Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/3137302e38342e3231362e302f32322d3234203d3e20323635313236.roa
File:                     3137302e38342e3231362e302f32322d3234203d3e20323635313236.roa (raw, json)
Hash identifier:          wKxrwKQBOkB7BHlDCM74UXZt5MpO96ii2zrm/XwEpg4=
Subject key identifier:   44:A8:7A:A8:B6:E1:90:EF:07:5E:0E:86:20:59:FA:E2:42:55:FB:79
Certificate issuer:       /CN=35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4
Certificate serial:       66B5696728F4C33F6CB194D2D77B6729B6D324DF
Authority key identifier: 35:FF:2D:89:B6:8D:E7:13:78:B2:A0:3A:04:E6:4F:9E:8E:7E:CA:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/3137302e38342e3231362e302f32322d3234203d3e20323635313236.roa
Signing time:             Fri 21 Apr 2023 14:31:14 +0000
ROA not before:           Fri 21 Apr 2023 14:26:14 +0000
ROA not after:            Fri 19 Apr 2024 14:31:14 +0000
asID:                     265126
IP address blocks:        170.84.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b5:69:67:28:f4:c3:3f:6c:b1:94:d2:d7:7b:67:29:b6:d3:24:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4
        Validity
            Not Before: Apr 21 14:26:14 2023 GMT
            Not After : Apr 19 14:31:14 2024 GMT
        Subject: CN=44A87AA8B6E190EF075E0E862059FAE24255FB79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:3c:29:47:ab:c2:dd:b5:2f:1e:c5:77:7f:
                    8e:c9:df:eb:4c:86:a6:70:bf:f7:e6:c7:60:dd:82:
                    0b:a8:31:fd:a7:1c:c0:dd:5f:d3:75:ee:49:d4:07:
                    27:b4:37:9e:08:a8:a8:34:e5:85:05:30:f6:ef:a1:
                    27:85:e0:70:56:ce:3c:ac:ad:f9:9f:37:32:70:b4:
                    a1:cf:e7:f1:36:f7:17:45:b6:42:50:1c:5d:58:0c:
                    5f:be:45:24:d0:b3:88:94:e1:7f:24:aa:8b:27:58:
                    3a:fd:c0:94:3f:91:f4:80:19:f6:e4:42:9c:67:16:
                    73:1a:57:18:ca:8b:e6:cf:5d:fa:c9:c0:56:42:ac:
                    24:3a:02:92:ed:0e:74:d3:43:06:c1:2d:da:71:a0:
                    8e:f6:6b:13:ee:02:b7:f5:f3:bb:46:11:fa:c3:fd:
                    b3:b5:b9:3d:a4:ad:75:4f:5a:b9:a9:08:73:19:d3:
                    1a:d9:07:9d:0b:37:0b:96:4f:e2:1b:4c:9e:b3:40:
                    a8:20:07:c5:a0:9c:90:9c:fa:17:07:d5:f1:8f:40:
                    9f:40:fb:18:93:cf:5a:95:27:9e:b4:26:35:17:28:
                    36:55:bb:d9:18:8a:bb:2b:1f:4e:71:50:e5:3a:9a:
                    3e:f5:4e:74:61:18:ec:cc:28:89:13:1b:46:f9:13:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A8:7A:A8:B6:E1:90:EF:07:5E:0E:86:20:59:FA:E2:42:55:FB:79
            X509v3 Authority Key Identifier:
                keyid:35:FF:2D:89:B6:8D:E7:13:78:B2:A0:3A:04:E6:4F:9E:8E:7E:CA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35FF2D89B68DE71378B2A03A04E64F9E8E7ECAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QSwnKALRiWzvtZ3LxV8bVX144oPaH6Js6awaBmEmPoe/0/3137302e38342e3231362e302f32322d3234203d3e20323635313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:25:d8:83:d2:b5:dc:0a:0c:6a:74:ae:44:b5:81:c8:89:59:
         df:d1:af:e2:83:83:7f:14:74:d1:95:6c:e6:3c:ac:f1:0f:e6:
         4e:d0:e8:9c:5f:6d:a4:55:7c:ee:fb:9f:7f:f3:57:0c:25:00:
         1d:98:bb:f5:46:0e:64:1b:b0:28:1a:59:05:6e:b1:d2:38:49:
         d0:c1:12:78:db:c0:aa:ea:92:aa:69:41:31:a0:74:f4:2c:4f:
         a4:09:77:9d:85:63:c2:0d:e2:d2:02:71:e1:bf:9f:79:71:3c:
         97:69:f3:e9:73:5a:1b:fc:17:fa:1f:0a:0b:4b:fa:d7:24:f4:
         a6:20:a4:ec:d6:ea:b7:f6:bb:f8:c5:87:5a:55:e1:09:f2:f9:
         9e:11:57:87:36:f2:20:33:c8:59:cc:82:14:d6:bd:cb:31:92:
         f8:62:93:ca:ae:21:ad:ba:f7:81:24:d3:b1:5a:47:fe:c3:20:
         37:b3:0b:96:57:b6:6d:23:8e:a3:13:3a:24:2d:02:a0:1a:ca:
         79:fe:a5:fa:aa:62:bf:f4:04:e8:b0:17:72:0c:42:2c:e8:19:
         c2:a3:4a:f4:ec:15:4f:f3:0a:90:40:e0:0c:e4:17:cc:65:61:
         00:99:59:ea:1a:5c:23:d7:d8:6f:c4:cb:99:ad:de:42:e2:f2:
         86:d0:5e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org