Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32342d3234203d3e20323632373733.roa
File:                     34352e3232382e3134342e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          imBrtbdley/7WWZOhmEe6eVjx+PdvEXwMQNb7Tvbd6w=
Subject key identifier:   36:48:66:84:8D:9E:34:26:2A:B5:9E:92:33:69:07:E5:C7:CD:57:6A
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       618E79B7D6D00EE1F767CD286E7E6103E9D7D4C1
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 02 Nov 2022 07:41:18 +0000
ROA not before:           Wed 02 Nov 2022 07:36:18 +0000
ROA not after:            Wed 01 Nov 2023 07:41:18 +0000
asID:                     262773
IP address blocks:        45.228.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8e:79:b7:d6:d0:0e:e1:f7:67:cd:28:6e:7e:61:03:e9:d7:d4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Nov  2 07:36:18 2022 GMT
            Not After : Nov  1 07:41:18 2023 GMT
        Subject: CN=3082010A0282010100AD59E921AB11A2E918C6D0ECA9799551DAAA97A5C8F2271834C71BEAFA1A40BF135D6298FAF4E1926325867F46AFE82A8EF19C87F208F4F6603262CA83EFBEF4C5A6AE83800C88FC7FDD73D19CAF2337CC7A74C0204AF76749F791625964131BCFE011829156800B65D64D3CDB7EE7792E6550A0AE7077669EE8F64A99F11FA87D380DD23EEA89073320D256F0034DC1243E04C9246C164FA8A40FB3E01E9091E39C7B4965BE5E9B981C84706F6336743F78DCE519ABAF4882043BED711D8C1C56C4E30111A126643B1054989635F89ACE045F9E9B4F04B21B013C4ED04493495F47AD13011C16B834CF6830CC264268E79C6FA2A59F6E9484D2EC7C6364643D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:e9:21:ab:11:a2:e9:18:c6:d0:ec:a9:79:
                    95:51:da:aa:97:a5:c8:f2:27:18:34:c7:1b:ea:fa:
                    1a:40:bf:13:5d:62:98:fa:f4:e1:92:63:25:86:7f:
                    46:af:e8:2a:8e:f1:9c:87:f2:08:f4:f6:60:32:62:
                    ca:83:ef:be:f4:c5:a6:ae:83:80:0c:88:fc:7f:dd:
                    73:d1:9c:af:23:37:cc:7a:74:c0:20:4a:f7:67:49:
                    f7:91:62:59:64:13:1b:cf:e0:11:82:91:56:80:0b:
                    65:d6:4d:3c:db:7e:e7:79:2e:65:50:a0:ae:70:77:
                    66:9e:e8:f6:4a:99:f1:1f:a8:7d:38:0d:d2:3e:ea:
                    89:07:33:20:d2:56:f0:03:4d:c1:24:3e:04:c9:24:
                    6c:16:4f:a8:a4:0f:b3:e0:1e:90:91:e3:9c:7b:49:
                    65:be:5e:9b:98:1c:84:70:6f:63:36:74:3f:78:dc:
                    e5:19:ab:af:48:82:04:3b:ed:71:1d:8c:1c:56:c4:
                    e3:01:11:a1:26:64:3b:10:54:98:96:35:f8:9a:ce:
                    04:5f:9e:9b:4f:04:b2:1b:01:3c:4e:d0:44:93:49:
                    5f:47:ad:13:01:1c:16:b8:34:cf:68:30:cc:26:42:
                    68:e7:9c:6f:a2:a5:9f:6e:94:84:d2:ec:7c:63:64:
                    64:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:48:66:84:8D:9E:34:26:2A:B5:9E:92:33:69:07:E5:C7:CD:57:6A
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134342e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:1d:20:d3:f9:91:df:f0:36:7c:1f:c3:9e:76:e1:3d:71:
         13:37:01:14:61:6e:05:f2:1a:ca:97:73:4b:e2:05:33:61:c4:
         f3:b6:3a:f2:42:d9:ba:9f:cb:15:d4:38:de:d2:ea:ca:6b:2c:
         75:0d:21:01:23:b0:6a:2c:c1:df:34:a8:a6:d7:fe:7f:6e:a1:
         d5:f6:82:f2:9f:f0:bc:c1:42:ae:07:c3:ac:75:d0:f0:cb:8a:
         8e:58:ea:39:b7:94:78:91:05:41:b2:17:fb:a2:c9:12:4c:84:
         4b:90:06:71:6d:aa:2e:45:f4:e7:11:42:ca:9d:c8:34:29:4a:
         ae:7b:f8:e7:21:e6:e5:b7:ef:58:c7:8f:75:86:33:0b:0a:d5:
         b6:f0:a4:52:d0:ac:b7:c1:eb:46:89:d8:ba:fc:73:bc:cc:c9:
         20:11:c8:1f:dc:b5:fe:a3:9a:db:1f:08:17:c2:42:48:d2:29:
         d6:94:cc:07:e5:6d:34:17:5e:0b:b8:e8:02:99:47:ac:82:13:
         d8:a3:a2:38:b4:f1:66:bd:c7:5e:cb:82:d6:e1:e1:62:cb:25:
         17:75:03:82:67:83:de:a5:ef:ca:e0:da:f0:9e:04:a8:21:45:
         12:0c:bd:1e:91:30:79:c8:31:96:14:5f:90:5a:a2:42:d2:d1:
         2d:4a:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org