Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32322d3234203d3e203532353638.roa
File:                     34352e3232382e3134342e302f32322d3234203d3e203532353638.roa (raw, json)
Hash identifier:          F7XwsytM5Fl8BpskEQUb/2VPBX1yeuEDgQ45+uRuTG4=
Subject key identifier:   1B:83:BD:8B:30:92:AA:74:72:9D:DA:03:3A:6C:87:6B:17:41:2C:D1
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       60176EB82D3F477B1D21353D15E7EBDF922363D5
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32322d3234203d3e203532353638.roa
Signing time:             Tue 09 Aug 2022 12:57:06 +0000
ROA not before:           Tue 09 Aug 2022 12:52:06 +0000
ROA not after:            Tue 08 Aug 2023 12:57:06 +0000
asID:                     52568
IP address blocks:        45.228.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:17:6e:b8:2d:3f:47:7b:1d:21:35:3d:15:e7:eb:df:92:23:63:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 12:52:06 2022 GMT
            Not After : Aug  8 12:57:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:78:f0:1f:4f:31:f9:50:f9:18:0d:5c:90:
                    84:95:93:fc:43:70:08:8f:6c:89:bd:c1:e7:d9:32:
                    28:1e:d6:56:2a:2c:b2:22:e0:ef:41:19:fa:00:8c:
                    89:e7:73:d0:f0:0e:b1:47:fc:63:96:0f:63:36:a0:
                    be:50:4f:66:97:06:d6:a1:c2:09:64:ac:be:da:02:
                    47:d3:f2:63:77:bc:07:f0:9f:2e:c9:1a:64:e4:8d:
                    9b:65:a5:e1:ed:5e:b7:5a:10:d5:1c:99:47:5b:7f:
                    5a:a5:78:5f:3d:02:b0:fc:25:bf:04:2f:1d:e3:78:
                    a0:4b:4d:ab:ed:f9:a1:8a:f8:8e:cf:55:ad:58:01:
                    0c:fb:61:31:90:32:76:e4:27:6a:29:cb:f0:13:2a:
                    a8:aa:f2:14:f4:aa:b0:77:32:c8:c9:57:00:98:de:
                    f2:95:f2:31:d3:ea:cd:e6:8a:aa:78:6f:bc:e2:d0:
                    29:c4:fb:08:28:47:8e:97:b8:b3:13:c7:73:13:a1:
                    27:14:44:68:c9:01:16:cb:1f:d3:1f:5d:15:81:a8:
                    07:a3:64:d5:e2:68:b1:48:de:57:df:e1:e1:0f:4a:
                    89:37:01:45:f7:f6:67:95:55:f5:f7:7c:c7:dd:ae:
                    e4:05:f0:63:ed:f8:0b:59:69:f0:a0:5b:5a:18:49:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:83:BD:8B:30:92:AA:74:72:9D:DA:03:3A:6C:87:6B:17:41:2C:D1
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32322d3234203d3e203532353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:16:be:64:75:57:4e:4a:ad:47:9c:25:f0:f5:44:f8:98:7b:
         57:45:2a:bb:7c:8a:e5:ba:8c:20:58:2f:71:6d:4a:13:f6:9b:
         bf:db:45:5a:30:ba:aa:f6:ef:26:f5:a4:c8:b6:93:a6:d8:7f:
         e4:df:76:bf:f7:17:81:be:c6:10:e0:4e:39:db:22:c5:b4:30:
         9c:38:82:1e:39:09:db:5c:df:bc:ef:f4:29:47:9a:5c:92:c3:
         b3:39:51:68:2f:3a:9e:9b:0e:8a:75:89:f0:6b:1b:33:e0:03:
         c3:fc:ef:11:c1:05:7a:78:1b:a5:dc:d2:c9:30:c5:a2:5e:71:
         d7:f8:55:9e:fb:c6:f0:1d:99:66:cf:42:9f:7d:e9:14:f3:d9:
         39:43:21:a8:de:34:f4:cb:c4:1f:e6:90:60:d5:ae:01:d6:df:
         75:a2:27:6a:4d:38:a5:54:69:79:a2:be:e3:19:9c:55:89:21:
         3a:ae:80:55:3b:b8:82:97:53:d8:bd:0e:53:5f:28:bb:b6:93:
         b7:7b:02:0d:d1:32:f4:ff:05:fa:b9:34:86:fc:83:3c:72:35:
         46:14:ac:2a:ff:8e:1c:21:a6:00:93:ae:1d:1e:c0:bc:c3:2f:
         7f:3c:e3:1b:cc:1e:20:dd:01:5e:27:ab:fc:dc:d2:39:81:ec:
         8c:3b:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org