Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134362e302f32342d3234203d3e20323633353233.roa
File:                     34352e3232382e3134362e302f32342d3234203d3e20323633353233.roa (raw, json)
Hash identifier:          m1ZytUlE/uRNDj0ezCRZj0sZ1W+WUR4Q94CsUKJpq1k=
Subject key identifier:   CA:87:5B:DD:F4:AA:47:BA:42:5F:EE:3C:3B:75:52:26:7B:EC:BF:0E
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       3526DA41D10973F2D6CF21B3E205EB55DEC4060A
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134362e302f32342d3234203d3e20323633353233.roa
Signing time:             Tue 09 Aug 2022 12:35:44 +0000
ROA not before:           Tue 09 Aug 2022 12:30:44 +0000
ROA not after:            Tue 08 Aug 2023 12:35:44 +0000
asID:                     263523
IP address blocks:        45.228.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:26:da:41:d1:09:73:f2:d6:cf:21:b3:e2:05:eb:55:de:c4:06:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 12:30:44 2022 GMT
            Not After : Aug  8 12:35:44 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:bc:29:00:75:43:f9:5a:a9:b9:dc:0b:92:
                    bc:ec:71:b2:99:d4:47:cb:77:cf:79:77:73:14:d7:
                    4b:f2:5d:3c:d9:c6:08:d6:83:2b:51:73:4f:6c:3b:
                    43:81:72:0e:74:45:7c:1a:46:d1:f3:9a:b8:c1:18:
                    0c:f2:ba:c9:dd:be:ca:60:7c:3d:5f:4a:df:f4:f5:
                    cb:1e:27:fd:45:41:68:03:72:1e:e6:3e:df:88:2c:
                    5c:32:0b:4a:d4:5e:68:bc:98:61:3a:d3:10:5a:0e:
                    cf:ab:2f:5a:a0:c4:d8:0b:ba:b1:83:10:df:66:de:
                    6d:aa:dc:5b:b3:e5:c4:63:b3:86:e4:42:a5:b1:4e:
                    e0:84:20:39:ac:ec:c9:9a:d1:aa:9f:c2:ea:4a:a9:
                    80:7a:fa:a2:1e:1c:4d:49:41:7e:0d:a7:21:1e:6f:
                    7e:5a:c7:a2:9f:6a:32:fc:e3:e9:6e:07:fe:8b:6f:
                    da:f2:1d:99:01:3e:f9:a6:39:b6:e3:b3:dd:b9:7c:
                    b1:3e:01:18:6d:5d:1b:28:1c:02:9f:f3:32:45:19:
                    da:5c:2f:8a:cc:df:ca:2d:a6:d7:73:67:6c:aa:d2:
                    51:da:60:78:0d:4c:7c:b4:ea:55:bc:20:8e:0c:e8:
                    d5:40:97:9c:ae:d6:fe:d9:83:ab:fd:65:aa:2d:90:
                    2b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:87:5B:DD:F4:AA:47:BA:42:5F:EE:3C:3B:75:52:26:7B:EC:BF:0E
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/34352e3232382e3134362e302f32342d3234203d3e20323633353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:60:c1:45:38:b5:0a:40:a9:c8:50:f1:a7:e0:5f:30:ba:f5:
         8f:30:ce:e8:62:d0:fa:5c:fb:15:80:55:d5:99:4f:cf:aa:5b:
         86:70:1e:c5:46:c4:e6:53:9d:e2:28:12:98:6d:d7:6c:ea:bb:
         c3:16:ed:4c:03:21:aa:bd:05:95:41:c3:91:89:52:3d:93:87:
         13:dc:58:7c:3c:87:bd:db:6a:b8:08:66:f4:c9:1f:94:98:cb:
         52:48:bf:1c:83:15:a8:e8:7d:22:9e:55:b8:ee:25:23:51:bd:
         4c:db:9e:07:ad:e6:70:2f:db:73:78:d7:54:13:39:90:df:ec:
