Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/34352e3138362e3139382e302f32342d3234203d3e20323639343335.roa
File:                     34352e3138362e3139382e302f32342d3234203d3e20323639343335.roa (raw, json)
Hash identifier:          5ZD6U9qjz1ntyx7dd0zOYn5jJDErzGOAQX10zocq5fI=
Subject key identifier:   70:80:79:43:21:DE:D4:30:18:DB:BA:38:91:99:F9:9F:E1:43:13:E8
Certificate issuer:       /CN=FB3862529E205770549D2C9C549C9466E5CB21B5
Certificate serial:       77D7FCFCD9019901FB8D8873E66F261280A859ED
Authority key identifier: FB:38:62:52:9E:20:57:70:54:9D:2C:9C:54:9C:94:66:E5:CB:21:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB3862529E205770549D2C9C549C9466E5CB21B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/34352e3138362e3139382e302f32342d3234203d3e20323639343335.roa
Signing time:             Tue 21 Mar 2023 16:00:00 +0000
ROA not before:           Tue 21 Mar 2023 15:55:00 +0000
ROA not after:            Tue 19 Mar 2024 16:00:00 +0000
asID:                     269435
IP address blocks:        45.186.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d7:fc:fc:d9:01:99:01:fb:8d:88:73:e6:6f:26:12:80:a8:59:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB3862529E205770549D2C9C549C9466E5CB21B5
        Validity
            Not Before: Mar 21 15:55:00 2023 GMT
            Not After : Mar 19 16:00:00 2024 GMT
        Subject: CN=7080794321DED43018DBBA389199F99FE14313E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:a5:bb:d2:83:f7:7b:bd:1e:4a:13:6c:f2:
                    9d:0b:c1:74:8e:e3:b4:4e:81:c3:f5:39:55:c0:87:
                    38:e3:f7:a0:eb:1f:4f:da:68:70:0f:6f:d3:27:a9:
                    7d:1f:52:28:3d:23:27:40:ee:16:d6:89:d5:b0:e1:
                    2e:e9:fc:89:a6:61:38:20:6e:b2:64:69:20:35:56:
                    ed:ce:12:e9:d2:a2:45:5d:f7:e3:d8:c5:f4:e2:6b:
                    a1:8e:f4:9c:ce:a4:74:6b:dc:7d:8c:dd:7f:f8:78:
                    57:08:da:20:89:5a:1c:6d:0b:48:19:ea:0a:9c:ed:
                    55:57:b4:f1:bd:3c:e4:2a:0d:11:d8:a6:9a:a9:15:
                    1e:59:3f:62:e3:9a:fe:3a:38:70:9d:c6:bc:4c:b2:
                    3d:3d:65:07:6a:1a:4f:2d:eb:e7:58:0f:3a:18:67:
                    e2:73:65:cc:66:c1:40:e0:04:a1:a0:c2:05:88:23:
                    93:5d:fe:43:3b:3d:1a:f3:07:05:e5:2f:3d:4f:d7:
                    f9:cb:c1:87:84:6c:a0:9c:a0:3e:01:22:cf:d7:e5:
                    be:ac:71:64:7b:2a:0a:24:58:3f:4f:4b:f1:7e:0c:
                    be:18:4d:d0:62:7f:91:79:f4:d4:3f:71:b9:0b:de:
                    a9:ab:85:0c:5c:81:f2:9e:d0:ce:1e:8c:50:01:f2:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:80:79:43:21:DE:D4:30:18:DB:BA:38:91:99:F9:9F:E1:43:13:E8
            X509v3 Authority Key Identifier:
                keyid:FB:38:62:52:9E:20:57:70:54:9D:2C:9C:54:9C:94:66:E5:CB:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/FB3862529E205770549D2C9C549C9466E5CB21B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB3862529E205770549D2C9C549C9466E5CB21B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/34352e3138362e3139382e302f32342d3234203d3e20323639343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:09:73:39:53:85:eb:65:85:2b:2d:ff:b5:72:1b:f7:86:de:
         c6:e2:4b:be:3e:15:5f:55:f5:6b:b6:23:a8:99:f5:ba:d2:5c:
         e7:4a:6d:88:b1:7f:be:c8:14:c7:ee:ed:a0:0d:49:4a:cf:61:
         1e:1a:ee:1c:64:34:04:18:ab:db:80:42:33:db:51:d2:81:e8:
         98:76:f5:b8:aa:61:ab:89:63:4f:9f:19:d6:6b:f7:e7:08:0f:
         a4:4a:39:12:3b:66:4a:9e:73:ee:5c:44:07:ba:a5:87:b8:44:
         29:8f:22:37:76:3a:d3:36:cc:dd:b9:85:d8:e4:6a:d1:ca:a4:
         e4:f4:f0:29:90:30:eb:54:a3:10:db:e6:57:19:b0:91:4b:ef:
         6b:ef:fb:1d:e6:fc:fd:e8:80:e3:88:4a:a7:a9:0a:8b:fe:e7:
         9a:d9:82:24:23:30:f7:69:39:c5:99:2b:f3:47:29:4d:38:0c:
         de:30:19:08:1e:ca:bf:9c:60:46:15:97:23:c6:af:a0:88:63:
         41:c3:8a:46:34:54:d4:16:d7:b4:4c:f0:7a:58:88:a6:3f:8d:
         bf:5d:0c:49:f4:70:ee:59:c9:24:85:71:76:a4:73:f4:fe:4c:
         f3:a4:af:20:71:4c:7a:58:fc:f1:f8:73:f4:d2:31:af:7b:a5:
         21:63:2d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org