Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231342e302f32342d3234203d3e203238353938.roa
File:                     34352e3232392e3231342e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          owyDGD9fGQBA2tT6PdNBRZEem0BVd9lifr8fMesljSI=
Subject key identifier:   F7:70:AD:4E:68:39:B0:57:6E:B7:3B:46:CC:76:23:4E:51:4B:48:CC
Certificate issuer:       /CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
Certificate serial:       2018C29DE68FBEA1A520551C19D027F2BA8D1833
Authority key identifier: 3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231342e302f32342d3234203d3e203238353938.roa
Signing time:             Tue 30 Aug 2022 17:07:09 +0000
ROA not before:           Tue 30 Aug 2022 17:02:09 +0000
ROA not after:            Tue 29 Aug 2023 17:07:09 +0000
asID:                     28598
IP address blocks:        45.229.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:18:c2:9d:e6:8f:be:a1:a5:20:55:1c:19:d0:27:f2:ba:8d:18:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FD88B6285E31B750B62E2191C0A6F1645F750D1
        Validity
            Not Before: Aug 30 17:02:09 2022 GMT
            Not After : Aug 29 17:07:09 2023 GMT
        Subject: CN=F770AD4E6839B0576EB73B46CC76234E514B48CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:21:e1:ba:59:be:d8:a0:c5:74:9a:55:d6:
                    a9:6c:c2:41:69:0c:ce:1b:3b:17:c6:74:16:fe:54:
                    ca:30:29:f7:87:7f:a4:a0:a7:9c:cf:ad:8f:e2:b1:
                    b3:6b:67:f0:2a:ea:47:34:95:ab:8c:62:60:fd:df:
                    6d:ea:7e:74:57:82:4d:5f:17:65:92:11:bf:ce:cd:
                    e4:12:bc:ca:30:66:60:29:77:4a:76:fa:13:b3:04:
                    b0:40:dd:ed:5a:9b:7b:72:78:8c:a3:d0:04:aa:f5:
                    b5:89:0c:27:01:05:10:b9:98:d9:ac:dd:0b:ca:07:
                    ad:20:1a:01:ee:47:9f:2c:50:4d:cf:09:48:31:fe:
                    9f:87:37:21:6c:5b:97:99:81:78:44:dd:21:26:6b:
                    f6:48:bc:03:da:9b:0b:3c:3a:1b:0f:7c:a5:25:06:
                    4e:38:b8:27:1e:6d:88:4f:cc:69:84:a3:6a:67:7a:
                    df:1b:74:42:39:dc:2e:e5:95:c2:6d:e0:1d:c2:2f:
                    1b:20:08:90:99:e7:ef:72:6b:6e:e3:63:88:29:98:
                    7c:4f:1f:76:ee:5c:68:af:45:7a:55:84:ab:2e:b5:
                    bd:22:c4:a8:c6:34:47:d3:83:bb:67:c0:4c:92:16:
                    5a:15:42:8e:2f:1d:00:42:1d:47:9f:93:d3:09:13:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:AD:4E:68:39:B0:57:6E:B7:3B:46:CC:76:23:4E:51:4B:48:CC
            X509v3 Authority Key Identifier:
                keyid:3F:D8:8B:62:85:E3:1B:75:0B:62:E2:19:1C:0A:6F:16:45:F7:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FD88B6285E31B750B62E2191C0A6F1645F750D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/0/34352e3232392e3231342e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:dc:ce:51:3f:b5:73:cb:f7:21:98:db:75:81:e3:cb:6e:15:
         0d:4d:1b:79:05:58:b4:3c:ef:44:a8:81:bd:98:bb:6f:45:0b:
         a4:aa:5e:48:27:d4:bf:47:03:8f:c8:cd:3c:18:6b:e1:4c:c7:
         f6:e4:68:e6:f5:71:12:d1:94:98:52:b7:ed:56:c6:b6:18:89:
         04:e3:24:ee:2a:33:80:47:35:a7:2b:82:77:09:a1:00:e6:49:
         af:c0:cc:47:15:f3:1f:07:90:a6:3d:22:74:2f:84:c2:18:49:
         ad:78:c2:a3:14:38:df:fd:d7:0e:51:78:a2:05:00:44:13:27:
         e7:5f:b3:12:b0:d2:06:87:39:7e:12:c6:24:5d:1c:94:27:74:
         bf:39:e2:aa:37:cf:12:a3:33:09:1a:b2:b6:6b:14:67:dd:6b:
         43:26:7f:7c:89:75:c0:60:42:36:39:bb:1b:ba:71:3a:3e:98:
         c9:f4:46:79:79:78:30:7b:83:86:2f:37:b4:b3:f3:fd:b8:3c:
         43:87:d9:c3:35:70:d0:a6:35:5f:58:6a:12:c6:61:e1:d3:8d:
         3f:c8:51:27:88:06:81:bf:f0:fb:c5:dc:7f:4e:aa:8c:54:70:
         c9:fa:fb:c0:05:d3:25:f4:60:04:81:eb:98:02:b2:03:23:6a:
         39:4d:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org