Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231362e302f32322d3232203d3e20323638313733.roa
File:                     34352e3137302e3231362e302f32322d3232203d3e20323638313733.roa (raw, json)
Hash identifier:          xWfoYHOpKcEFIfZQhUISOseDToRty5ImqVQJeemt3ww=
Subject key identifier:   27:F8:2F:9F:F2:B6:27:9F:E0:46:EF:08:D1:9F:E7:0D:36:5D:87:24
Certificate issuer:       /CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
Certificate serial:       35023B241646086EB7D4D21DB77AD6A3A83BD527
Authority key identifier: 35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231362e302f32322d3232203d3e20323638313733.roa
Signing time:             Tue 15 Aug 2023 18:23:10 +0000
ROA not before:           Tue 15 Aug 2023 18:18:10 +0000
ROA not after:            Tue 13 Aug 2024 18:23:10 +0000
asID:                     268173
IP address blocks:        45.170.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:02:3b:24:16:46:08:6e:b7:d4:d2:1d:b7:7a:d6:a3:a8:3b:d5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
        Validity
            Not Before: Aug 15 18:18:10 2023 GMT
            Not After : Aug 13 18:23:10 2024 GMT
        Subject: CN=27F82F9FF2B6279FE046EF08D19FE70D365D8724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:31:cd:63:0a:ea:9a:fa:51:14:78:cc:ba:5d:
                    74:0a:21:c0:1c:04:83:69:13:c8:6b:63:8b:89:9c:
                    7e:fa:17:22:43:02:18:b6:de:85:68:a7:69:a5:37:
                    f2:14:80:8a:f3:70:3d:ad:c5:f4:7d:51:21:76:c4:
                    f5:5a:93:c4:7b:a9:4d:9f:4c:2c:bd:c1:c5:2f:f2:
                    12:cc:f0:72:dc:27:b8:49:3d:0b:69:7a:79:09:a6:
                    8e:76:c2:41:b8:a8:5d:0b:23:70:45:e4:41:2e:55:
                    d3:c4:e0:50:e8:99:53:49:a0:76:d3:37:03:99:0c:
                    f3:ee:6a:c8:50:b2:70:a1:87:dd:23:27:f0:8c:d9:
                    4b:89:d9:c2:32:c6:cb:3e:df:8e:8d:37:88:5e:3c:
                    c5:72:97:0f:67:12:86:48:f3:62:1d:a1:88:ca:0c:
                    7c:30:d3:b1:93:21:68:0c:41:ae:28:4e:fa:8f:e1:
                    d4:04:04:8b:b9:72:bf:f2:57:2a:ea:15:57:58:f3:
                    35:9d:17:6b:7c:6e:6a:72:6b:3b:38:b1:32:c5:39:
                    31:e5:4f:a2:00:f7:ed:c3:73:61:de:c4:d2:63:52:
                    c5:7b:e6:c7:8d:4f:c2:74:ee:01:19:1d:fd:2b:67:
                    01:44:0a:8c:f3:02:1b:d1:96:f6:27:6b:44:68:56:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F8:2F:9F:F2:B6:27:9F:E0:46:EF:08:D1:9F:E7:0D:36:5D:87:24
            X509v3 Authority Key Identifier:
                keyid:35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231362e302f32322d3232203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:73:ca:0d:e1:ef:a1:14:e1:0a:97:75:96:8c:c4:8a:19:2e:
         cc:3d:dd:6b:a8:9e:a8:99:1d:75:3b:47:0b:7a:d9:f5:7d:11:
         81:0f:40:e0:1e:5a:d5:83:84:ab:ac:b3:5a:f0:42:74:51:92:
         38:d8:7e:98:6b:35:eb:18:cd:7d:81:69:77:c6:b7:95:19:cc:
         b4:a6:f3:fb:be:03:72:15:c8:c7:d1:13:f1:14:02:30:38:5f:
         09:05:ca:ac:04:98:31:cf:3e:01:ca:2d:79:0c:cc:b6:15:98:
         ac:78:7f:ef:b3:0e:8c:03:31:03:61:9a:eb:07:49:94:66:5f:
         52:72:40:e3:a9:5b:33:92:26:0e:50:42:24:cc:f5:fa:f9:9d:
         83:02:1a:ee:76:77:b7:b9:04:20:f6:25:f5:4f:11:b8:f7:a2:
         02:4c:e6:fe:49:16:97:9f:96:8d:47:3c:ea:d4:1e:6f:f7:93:
         31:d4:35:68:2b:d9:34:16:52:60:cc:7b:4b:33:58:b4:0d:71:
         c2:73:67:4c:aa:41:d5:6c:50:bb:66:8f:fb:d2:2f:5b:93:5a:
         41:46:13:74:8f:ac:38:bf:7a:d8:c5:45:b4:70:f7:74:af:9b:
         df:b5:d4:ba:c3:b7:70:17:35:f3:35:f6:36:91:8f:f9:91:6b:
         4f:3b:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org