Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231322e302f32332d3233203d3e203238353938.roa
File:                     34352e3232392e3231322e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier:          Ate6OE1YO11HjxxKGag3TmEmLFhefN4tt5F7fZ7PuoY=
Subject key identifier:   54:F4:6A:AF:83:7A:7A:8E:64:EA:8C:6F:4B:D0:1B:32:C0:C0:9B:C3
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       01C49325E8586895CF8B24C61A0E1B913E6C3C6A
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231322e302f32332d3233203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:07:10 +0000
ROA not before:           Tue 30 Aug 2022 17:02:10 +0000
ROA not after:            Tue 29 Aug 2023 17:07:10 +0000
asID:                     28598
IP address blocks:        45.229.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c4:93:25:e8:58:68:95:cf:8b:24:c6:1a:0e:1b:91:3e:6c:3c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:02:10 2022 GMT
            Not After : Aug 29 17:07:10 2023 GMT
        Subject: CN=54F46AAF837A7A8E64EA8C6F4BD01B32C0C09BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3e:e3:9d:98:f5:81:a9:f7:30:51:9d:d3:dd:
                    b7:ae:f1:c6:17:77:8c:b5:f7:2a:9a:8d:8a:ba:e0:
                    e1:e0:42:06:de:9a:0f:c0:d9:76:ea:cf:f4:ac:97:
                    d3:cf:81:95:85:48:40:fc:1f:a0:3c:9c:ed:6e:02:
                    89:a7:5f:a9:58:e0:31:54:ae:70:d2:27:a2:89:2e:
                    eb:d2:45:e8:cc:20:49:93:76:40:a7:ff:26:e5:eb:
                    3e:bc:b7:95:7d:91:da:12:78:bf:b8:39:a6:a0:e5:
                    c0:5f:7c:04:c4:f4:ce:38:2d:ba:ff:53:36:52:88:
                    d7:06:c5:c2:a7:f2:19:ef:39:4f:d9:5b:81:23:55:
                    8b:79:52:96:49:9b:11:c8:4c:2a:98:5e:63:eb:8c:
                    5e:fc:d5:5f:1e:72:17:90:43:17:c0:4c:c2:75:69:
                    52:ba:08:0e:fa:28:2e:1c:f0:4c:32:b3:e7:64:b5:
                    cc:d7:8d:b3:7e:81:22:6b:14:4c:53:29:45:9f:75:
                    b7:f3:a8:0a:cf:a4:99:99:0d:7b:d3:df:6b:99:7c:
                    66:45:7e:a6:39:f0:00:96:9c:44:06:33:4d:d4:d9:
                    18:3a:a0:52:a0:0b:3f:05:b0:64:07:9d:47:f6:97:
                    2b:61:43:77:71:38:31:8f:4c:9e:83:96:06:8e:0a:
                    22:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:6A:AF:83:7A:7A:8E:64:EA:8C:6F:4B:D0:1B:32:C0:C0:9B:C3
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231322e302f32332d3233203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:db:01:2f:50:89:1c:6c:38:ec:7f:c6:07:89:e3:10:56:7d:
         41:c6:9a:4a:b4:d4:2c:cc:83:1a:59:b8:98:d4:61:47:a5:8b:
         90:f5:a5:da:f2:08:dd:4f:92:05:01:1b:21:ed:0c:63:0b:a7:
         1f:71:aa:7a:3c:56:5c:65:c7:e8:0c:e0:ec:82:7e:ee:8c:f4:
         0d:56:b9:49:0d:2f:ea:7a:f3:76:cd:55:ed:2c:13:12:c9:b3:
         28:51:3d:02:58:7b:8b:f4:44:af:58:4c:96:ad:97:17:fc:5c:
         fc:ec:8b:83:52:33:e8:30:49:37:e3:be:4d:3b:1d:73:17:80:
         d0:9e:8f:35:bc:d0:9b:5e:b9:d6:de:54:cf:69:00:5e:13:a8:
         86:d2:48:a8:68:1d:6c:d4:ee:a0:2d:8b:e3:42:fe:c4:8f:c6:
         3d:6c:8b:a3:ab:45:04:ce:ab:b1:18:c5:d6:e4:36:30:95:ff:
         a4:f0:97:e9:fb:d3:01:f1:6c:bf:65:3a:1b:7c:de:12:65:c9:
         8b:f5:fe:b3:99:3d:ff:db:60:70:0b:97:2a:01:87:00:6d:37:
         24:22:e5:01:bc:15:eb:0e:b9:0e:a7:bb:f8:da:ab:2e:d7:00:
         23:db:99:37:04:af:91:2d:0c:f0:c6:25:6d:08:8c:71:9c:63:
         3c:5b:ba:8d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAcSTJehYaJXPiyTGGg4bkT5sPGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZEODhCNjI4NUUzMUI3NTBCNjJFMjE5MUMwQTZGMTY0
NUY3NTBEMTAeFw0yMjA4MzAxNzAyMTBaFw0yMzA4MjkxNzA3MTBaMDMxMTAvBgNV
BAMTKDU0RjQ2QUFGODM3QTdBOEU2NEVBOEM2RjRCRDAxQjMyQzBDMDlCQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRPuOdmPWBqfcwUZ3T3beu8cYX
d4y19yqajYq64OHgQgbemg/A2Xbqz/Ssl9PPgZWFSED8H6A8nO1uAomnX6lY4DFU
rnDSJ6KJLuvSRejMIEmTdkCn/ybl6z68t5V9kdoSeL+4Oaag5cBffATE9M44Lbr/
UzZSiNcGxcKn8hnvOU/ZW4EjVYt5UpZJmxHITCqYXmPrjF781V8echeQQxfATMJ1
aVK6CA76KC4c8Ewys+dktczXjbN+gSJrFExTKUWfdbfzqArPpJmZDXvT32uZfGZF
fqY58ACWnEQGM03U2Rg6oFKgCz8FsGQHnUf2lythQ3dxODGPTJ6DlgaOCiJNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVPRqr4N6eo5k6oxvS9AbMsDAm8MwHwYDVR0j
BBgwFoAUP9iLYoXjG3ULYuIZHApvFkX3UNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMC8zRkQ4OEI2Mjg1RTMxQjc1MEI2MkUyMTkxQzBBNkYxNjQ1Rjc1MEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRDg4QjYyODVFMzFCNzUw
QjYyRTIxOTFDMEE2RjE2NDVGNzUwRDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzAv
MzQzNTJlMzIzMjM5MmUzMjMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzUzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLeXUMA0GCSqGSIb3DQEBCwUAA4IBAQBd2wEvUIkc
bDjsf8YHieMQVn1BxppKtNQszIMaWbiY1GFHpYuQ9aXa8gjdT5IFARsh7QxjC6cf
cap6PFZcZcfoDODsgn7ujPQNVrlJDS/qevN2zVXtLBMSybMoUT0CWHuL9ESvWEyW
rZcX/Fz87IuDUjPoMEk3475NOx1zF4DQno81vNCbXrnW3lTPaQBeE6iG0kioaB1s
1O6gLYvjQv7Ej8Y9bIujq0UEzquxGMXW5DYwlf+k8Jfp+9MB8Wy/ZTobfN4SZcmL
9f6zmT3/22BwC5cqAYcAbTckIuUBvBXrDrkOp7v42qsu1wAj25k3BK+RLQzwxiVt
CIxxnGM8W7qN
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org