Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3232392e3231322e302f32322d3332203d3e203238353938.roa
File:                     34352e3232392e3231322e302f32322d3332203d3e203238353938.roa (raw, json)
Hash identifier:          +PVOhLiFsDGCjns9D23S/i8LR5pldTGKBaBkNFOH9xU=
Subject key identifier:   DD:78:13:65:19:53:2E:BC:85:3B:27:21:45:8E:64:6E:60:1F:CA:8A
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       6A2F5A974EB47859C8D69333E434AA6F6AE38421
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3232392e3231322e302f32322d3332203d3e203238353938.roa
Signing time:             Fri 18 Nov 2022 22:14:29 +0000
ROA not before:           Fri 18 Nov 2022 22:09:29 +0000
ROA not after:            Fri 17 Nov 2023 22:14:29 +0000
asID:                     28598
IP address blocks:        45.229.212.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2f:5a:97:4e:b4:78:59:c8:d6:93:33:e4:34:aa:6f:6a:e3:84:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Nov 18 22:09:29 2022 GMT
            Not After : Nov 17 22:14:29 2023 GMT
        Subject: CN=DD78136519532EBC853B2721458E646E601FCA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:39:ef:1e:f2:16:a2:ac:dd:05:3e:1f:b3:
                    d2:fd:5e:71:3f:9a:c8:c8:49:c4:e6:25:97:32:de:
                    e0:19:3c:03:a3:60:27:7e:eb:b6:fe:e8:33:7b:90:
                    ce:af:ad:88:7b:75:e4:ef:78:04:41:f8:a9:58:c8:
                    6d:d9:a9:ff:57:2c:91:6c:6f:b0:b9:77:2e:d9:1b:
                    fc:45:af:22:d3:29:fd:70:d0:0d:c7:87:f4:d4:ed:
                    12:e1:60:d4:44:a3:2a:a5:04:b2:26:74:f9:fb:cc:
                    37:ed:d5:97:2c:da:19:14:4a:f4:0d:1d:c2:67:db:
                    b2:0f:04:f5:f7:22:b3:c6:ee:90:b0:b2:6f:88:a5:
                    ad:98:3d:04:6e:36:4f:48:2a:0b:7e:30:d8:ab:63:
                    c9:fa:e0:54:ba:88:3b:97:3d:79:7b:66:0b:dd:3d:
                    68:9d:27:5d:af:e6:b4:1b:e7:a2:10:bc:b7:20:3d:
                    12:6b:b2:9d:f4:9a:c5:4f:eb:14:2f:5e:2f:89:a4:
                    46:4a:02:c6:c9:97:5c:b1:82:bc:ac:64:da:35:88:
                    e3:e5:60:5b:b9:df:a9:24:03:6e:76:cf:7d:fd:d7:
                    ef:c2:31:c9:6e:76:1d:ca:48:96:9c:d8:bc:0f:cb:
                    83:6a:a3:92:01:4d:44:b1:3f:90:83:50:95:4c:ee:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:78:13:65:19:53:2E:BC:85:3B:27:21:45:8E:64:6E:60:1F:CA:8A
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3232392e3231322e302f32322d3332203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:70:9a:fd:1e:28:45:66:79:43:c9:58:27:4f:31:b1:44:60:
         92:2e:d7:4c:d8:38:c7:34:ff:92:fa:d8:c8:97:28:90:03:24:
         6a:9e:a2:57:e9:f8:03:ce:0f:1e:b4:ab:ef:8f:aa:7d:19:d9:
         ce:86:15:ab:8c:37:df:0a:52:83:19:6c:60:bf:ad:43:17:30:
         6f:ad:47:8c:de:f0:5b:6b:43:3f:b9:5f:0f:75:c4:1e:78:19:
         f7:7f:af:49:8a:aa:be:8e:4e:8d:4a:60:13:ff:7e:4b:59:2f:
         f6:58:f4:a4:aa:52:13:27:b1:42:28:59:fe:ef:c6:e2:81:6a:
         b7:72:dd:32:62:9c:aa:01:77:df:8b:57:b9:a4:56:0b:a3:11:
         22:1a:55:3e:c0:b1:c0:d0:de:83:00:71:61:93:0b:9c:e1:8b:
         27:3e:8a:f7:8a:ba:9f:3e:75:b7:42:93:05:0f:fe:1a:cf:fa:
         98:b4:5d:d3:1f:ad:6c:15:9a:bd:b1:a3:30:4c:36:c8:7c:f4:
         2d:0d:f2:52:1f:e8:39:96:55:fb:4f:b5:f2:a4:79:a4:33:63:
         97:01:b3:da:76:0b:d5:3c:65:0d:67:39:e9:03:ac:0c:7f:b2:
         0f:a8:fb:81:ca:29:6d:0a:9e:df:29:0b:09:85:1c:3a:12:af:
         08:8b:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org