Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231332e302f32342d3234203d3e203238353938.roa
File:                     34352e3232392e3231332e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          GDrkL1XDWJoT2gVk0009xJztMAaTM7F1ecwNgOLftl8=
Subject key identifier:   6E:D7:D1:71:F9:DE:26:8A:54:4A:63:43:1E:C6:1C:46:F7:0D:77:DD
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       343DF25A7DDCADCC2F474F22096168B4D8236A23
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231332e302f32342d3234203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:07:10 +0000
ROA not before:           Tue 30 Aug 2022 17:02:10 +0000
ROA not after:            Tue 29 Aug 2023 17:07:10 +0000
asID:                     28598
IP address blocks:        45.229.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3d:f2:5a:7d:dc:ad:cc:2f:47:4f:22:09:61:68:b4:d8:23:6a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:02:10 2022 GMT
            Not After : Aug 29 17:07:10 2023 GMT
        Subject: CN=6ED7D171F9DE268A544A63431EC61C46F70D77DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:c2:19:de:99:5d:26:45:10:33:ac:0f:30:
                    56:32:bd:60:66:02:9e:ec:7b:b8:f9:e7:4c:26:a0:
                    be:3d:f9:98:93:bb:4a:e8:8b:02:10:c3:dd:00:4f:
                    ff:62:61:3b:6d:b8:64:8f:f6:e5:41:14:54:26:47:
                    08:e1:c8:9e:9b:63:66:14:b2:f5:64:b6:66:fd:53:
                    98:90:29:ca:10:a5:38:23:01:8d:99:bd:c6:cc:05:
                    a7:08:9f:d8:e4:a3:83:36:0a:dd:26:f3:6f:e5:e6:
                    f1:4e:fb:54:7b:39:c6:bc:50:2e:d8:1e:ec:ed:5c:
                    ef:43:84:f8:26:a6:45:c1:13:a5:6f:4f:d7:7e:b6:
                    ce:97:5a:cd:4f:39:1a:94:ab:b5:dd:88:1c:0d:f5:
                    55:d2:3b:10:d5:6f:f3:cd:e3:3c:24:43:b1:70:d9:
                    f6:9a:56:6c:49:6e:c9:37:bf:8e:5b:ff:3f:e8:45:
                    8f:ba:e9:f2:11:e4:fa:44:1a:db:74:b2:1b:ab:63:
                    14:7e:7d:ad:6c:4d:53:30:c1:a3:0c:97:c6:8e:45:
                    c7:4b:28:99:c5:28:cd:9f:8a:50:14:a7:78:f3:e7:
                    ed:d7:d7:16:97:5c:ce:8b:1b:a7:f3:19:8d:bb:10:
                    31:08:e9:dc:1f:17:38:9a:32:91:53:3d:7f:e5:80:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D7:D1:71:F9:DE:26:8A:54:4A:63:43:1E:C6:1C:46:F7:0D:77:DD
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231332e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:8c:e4:db:2d:97:22:45:20:34:87:ee:60:fd:78:97:14:
         1a:df:79:22:5b:73:77:d7:11:c4:2f:79:b7:1a:57:a0:c1:6d:
         29:3b:31:ef:9d:d7:e7:d9:13:bd:f4:b7:0a:88:e9:b2:f9:60:
         0d:4a:9c:bb:fa:e2:04:31:43:f1:ae:8f:0f:c3:13:55:8c:d4:
         71:5e:a5:95:43:6a:15:b7:01:bf:f2:17:59:f7:31:93:94:a8:
         26:8d:a0:f1:4b:ef:8e:ba:f8:ba:b7:29:71:be:95:74:43:ed:
         cb:7c:bc:e3:fa:d7:39:34:a2:be:ec:86:a5:40:18:b0:39:ff:
         34:11:28:28:cc:ca:a7:65:62:64:7f:45:65:26:7e:25:df:3e:
         ef:f1:b2:77:b0:9e:97:83:bc:e5:7e:d7:8c:db:7f:8e:f2:00:
         f7:43:4e:ad:02:35:44:24:f4:06:ca:20:d8:0c:39:90:d9:60:
         55:9a:03:7b:ac:ec:17:1a:06:6f:90:23:f9:61:1c:c7:56:c3:
         c6:dc:aa:2c:bc:8d:34:98:f4:73:57:e4:ac:9a:16:b2:92:cd:
         ef:77:8d:bf:31:c5:55:a1:91:d5:ef:a0:5a:c3:70:f4:f6:ab:
         41:32:ce:7d:09:59:95:a5:be:dd:92:64:d0:12:97:ce:38:85:
         f0:8a:09:d4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUND3yWn3crcwvR08iCWFotNgjaiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZEODhCNjI4NUUzMUI3NTBCNjJFMjE5MUMwQTZGMTY0
NUY3NTBEMTAeFw0yMjA4MzAxNzAyMTBaFw0yMzA4MjkxNzA3MTBaMDMxMTAvBgNV
BAMTKDZFRDdEMTcxRjlERTI2OEE1NDRBNjM0MzFFQzYxQzQ2RjcwRDc3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTx8IZ3pldJkUQM6wPMFYyvWBm
Ap7se7j550wmoL49+ZiTu0roiwIQw90AT/9iYTttuGSP9uVBFFQmRwjhyJ6bY2YU
svVktmb9U5iQKcoQpTgjAY2ZvcbMBacIn9jko4M2Ct0m82/l5vFO+1R7Oca8UC7Y
HuztXO9DhPgmpkXBE6VvT9d+ts6XWs1PORqUq7XdiBwN9VXSOxDVb/PN4zwkQ7Fw
2faaVmxJbsk3v45b/z/oRY+66fIR5PpEGtt0shurYxR+fa1sTVMwwaMMl8aORcdL
KJnFKM2filAUp3jz5+3X1xaXXM6LG6fzGY27EDEI6dwfFziaMpFTPX/lgA6rAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbtfRcfneJopUSmNDHsYcRvcNd90wHwYDVR0j
BBgwFoAUP9iLYoXjG3ULYuIZHApvFkX3UNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMC8zRkQ4OEI2Mjg1RTMxQjc1MEI2MkUyMTkxQzBBNkYxNjQ1Rjc1MEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNGRDg4QjYyODVFMzFCNzUw
QjYyRTIxOTFDMEE2RjE2NDVGNzUwRDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzAv
MzQzNTJlMzIzMjM5MmUzMjMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzUzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeXVMA0GCSqGSIb3DQEBCwUAA4IBAQA9Qozk2y2X
IkUgNIfuYP14lxQa33kiW3N31xHEL3m3GlegwW0pOzHvndfn2RO99LcKiOmy+WAN
Spy7+uIEMUPxro8PwxNVjNRxXqWVQ2oVtwG/8hdZ9zGTlKgmjaDxS++Ouvi6tylx
vpV0Q+3LfLzj+tc5NKK+7IalQBiwOf80ESgozMqnZWJkf0VlJn4l3z7v8bJ3sJ6X
g7zlfteM23+O8gD3Q06tAjVEJPQGyiDYDDmQ2WBVmgN7rOwXGgZvkCP5YRzHVsPG
3KosvI00mPRzV+Ssmhayks3vd42/McVVoZHV76Baw3D09qtBMs59CVmVpb7dkmTQ
EpfOOIXwignU
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org