Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231322e302f32322d3232203d3e203238353938.roa
File:                     34352e3232392e3231322e302f32322d3232203d3e203238353938.roa (raw, json)
Hash identifier:          xxyGE/oycwXPvNKG0829wqAZDYnE3p2ThaOaWoppPds=
Subject key identifier:   DC:7B:7A:1E:5C:9B:2D:0C:3B:5B:01:58:1C:85:5B:4C:46:A0:C8:78
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       5B9D54647B0FFF5E64DA4C306350C043CF7E6E2B
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231322e302f32322d3232203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 15:24:20 +0000
ROA not before:           Tue 30 Aug 2022 15:19:20 +0000
ROA not after:            Tue 29 Aug 2023 15:24:20 +0000
asID:                     28598
IP address blocks:        45.229.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9d:54:64:7b:0f:ff:5e:64:da:4c:30:63:50:c0:43:cf:7e:6e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 15:19:20 2022 GMT
            Not After : Aug 29 15:24:20 2023 GMT
        Subject: CN=DC7B7A1E5C9B2D0C3B5B01581C855B4C46A0C878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3b:25:7f:23:3e:ca:cd:35:66:b2:39:41:dd:
                    2f:e3:68:a1:bb:b8:29:87:28:5b:32:d5:be:21:78:
                    be:3e:c4:24:21:04:2f:11:59:38:e8:25:7c:9f:a7:
                    2f:c7:1e:36:4f:a2:fe:0f:96:d5:18:af:5b:e7:89:
                    61:2a:fe:18:ec:c1:16:d0:69:9c:2b:91:ea:87:da:
                    63:c3:0d:fe:e9:99:ed:6a:48:fd:22:a4:9a:2a:26:
                    e2:82:e1:19:89:3a:b8:10:44:ea:da:c0:16:ee:4d:
                    17:13:84:4a:5f:a1:18:f5:56:64:c6:22:dd:65:f4:
                    b6:ce:7e:eb:1c:6c:89:bc:2c:2a:7a:51:55:25:3f:
                    36:54:84:cf:ac:dc:07:c8:de:01:18:b5:ab:42:11:
                    55:b6:0a:a4:c9:1f:e1:29:63:fd:6d:46:9a:da:01:
                    f2:ef:ad:94:f0:03:bf:84:23:bb:59:48:d6:2e:50:
                    23:3f:63:78:8f:f1:b5:dd:02:c3:ac:94:99:f0:38:
                    3a:82:c4:1b:c6:8e:e6:8f:af:13:16:12:10:56:43:
                    b6:97:78:09:e3:1f:67:c5:96:74:e8:35:73:7b:21:
                    f0:f2:0d:29:66:f3:37:19:9c:67:3f:c9:51:39:3f:
                    f3:3c:6d:15:8c:f5:50:64:20:84:1b:82:78:c1:d3:
                    0e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7B:7A:1E:5C:9B:2D:0C:3B:5B:01:58:1C:85:5B:4C:46:A0:C8:78
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231322e302f32322d3232203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:8f:f5:e0:b7:a1:4d:4e:b9:af:a9:2c:24:fa:18:7e:d4:49:
         2b:72:b5:68:45:95:8e:a4:07:8d:1e:a3:d2:91:e8:e9:8e:04:
         21:30:26:9a:a7:8f:60:04:6f:8e:ae:30:cb:a0:8b:b2:2d:0d:
         fb:dd:a7:29:73:b2:a9:64:28:b2:1f:d7:4f:ce:47:a3:fe:d1:
         52:c2:50:b1:03:03:b6:3e:da:dc:ab:97:fd:f2:e1:3a:7b:79:
         75:c3:9c:e2:42:8d:2b:df:b2:31:8b:d4:80:fa:65:2c:e6:26:
         4f:20:ea:df:c6:38:ed:0a:57:35:bb:c1:95:1f:4a:a7:60:54:
         6a:55:a2:e1:20:e9:0c:8b:96:4b:1a:06:93:cb:1a:95:f7:25:
         96:1b:0a:2e:f6:f8:35:79:e5:06:32:97:70:48:d3:9c:9c:93:
         7c:8b:e2:2f:f8:5e:f0:9d:8e:b0:92:93:d7:f6:51:58:49:d3:
         b6:01:4e:86:48:08:6d:61:83:d7:23:52:31:98:49:88:88:7f:
         0e:53:2b:6a:b9:f9:88:e8:14:00:4e:e2:3c:f6:84:c0:05:6e:
         9f:31:5d:7a:75:94:2f:2f:1b:94:12:c1:6b:b4:95:e9:f4:ea:
         29:d4:01:aa:1a:90:fb:29:7a:5a:a1:a5:88:ec:f7:41:9a:b6:
         05:fa:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org