Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38302e302f32322d3232203d3e20323638363038.roa
File:                     34352e3136342e38302e302f32322d3232203d3e20323638363038.roa (raw, json)
Hash identifier:          9W3rSHVPnVzDqKdge1SSwf4jWRSi1rrxvhl7YQZ4q20=
Subject key identifier:   05:E0:4D:52:71:41:C1:08:FD:66:77:7D:76:4F:46:D1:99:5F:A3:83
Certificate issuer:       /CN=DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249
Certificate serial:       4750B0A64A516F4E6C18891DC76BE38D03AB4290
Authority key identifier: DE:5D:38:FB:58:25:9E:39:64:BD:75:DF:E7:AF:1B:1A:B4:C2:02:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38302e302f32322d3232203d3e20323638363038.roa
Signing time:             Mon 31 Jan 2022 19:30:52 +0000
ROA not before:           Mon 31 Jan 2022 19:25:52 +0000
ROA not after:            Mon 30 Jan 2023 19:30:52 +0000
asID:                     268608
IP address blocks:        45.164.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:50:b0:a6:4a:51:6f:4e:6c:18:89:1d:c7:6b:e3:8d:03:ab:42:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249
        Validity
            Not Before: Jan 31 19:25:52 2022 GMT
            Not After : Jan 30 19:30:52 2023 GMT
        Subject: CN=05E04D527141C108FD66777D764F46D1995FA383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:fc:fe:6c:9d:bc:a2:72:96:00:90:83:4f:
                    88:88:57:f8:ab:14:5b:b2:d2:3e:a3:8b:a2:c3:38:
                    0c:7a:56:ff:98:e7:bc:ba:60:59:fa:37:ac:72:90:
                    a5:03:e7:3f:74:f5:45:b7:26:ec:eb:f7:37:f8:47:
                    f5:a7:21:7b:82:47:7a:d5:bc:dc:24:08:56:3d:60:
                    ee:4b:a1:e0:e3:47:d8:3a:48:8a:c0:b2:1f:f7:2c:
                    28:fb:6a:59:59:ec:c9:65:15:4f:86:fc:e4:04:5e:
                    f9:25:7a:27:16:42:f9:28:94:6b:85:8d:6f:5b:14:
                    88:f3:90:9d:ac:bf:0f:b7:af:fd:dc:5a:bc:f5:fe:
                    f1:ea:d2:95:eb:9d:ea:2a:da:5f:8b:59:3e:c0:00:
                    6f:c2:2b:66:f7:45:01:94:8d:86:d2:01:fa:b1:65:
                    2a:be:70:b0:ad:d4:b0:60:93:4f:b0:6e:99:63:72:
                    06:ff:8c:ad:be:17:3f:fb:e4:64:24:d9:5e:96:a1:
                    c3:37:07:0c:61:b2:0a:e0:c9:75:3b:95:79:55:69:
                    b0:2c:30:f7:49:1e:a0:d4:22:e9:1d:9f:b9:5b:67:
                    c1:f1:4c:2a:a9:2a:e5:07:77:83:e7:ab:a1:94:81:
                    8c:8c:c9:99:40:76:18:68:0b:17:1e:23:11:7c:6f:
                    b5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E0:4D:52:71:41:C1:08:FD:66:77:7D:76:4F:46:D1:99:5F:A3:83
            X509v3 Authority Key Identifier:
                keyid:DE:5D:38:FB:58:25:9E:39:64:BD:75:DF:E7:AF:1B:1A:B4:C2:02:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38302e302f32322d3232203d3e20323638363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:a0:a7:50:9f:58:f2:c9:ac:48:97:c3:5e:a8:bd:33:e0:
         d2:a4:c4:f9:7b:19:5e:3e:8f:62:fe:9b:5b:55:06:dd:a1:66:
         2c:10:66:a8:2a:95:17:c6:85:95:a4:b8:9a:d7:77:c0:74:d9:
         37:a5:74:ab:9f:1c:aa:9e:d3:fa:91:20:2b:49:cb:51:ad:cd:
         a9:be:0e:e6:ba:ff:4a:ab:64:07:1e:a8:b2:c9:59:03:15:b0:
         55:05:f6:96:21:41:72:48:d7:25:37:e0:2d:cf:17:b7:32:b1:
         51:c4:d9:c2:bb:a5:90:2f:63:ee:af:b5:55:b7:a2:fd:1d:f0:
         32:fe:96:04:90:d2:9d:e3:8b:b7:85:16:5c:78:5f:18:f5:ee:
         26:a9:c7:9e:b2:70:78:cd:f8:7d:fa:71:3f:ff:28:0c:bc:58:
         f9:ad:3c:12:bc:81:09:fd:ae:e1:c8:3e:bf:e7:52:d0:e1:21:
         13:07:38:62:69:3a:cc:9f:84:d3:b4:e6:25:af:26:dd:d3:7c:
         85:5b:69:fc:44:5f:da:5d:6e:e0:2a:52:74:dc:10:ab:83:41:
         20:50:86:49:53:c5:58:26:23:76:b2:76:e0:d3:72:e2:b3:57:
         c9:a8:e4:7c:6e:08:d0:79:a5:08:5a:53:e0:fb:be:89:c8:72:
         08:af:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org