Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e39302e302f32332d3233203d3e20323636393931.roa
File:                     34352e3232362e39302e302f32332d3233203d3e20323636393931.roa (raw, json)
Hash identifier:          bqZn8Y4OaKpmpL2w9DtpS3cuEQfWWoXDdfMSW5ZPIW4=
Subject key identifier:   0F:41:2D:CC:83:53:1B:61:C8:B5:66:31:06:21:F3:39:C6:4D:A5:BA
Certificate issuer:       /CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
Certificate serial:       2F8E00338BD2BC0125C4179C5D28B3217E483028
Authority key identifier: D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e39302e302f32332d3233203d3e20323636393931.roa
Signing time:             Wed 19 Apr 2023 22:00:00 +0000
ROA not before:           Wed 19 Apr 2023 21:55:00 +0000
ROA not after:            Fri 19 Apr 2024 22:00:00 +0000
asID:                     266991
IP address blocks:        45.226.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8e:00:33:8b:d2:bc:01:25:c4:17:9c:5d:28:b3:21:7e:48:30:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
        Validity
            Not Before: Apr 19 21:55:00 2023 GMT
            Not After : Apr 19 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:ea:d8:5d:99:a1:21:83:56:a1:6c:33:e4:
                    ce:cb:58:8f:39:26:52:76:59:9c:2e:fb:06:3d:d2:
                    b3:fd:f0:6a:49:7a:7c:55:78:6f:65:20:57:c1:1a:
                    d3:b9:89:00:0c:78:d3:73:56:41:c3:40:2b:25:7a:
                    bc:72:fc:60:a3:ce:c3:34:8c:04:e2:d1:7e:e4:56:
                    8c:c0:a5:e8:17:70:02:8a:c7:26:be:98:08:a7:b0:
                    9d:2e:71:2d:6a:64:e4:75:f7:dc:1f:32:5a:ce:7e:
                    8b:17:04:46:89:ef:6f:3e:05:60:5e:53:fd:96:d3:
                    08:8c:66:61:76:c9:93:5b:6d:87:21:a7:58:72:dd:
                    3b:36:fb:71:20:9e:35:f6:c8:b0:11:c7:67:11:02:
                    93:0e:70:32:37:13:b8:c4:d9:3f:f6:c9:80:60:5d:
                    fd:4a:3e:a1:db:fa:85:f6:aa:5e:d1:2e:9c:0c:eb:
                    0a:09:b1:6a:d5:fc:39:aa:55:d4:d7:35:80:bb:ec:
                    19:b0:4f:03:ed:81:95:24:03:a1:81:4a:16:f0:0f:
                    19:ee:a2:ca:5f:95:6b:f8:88:3d:0a:f8:66:89:a0:
                    a9:b4:e2:25:39:83:b3:05:e4:6f:95:48:f1:40:2e:
                    0b:f8:d1:16:1c:30:ee:fd:3c:5a:3b:30:03:2e:de:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:41:2D:CC:83:53:1B:61:C8:B5:66:31:06:21:F3:39:C6:4D:A5:BA
            X509v3 Authority Key Identifier:
                keyid:D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/34352e3232362e39302e302f32332d3233203d3e20323636393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:98:2a:ba:17:0c:5b:78:22:6d:0c:f0:38:c8:bc:61:c7:58:
         80:1d:0c:7e:30:83:9c:0e:2f:e6:48:15:81:e3:00:7a:ee:4a:
         71:da:44:c4:44:06:60:ca:be:cc:a0:1a:59:d1:6c:b1:96:f8:
         da:3d:47:4c:5d:77:07:ea:3c:8a:2d:8c:cd:b4:85:b8:ed:bd:
         2a:95:28:ec:d2:0a:75:c3:d3:24:e6:f2:6d:12:d3:6f:d5:6e:
         87:06:d6:fb:ec:c7:42:32:06:e8:81:7f:b3:4d:76:cd:8c:c5:
         8b:ae:27:0b:5f:9e:88:79:a7:71:19:5d:7d:52:ef:ba:8c:7c:
         1b:7e:6e:f4:ea:0b:38:59:a9:52:72:6b:b1:2b:06:c0:01:0c:
         3d:a7:ef:37:27:80:d3:a3:18:84:ff:72:e6:7d:18:b0:c7:05:
         55:68:3a:89:ff:bd:52:14:eb:4f:be:55:60:b6:6a:dd:ff:3d:
         23:5e:f6:3e:18:ce:76:82:83:fd:0a:6d:c7:5b:6a:f6:db:d3:
         1c:6d:98:64:16:bb:5c:42:30:d7:3f:8d:8f:31:13:77:c6:fa:
         71:85:09:d8:5c:7d:f7:f1:b0:40:8c:c7:66:e1:df:19:cd:60:
         66:5d:12:bb:b6:b7:aa:d8:bf:dc:6e:0a:4a:40:4a:6b:61:1d:
         fe:42:a1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org