         ba:3d:7e:44:c0:6b:a4:3f:73:d4:b1:2e:9f:4f:7e:d0:f3:64:
         99:42:b7:1f:b3:6e:8c:74:2e:4e:bb:51:dc:84:76:12:87:ae:
         c7:5d:29:e5:8e:ad:68:fc:aa:f9:db:bc:b9:c8:3e:3a:89:2b:
         dd:a6:df:b5:26:ee:3f:7c:da:ba:0a:60:2f:5a:8d:d8:62:93:
         fe:ec:ab:bb:fb:b0:6d:45:93:9f:b0:90:d6:73:36:f6:cc:be:
         a3:61:a0:51:a7:2d:29:86:9d:10:41:ca:68:2a:db:81:33:65:
         d2:c9:6f:c5:d5:e9:2e:e9:c9:41:8b:f9:5a:61:2c:1d:f6:8e:
         54:ab:b9:fa
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUNSbaQdEJc/LWzyGz4gXrVd7EBgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yMjA4MDkxMjMwNDRaFw0yMzA4MDgxMjM1NDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDYwQkJDMjkwMDc1NDNGOTVB
QTlCOURDMEI5MkJDRUM3MUIyOTlENDQ3Q0I3N0NGNzk3NzczMTRENzRCRjI1RDND
RDlDNjA4RDY4MzJCNTE3MzRGNkMzQjQzODE3MjBFNzQ0NTdDMUE0NkQxRjM5QUI4
QzExODBDRjJCQUM5RERCRUNBNjA3QzNENUY0QURGRjRGNUNCMUUyN0ZENDU0MTY4
MDM3MjFFRTYzRURGODgyQzVDMzIwQjRBRDQ1RTY4QkM5ODYxM0FEMzEwNUEwRUNG
QUIyRjVBQTBDNEQ4MEJCQUIxODMxMERGNjZERTZEQUFEQzVCQjNFNUM0NjNCMzg2
RTQ0MkE1QjE0RUUwODQyMDM5QUNFQ0M5OUFEMUFBOUZDMkVBNEFBOTgwN0FGQUEy
MUUxQzRENDk0MTdFMERBNzIxMUU2RjdFNUFDN0EyOUY2QTMyRkNFM0U5NkUwN0ZF
OEI2RkRBRjIxRDk5MDEzRUY5QTYzOUI2RTNCM0REQjk3Q0IxM0UwMTE4NkQ1RDFC
MjgxQzAyOUZGMzMyNDUxOURBNUMyRjhBQ0NERkNBMkRBNkQ3NzM2NzZDQUFEMjUx
REE2MDc4MEQ0QzdDQjRFQTU1QkMyMDhFMENFOEQ1NDA5NzlDQUVENkZFRDk4M0FC
RkQ2NUFBMkQ5MDJCRDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1gu8KQB1Q/laqbncC5K87HGymdRHy3fPeXdzFNdL8l082cYI1oMr
UXNPbDtDgXIOdEV8GkbR85q4wRgM8rrJ3b7KYHw9X0rf9PXLHif9RUFoA3Ie5j7f
iCxcMgtK1F5ovJhhOtMQWg7Pqy9aoMTYC7qxgxDfZt5tqtxbs+XEY7OG5EKlsU7g
hCA5rOzJmtGqn8LqSqmAevqiHhxNSUF+DachHm9+Wsein2oy/OPpbgf+i2/a8h2Z
AT75pjm247PduXyxPgEYbV0bKBwCn/MyRRnaXC+KzN/KLabXc2dsqtJR2mB4DUx8
tOpVvCCODOjVQJecrtb+2YOr/WWqLZAr2QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMqHW930qke6Ql/uPDt1UiZ77L8OMB8GA1UdIwQYMBaAFBO7KaS4S99m6kAZh7hw
SLdIT0iIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ozRFpFb2JXVjF6R01i
clFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAvMTNCQjI5QTRCODRCREY2
NkVBNDAxOTg3Qjg3MDQ4Qjc0ODRGNDg4OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0
ODg4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KM0RaRW9iV1YxekdNYnJRZHZF
VVIzUlp5bllkNGRKTTJySkxrbU5uWTYzOS8wLzM0MzUyZTMyMzIzODJlMzEzNDM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzUzMjMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LeSSMA0GCSqGSIb3DQEBCwUAA4IBAQCIYMFFOLUKQKnIUPGn4F8wuvWPMM7oYtD6
XPsVgFXVmU/PqluGcB7FRsTmU53iKBKYbdds6rvDFu1MAyGqvQWVQcORiVI9k4cT
3Fh8PIe922q4CGb0yR+UmMtSSL8cgxWo6H0inlW47iUjUb1M254HreZwL9tzeNdU
EzmQ3+y6PX5EwGukP3PUsS6fT37Q82SZQrcfs26MdC5Ou1HchHYSh67HXSnljq1o
/Kr527y5yD46iSvdpt+1Ju4/fNq6CmAvWo3YYpP+7Ku7+7BtRZOfsJDWczb2zL6j
YaBRpy0php0QQcpoKtuBM2XSyW/F1eku6clBi/laYSwd9o5Uq7n6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org