a:c5:
                    dc:dd:29:be:67:29:aa:3f:c5:bd:60:ee:71:96:7a:
                    9f:9a:81:67:c5:b7:53:6e:b0:7c:0f:88:bb:60:64:
                    ff:8f:63:9d:29:8c:09:a1:46:d9:ce:c4:53:33:fc:
                    ec:2e:47:7d:a5:34:6d:dd:e9:86:19:a2:52:9b:59:
                    e4:6d:8d:92:e6:c6:78:c0:c7:df:94:cb:fb:f3:3b:
                    ab:3f:86:c8:be:2e:5c:f9:dd:7b:27:21:e6:4c:fa:
                    ae:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:36:82:1A:91:57:8D:58:49:C1:03:34:22:82:89:3F:C6:A0:13:CF
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32322d3232203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:97:05:3f:ff:f1:5b:b8:69:da:96:06:3c:9c:18:83:45:e3:
         0e:8c:aa:1d:3b:4b:95:c8:9f:5c:79:3a:2d:cd:67:57:cd:a6:
         55:3a:84:52:5e:de:bf:32:13:fc:0f:db:08:5d:50:45:f0:ae:
         24:24:37:c4:e2:9a:a1:33:70:68:ab:24:e5:d8:cb:64:f8:c9:
         45:b4:8f:c3:36:ba:bd:50:cc:e4:97:f6:ce:1a:f2:f1:79:57:
         c3:ac:d7:7f:df:44:ab:67:f9:52:7a:8f:89:e8:04:21:db:fa:
         44:d9:42:85:1b:32:a1:fd:b0:86:d8:7c:5f:44:86:7d:b0:f6:
         95:8f:6b:ae:15:22:84:0b:93:18:90:50:7d:a1:90:31:10:e6:
         ac:31:66:5d:ee:93:ec:ca:55:7c:e4:7c:b2:5c:15:01:5c:0b:
         d7:d2:e4:92:9f:81:fa:b6:bb:9b:be:28:e6:11:41:ff:e7:f7:
         be:ca:f8:41:e0:7f:fa:63:d4:73:e3:e8:49:52:2e:29:14:8b:
         7e:4f:e7:08:da:d4:37:c9:0f:4b:49:24:9b:8c:ba:10:77:30:
         96:3b:12:05:d5:b0:d4:6e:5a:52:4c:3d:29:6d:28:07:03:05:
         39:8d:bd:bc:f7:6f:65:4e:89:ed:fd:69:9e:9e:dd:60:2d:19:
         27:f2:c7:46
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUGbc8eW7/Eb3x2HbSVVzJk4X4PtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjExMDIwNzIwMTFaFw0yMzExMDEwNzI1MTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTBFNDM1NjhFMkY4NkRGNDJF
QkEyNjQyN0I1NTBGN0FFN0ZBNTY5OTIzRUVCQjJBNDI1QjdGODBCN0FGQTYzMTYz
M0Y3MEI1NzhENkNDMjM4MDRGMkNFNUVEN0VDMEEzRUI2NzRDMDA5OTc5RkQzNkY3
ODA4MzYxQjM2ODIyM0MxNEEzQjFEQzVEQjdFQjVDOTc2MTAzRkUxMEI0NkI3MTVE
NUVEOTdDODc5RUJFMzM0MTI0NkIyQkMwNzYwQzI2RkVGRkYyRTgzODAyQkExREQy
QTg3ODM2NDhDMjk0Qzk4NjI4RTMyNUFCMDlDN0ZFODUzODNGQTFCOThGQ0E2RkQy
NTg1OENBOUIwQ0Q1OUFENjQyNzM4RUM4RjE5QzEyMEZENDE0NUI4Qjk0QzQzMTk4
M0ExRTVGODIyM0E4MDYwQkJENUFDNURDREQyOUJFNjcyOUFBM0ZDNUJENjBFRTcx
OTY3QTlGOUE4MTY3QzVCNzUzNkVCMDdDMEY4OEJCNjA2NEZGOEY2MzlEMjk4QzA5
QTE0NkQ5Q0VDNDUzMzNGQ0VDMkU0NzdEQTUzNDZERERFOTg2MTlBMjUyOUI1OUU0
NkQ4RDkyRTZDNjc4QzBDN0RGOTRDQkZCRjMzQkFCM0Y4NkM4QkUyRTVDRjlERDdC
MjcyMUU2NENGQUFFQTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4OQ1aOL4bfQuuiZCe1UPeuf6Vpkj7rsqQlt/gLevpjFjP3C1eNbM
I4BPLOXtfsCj62dMAJl5/Tb3gINhs2giPBSjsdxdt+tcl2ED/hC0a3FdXtl8h56+
M0EkayvAdgwm/v/y6DgCuh3SqHg2SMKUyYYo4yWrCcf+hTg/obmPym/SWFjKmwzV
mtZCc47I8ZwSD9QUW4uUxDGYOh5fgiOoBgu9WsXc3Sm+ZymqP8W9YO5xlnqfmoFn
xbdTbrB8D4i7YGT/j2OdKYwJoUbZzsRTM/zsLkd9pTRt3emGGaJSm1nkbY2S5sZ4
wMfflMv78zurP4bIvi5c+d17JyHmTPquqQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FDw2ghqRV41YScEDNCKCiT/GoBPPMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzM0MzUyZTMyMzIzODJlMzEzNDM0
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM1MzYzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3k
kDANBgkqhkiG9w0BAQsFAAOCAQEAspcFP//xW7hp2pYGPJwYg0XjDoyqHTtLlcif
XHk6Lc1nV82mVTqEUl7evzIT/A/bCF1QRfCuJCQ3xOKaoTNwaKsk5djLZPjJRbSP
wza6vVDM5Jf2zhry8XlXw6zXf99Eq2f5UnqPiegEIdv6RNlChRsyof2whth8X0SG
fbD2lY9rrhUihAuTGJBQfaGQMRDmrDFmXe6T7MpVfOR8slwVAVwL19Lkkp+B+ra7
m74o5hFB/+f3vsr4QeB/+mPUc+PoSVIuKRSLfk/nCNrUN8kPS0kkm4y6EHcwljsS
BdWw1G5aUkw9KW0oBwMFOY29vPdvZU6J7f1pnp7dYC0ZJ/LHRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org