Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231342e302f32332d3233203d3e203238353938.roa
File:                     34352e3232392e3231342e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier:          4cRmhQofNIMfXjb6pyObAIi8U0/WlZcFZQGQ66qu3RA=
Subject key identifier:   49:AF:14:0D:EC:3F:58:8C:00:3E:49:BE:AA:1B:ED:04:05:68:0D:8A
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       58EC75840E97C9B053FACC288CC197D449F8A139
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231342e302f32332d3233203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:07:09 +0000
ROA not before:           Tue 30 Aug 2022 17:02:09 +0000
ROA not after:            Tue 29 Aug 2023 17:07:09 +0000
asID:                     28598
IP address blocks:        45.229.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ec:75:84:0e:97:c9:b0:53:fa:cc:28:8c:c1:97:d4:49:f8:a1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:02:09 2022 GMT
            Not After : Aug 29 17:07:09 2023 GMT
        Subject: CN=49AF140DEC3F588C003E49BEAA1BED0405680D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:b4:b4:b4:a6:4b:6c:56:3c:87:84:1f:ef:
                    ed:61:b3:13:e3:59:8b:4f:a1:71:b2:b7:23:32:8e:
                    6e:b1:cf:c5:17:0b:c3:e0:dd:23:ba:10:ef:03:23:
                    b8:30:c1:05:0c:0a:9b:44:d2:58:da:64:bf:f1:db:
                    5d:ad:2e:7f:e6:96:3f:0b:76:7f:ca:e7:38:20:88:
                    54:c3:0a:17:a0:b7:52:80:0d:9e:8f:5e:57:48:d9:
                    e0:ea:2a:5b:5f:01:98:f3:10:af:a4:c2:56:17:f7:
                    1d:cf:36:3d:79:f2:43:09:55:7f:76:51:40:61:81:
                    22:ee:e9:88:b1:a7:0a:c5:35:65:69:86:f9:ff:d4:
                    97:f6:83:18:f5:40:55:4f:51:9b:98:a3:7c:bd:a8:
                    0c:e8:4d:e1:14:a7:3a:ea:7f:8f:cc:91:f5:82:b3:
                    0a:f5:45:f5:fc:b0:55:ef:fe:60:8f:82:10:f2:f3:
                    55:ed:d1:7f:e7:23:af:f8:78:a7:fe:18:98:13:f2:
                    23:2f:3c:dc:a0:1d:58:cd:d0:da:74:d1:f6:04:65:
                    03:87:cd:ad:e0:5e:40:16:fa:52:cc:21:03:35:df:
                    18:f4:59:1b:00:17:e5:16:6e:f5:f2:19:d2:2f:24:
                    9e:07:a3:71:8f:dd:45:99:e1:dd:c3:5a:42:ad:b7:
                    7b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AF:14:0D:EC:3F:58:8C:00:3E:49:BE:AA:1B:ED:04:05:68:0D:8A
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231342e302f32332d3233203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:55:81:23:7e:56:a7:a8:77:6b:2a:95:d0:16:ed:cb:2b:25:
         9b:8f:5d:96:45:a5:63:39:eb:a1:a1:92:2e:18:db:9b:29:76:
         bf:af:7b:43:c6:1c:f4:70:03:4b:12:d7:a2:88:8b:14:ea:16:
         b7:0c:28:37:c6:83:73:f7:06:2f:61:7c:f8:0c:30:e3:4b:ce:
         5f:6a:e0:ef:19:50:37:29:19:1f:24:15:9b:4b:ed:74:1f:0b:
         ce:d7:fb:1b:e2:c4:c3:06:6a:14:68:88:bd:8d:5c:ae:b5:2a:
         81:81:15:3d:bc:77:2a:65:d8:a5:43:ae:31:9d:1a:f9:e7:fd:
         f0:d7:2d:1d:52:a1:f3:45:4a:f7:c4:d3:43:1e:21:32:e2:cb:
         39:f1:09:cd:58:5b:d5:9d:d1:75:90:25:ea:40:56:8c:fc:78:
         1f:c1:0e:90:45:7f:dc:4d:79:42:40:d1:f5:1a:3d:21:e3:7c:
         a3:36:5e:3b:00:27:f3:54:8a:f4:ef:98:e7:ab:d1:09:8e:eb:
         fb:c4:4b:cf:bd:b2:32:0f:7e:76:8f:29:f6:97:91:b2:96:45:
         11:07:bd:43:21:6f:10:dc:b8:4d:71:b8:53:c9:6f:84:41:49:
         f6:f9:a6:b6:ad:72:4a:a7:58:ed:bd:45:aa:06:86:7b:cc:12:
         6e:81:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org