Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38322e302f32342d3234203d3e20323638363038.roa
File:                     34352e3136342e38322e302f32342d3234203d3e20323638363038.roa (raw, json)
Hash identifier:          3SIAgxLyfoO3xjvLT/fDNHJk3SQ5z8bX+qUmhLhvXFQ=
Subject key identifier:   21:05:25:65:AA:C8:0D:81:0D:A9:66:97:C5:AD:BE:78:EE:58:C2:F2
Certificate issuer:       /CN=DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249
Certificate serial:       6E100B235B33AD926417961EDAF8B213E4934D31
Authority key identifier: DE:5D:38:FB:58:25:9E:39:64:BD:75:DF:E7:AF:1B:1A:B4:C2:02:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38322e302f32342d3234203d3e20323638363038.roa
Signing time:             Mon 31 Jan 2022 19:31:00 +0000
ROA not before:           Mon 31 Jan 2022 19:26:00 +0000
ROA not after:            Mon 30 Jan 2023 19:31:00 +0000
asID:                     268608
IP address blocks:        45.164.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:10:0b:23:5b:33:ad:92:64:17:96:1e:da:f8:b2:13:e4:93:4d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249
        Validity
            Not Before: Jan 31 19:26:00 2022 GMT
            Not After : Jan 30 19:31:00 2023 GMT
        Subject: CN=21052565AAC80D810DA96697C5ADBE78EE58C2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:b4:f4:55:c1:8c:a4:3a:bf:dc:ce:3e:1e:
                    23:04:07:59:bc:0d:53:90:70:76:71:86:57:3c:f3:
                    fe:a6:df:4e:af:d6:33:93:42:cf:94:61:ad:c5:5d:
                    ab:8f:bc:86:1f:af:32:18:7b:d3:aa:3f:89:23:e4:
                    9b:fe:6c:b2:62:4a:f7:c9:20:48:e5:fd:14:24:72:
                    9d:ed:7d:b5:f7:69:b8:c2:cf:9b:b8:8b:d4:47:60:
                    30:93:b2:c5:c3:42:c0:e6:69:11:ee:2c:f1:cb:34:
                    16:b3:62:26:56:20:77:35:1e:eb:40:2b:1f:16:66:
                    62:a8:56:f6:0e:9b:5b:a0:73:14:91:1f:01:91:f5:
                    2e:1d:ed:bd:2d:7a:cf:23:6f:74:2d:a6:c4:81:85:
                    e0:18:36:24:16:9c:81:96:37:14:3e:e3:da:bd:1c:
                    74:c7:c8:9b:12:de:00:d7:03:c8:eb:31:12:53:8a:
                    cb:0b:e2:6d:a3:37:0e:13:c7:f5:52:e0:24:37:af:
                    18:5c:b3:15:90:71:88:d1:0f:1c:63:3a:ae:5a:ba:
                    09:39:7d:62:4a:a5:e9:fe:d5:99:ca:33:46:be:36:
                    83:f8:f0:37:9a:bb:27:49:c2:f2:d1:80:38:1d:d4:
                    05:f3:49:98:54:31:ba:23:12:b8:94:e6:d1:f2:8e:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:05:25:65:AA:C8:0D:81:0D:A9:66:97:C5:AD:BE:78:EE:58:C2:F2
            X509v3 Authority Key Identifier:
                keyid:DE:5D:38:FB:58:25:9E:39:64:BD:75:DF:E7:AF:1B:1A:B4:C2:02:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/34352e3136342e38322e302f32342d3234203d3e20323638363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:3c:a0:91:72:8e:31:d1:ad:f6:e1:0a:9b:ea:70:c4:9c:e6:
         d4:55:47:96:a7:3b:03:44:41:71:80:f7:a1:24:ba:92:fd:94:
         94:23:ad:ed:07:24:72:02:22:e2:67:05:bb:c2:25:54:fc:a2:
         03:4e:d4:ab:b3:30:e0:8c:26:35:bd:b3:0f:cd:2d:bd:7c:96:
         ea:b1:be:32:1c:85:49:a4:7f:c3:ea:47:15:3d:a3:6e:17:86:
         26:85:59:c2:8b:d6:4c:42:73:29:7c:3b:d9:7a:59:0e:b7:8b:
         53:96:eb:d8:23:6f:59:b9:19:c4:ec:27:b7:14:89:3f:7c:36:
         ec:b5:d3:af:79:91:49:a1:a8:56:44:49:93:93:36:74:74:44:
         d0:fd:28:7b:e0:77:91:a6:c3:a3:d4:1c:75:39:06:26:66:f6:
         7a:73:77:ce:46:19:0d:c6:1e:a1:e5:61:63:54:12:02:ee:f3:
         0d:e7:df:61:83:9e:e6:2f:43:0c:0a:72:67:f0:df:10:1a:79:
         86:63:dc:ea:70:86:40:2e:11:56:84:12:d5:e4:1d:5e:47:fe:
         70:2c:39:31:56:7e:fe:e3:3a:b9:3b:30:08:10:35:bd:6b:e1:
         8e:39:34:dc:8d:77:e5:76:61:72:3f:b7:1e:c8:4b:1d:7e:7f:
         78:b6:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org