Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231322e302f32342d3234203d3e203238353938.roa
File:                     34352e3232392e3231322e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          efpVLjbyLnhZjKLpa9Pt92keze178a29d0GAG7ZUHNo=
Subject key identifier:   F5:A9:57:1A:5E:B3:C1:33:00:22:59:A9:E9:2F:8F:8C:EC:6D:AF:67
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       4BABE7C5E042F04CAF46FE5E3DAE14276CC08FB9
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231322e302f32342d3234203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:07:09 +0000
ROA not before:           Tue 30 Aug 2022 17:02:09 +0000
ROA not after:            Tue 29 Aug 2023 17:07:09 +0000
asID:                     28598
IP address blocks:        45.229.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ab:e7:c5:e0:42:f0:4c:af:46:fe:5e:3d:ae:14:27:6c:c0:8f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:02:09 2022 GMT
            Not After : Aug 29 17:07:09 2023 GMT
        Subject: CN=F5A9571A5EB3C133002259A9E92F8F8CEC6DAF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a7:c2:10:97:25:b3:f7:62:85:99:6e:f0:9b:
                    1c:03:6f:55:4b:b3:0a:f2:2b:2a:95:d6:d0:a8:44:
                    a7:bb:32:3b:15:98:ba:be:5d:94:cf:9e:d0:15:ed:
                    be:89:36:51:53:64:a8:90:88:4c:e2:80:6f:72:3f:
                    16:53:a7:6c:2e:6c:40:fc:fd:d0:c1:4a:2e:af:cd:
                    98:1c:e6:d5:e6:87:e3:99:12:9e:39:5d:44:a2:bd:
                    21:ca:e1:19:24:60:45:ba:62:47:9c:7e:60:82:8e:
                    a8:c3:b7:49:f3:39:b4:b1:da:19:f9:4d:45:2b:5c:
                    2a:b3:ba:a3:41:2f:29:1d:c4:13:ed:ef:63:c9:b8:
                    57:3a:36:d1:6c:7d:79:48:dd:85:74:c2:18:cd:d3:
                    a6:08:dc:67:95:46:fb:01:c1:a5:04:17:ad:9b:90:
                    aa:8c:3c:79:0a:eb:bc:67:69:b3:5d:37:e5:21:c3:
                    f9:aa:af:a6:ff:4a:48:eb:b8:92:14:e0:62:14:e7:
                    9e:dd:9c:1b:44:f0:fd:a1:7c:89:e9:a6:c7:3f:b6:
                    1d:14:d1:2c:ac:a9:3e:d8:73:6e:3f:b9:48:5f:c3:
                    62:87:bf:0f:42:86:eb:df:2c:a7:91:2b:65:49:37:
                    e3:5f:11:e7:f5:30:ab:16:73:2b:80:25:a0:0d:59:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A9:57:1A:5E:B3:C1:33:00:22:59:A9:E9:2F:8F:8C:EC:6D:AF:67
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231322e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:aa:33:ff:4d:16:90:ef:c9:da:29:4d:6e:4d:dd:ee:9e:9b:
         8c:64:c1:17:f7:a4:a0:63:70:b6:ad:d0:bf:34:79:da:0d:ce:
         a4:d8:3c:73:15:e3:80:be:3f:b9:23:3a:14:ae:52:38:5e:f3:
         8b:94:c8:4e:28:57:50:f9:e9:c7:19:dd:33:1e:4d:31:70:42:
         91:3d:c4:0c:9f:a9:3a:4d:a2:3d:5c:da:16:d9:be:01:fd:88:
         68:74:6f:f1:6f:d7:56:ef:12:4b:65:2f:36:da:72:da:6f:d1:
         b8:fe:49:9d:99:b0:30:27:4a:f8:3c:6a:66:62:72:00:39:e3:
         92:f3:a8:11:c5:38:26:90:be:ee:35:90:b5:c0:31:62:25:14:
         77:6e:e3:a6:99:26:b9:a2:47:37:d8:73:56:1c:83:15:ac:99:
         6b:ce:1f:b2:88:dc:27:32:35:ef:43:09:f8:c0:ee:0e:94:b7:
         38:36:eb:a0:e2:7d:12:ae:6d:d1:c8:ab:db:72:ca:34:e1:af:
         1b:d3:17:26:bb:e1:b6:9d:7a:91:e5:32:04:58:2c:a4:b3:e7:
         6f:77:f4:90:d3:05:3c:c8:19:85:0d:bf:4c:8d:ca:32:49:7c:
         68:8b:80:ba:ee:ab:01:5e:2f:5d:da:07:bd:3e:60:1b:f2:ce:
         eb:c3:7b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org