Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32322d3233203d3e20323632373733.roa
File:                     34352e3232382e3134342e302f32322d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          vKAGwWN9ifkJRpr4Z7wQYSk/3lGHHjgjKDFot7Rc2wc=
Subject key identifier:   09:62:C2:09:14:5A:2B:AE:73:26:B7:5F:55:44:41:7C:32:F6:45:12
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3096803B5752DAC3BA8CB1F72204023F3EAD7E03
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32322d3233203d3e20323632373733.roa
Signing time:             Fri 06 Jan 2023 03:51:25 +0000
ROA not before:           Fri 06 Jan 2023 03:46:25 +0000
ROA not after:            Fri 05 Jan 2024 03:51:25 +0000
asID:                     262773
IP address blocks:        45.228.144.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:96:80:3b:57:52:da:c3:ba:8c:b1:f7:22:04:02:3f:3e:ad:7e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Jan  6 03:46:25 2023 GMT
            Not After : Jan  5 03:51:25 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:72:ca:e9:d6:0b:93:bf:74:5c:d9:32:01:
                    21:58:82:aa:6b:6c:18:bd:e6:b4:95:ae:49:5b:26:
                    52:30:65:e9:c6:8f:fa:c1:a2:b3:2f:57:9d:55:82:
                    f8:af:8d:70:03:bd:3b:80:92:c9:84:c1:17:65:4f:
                    e5:00:39:7f:bd:1b:6f:7a:c5:13:e9:38:a4:01:26:
                    3e:e5:04:d9:db:44:63:05:8d:cb:5e:5e:c9:23:31:
                    b9:59:95:d7:a4:6e:1d:fe:dd:50:bf:d5:cd:23:5d:
                    1b:54:68:28:96:3d:0d:68:ed:6d:fc:a8:8f:a3:09:
                    f2:ef:66:0d:77:68:f2:e4:b1:49:df:81:b6:93:f6:
                    30:b1:3d:6f:34:76:50:5d:26:5f:66:8c:49:95:5e:
                    60:3b:95:7a:7a:4f:21:14:22:01:f9:f3:7b:25:19:
                    91:8d:1f:0c:ed:35:20:b9:66:3f:34:0c:bb:94:6d:
                    d7:fa:4b:e7:45:f1:50:4c:ca:e3:4f:7a:09:eb:6c:
                    c4:a2:11:19:29:ad:c1:8c:d7:87:1f:6f:a7:52:57:
                    81:86:fb:d3:92:27:0d:5e:6e:f5:3d:01:00:3c:b6:
                    e0:b0:16:dd:21:b1:ca:63:67:0e:9a:a7:46:ca:e8:
                    73:9e:8f:23:e6:a0:32:be:c5:77:cc:c1:03:b9:ca:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:62:C2:09:14:5A:2B:AE:73:26:B7:5F:55:44:41:7C:32:F6:45:12
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32322d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:1b:f9:5e:2d:a6:e4:d6:cb:7d:55:1f:c1:57:b4:09:56:f2:
         d8:1d:12:05:55:07:e8:30:f8:a1:4a:0e:2f:fa:f0:c1:2b:4d:
         5f:8a:e1:e2:ca:64:d1:b8:f3:8e:a1:ae:b3:44:ea:27:7b:db:
         59:f0:0b:aa:82:13:0b:84:1f:e6:d9:bd:31:56:e5:2a:f3:c8:
         68:e8:d1:d5:5a:4c:36:67:59:de:9a:c9:69:5c:ee:e5:57:90:
         93:b9:4a:6d:3e:46:2c:b1:5b:8f:9a:95:05:2f:97:15:80:56:
         0c:0c:fb:d1:8b:c4:4b:a8:0d:0a:d4:e4:ab:cc:57:51:9a:30:
         aa:9a:62:a9:7e:97:d8:02:89:96:cf:97:9f:a7:11:de:1c:38:
         04:77:3e:d0:c8:ac:dd:55:b8:68:73:9d:6f:88:8a:39:3c:0d:
         d5:e1:46:a8:56:07:65:21:2c:fa:52:a2:1d:d0:7b:ae:c9:05:
         ba:37:2c:71:d8:93:bb:5f:da:32:cc:d5:cf:67:aa:f4:70:2a:
         fa:d3:42:95:57:9a:e9:5e:7f:fc:1b:e6:f0:db:b9:18:2f:3e:
         ac:d1:17:c0:93:58:60:87:57:a8:39:a7:30:1d:c0:03:65:d2:
         b6:1f:2c:39:94:1f:85:5b:98:3e:bf:96:e9:1c:7b:19:82:26:
         17:70:5d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org