Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32322d3234203d3e20323632373733.roa
File:                     34352e3232382e3134342e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          ft/PWBEUZmq74WrQiiBAXYlKtjqavDqZQsII0cPpHFk=
Subject key identifier:   5D:D8:67:96:EF:1C:5F:4B:DC:A3:DC:4C:E5:30:89:5C:3B:67:2D:75
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       205D37C47052C133F3C60749DF311331E0900F6B
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32322d3234203d3e20323632373733.roa
Signing time:             Fri 06 Jan 2023 03:31:37 +0000
ROA not before:           Fri 06 Jan 2023 03:26:37 +0000
ROA not after:            Fri 05 Jan 2024 03:31:37 +0000
asID:                     262773
IP address blocks:        45.228.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5d:37:c4:70:52:c1:33:f3:c6:07:49:df:31:13:31:e0:90:0f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Jan  6 03:26:37 2023 GMT
            Not After : Jan  5 03:31:37 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ca:a5:81:be:9f:a6:2c:5a:4f:db:a9:15:9c:
                    46:e3:df:e2:fc:93:15:05:94:70:ee:da:05:5b:fe:
                    51:53:66:9a:82:26:20:46:ea:83:33:74:34:1c:93:
                    e0:01:c4:54:3d:0f:56:98:5f:80:f8:25:38:a5:7f:
                    5e:58:6c:8f:c3:91:31:de:fd:ec:0f:78:ee:e7:30:
                    09:67:b1:08:31:10:52:d4:9e:03:45:20:97:ee:72:
                    b1:23:76:12:f8:d4:9a:01:5c:df:36:b2:b9:e9:13:
                    fc:e7:a1:e9:eb:d2:5d:f1:25:42:93:32:8b:1e:39:
                    9b:02:a6:f2:0b:5b:81:71:a8:ba:60:85:4f:1d:2e:
                    53:b7:1a:4f:fa:a1:3d:5e:73:b4:a4:22:20:11:d7:
                    84:c4:8a:3e:81:88:8b:8f:87:73:8b:a8:61:86:d0:
                    73:67:d4:1b:9d:86:b7:80:a3:36:11:18:fc:68:e4:
                    a9:ba:a7:a4:5c:45:0f:01:ec:91:02:a2:48:d2:26:
                    f8:e6:2c:4f:8f:a1:17:dc:dd:dd:0c:b2:3a:1e:c3:
                    7f:15:23:27:09:f9:bc:a2:cd:b0:1b:ef:21:bc:69:
                    93:85:45:17:e2:07:40:e4:50:68:b7:c0:15:65:62:
                    c3:b0:04:2e:a4:39:c1:c8:01:fd:45:44:dc:a7:3b:
                    8a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D8:67:96:EF:1C:5F:4B:DC:A3:DC:4C:E5:30:89:5C:3B:67:2D:75
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:43:cc:c6:20:10:b4:6a:3d:09:79:1d:f1:89:e7:e2:60:26:
         e7:06:f0:2c:56:e7:8f:5d:69:25:0f:03:a8:b1:89:d6:f8:c5:
         78:fe:e6:1e:a0:24:51:32:53:ec:99:92:db:90:74:4c:e6:c9:
         7c:a2:49:7e:ca:4c:0d:8f:1e:f5:3c:23:08:86:d9:c5:10:49:
         2c:dd:2e:dd:b0:be:fb:5d:fd:63:61:64:ec:a3:66:8c:e2:8d:
         15:83:39:0e:a8:88:4c:0a:f0:8f:7e:51:54:5f:63:73:be:c4:
         36:e9:84:78:83:f2:cc:2b:8c:f1:76:ac:6d:0a:ef:b8:4c:5f:
         05:85:20:c8:f3:48:b4:e6:2e:bb:e8:91:9e:5f:a1:a5:a5:4f:
         98:f6:77:04:bb:c3:4f:ed:be:15:2a:91:13:af:ea:c7:36:ae:
         b9:29:4a:be:ca:d8:e1:2f:0f:e0:fb:7c:a0:10:12:f7:22:80:
         7b:06:df:df:21:33:e2:1a:79:4c:43:0b:61:7a:b5:91:1b:8b:
         f1:25:91:c9:21:7f:ee:86:a0:56:2b:ba:5c:16:53:b7:8f:7e:
         5e:57:c7:9a:25:0f:51:79:08:8d:28:a0:53:18:8e:2d:74:c8:
         d6:5c:dc:c0:d2:b7:c6:54:53:80:66:ce:95:d7:fa:16:d9:9f:
         9f:c2:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org