Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/3134332e3133372e35362e302f32322d3332203d3e203533313831.roa
File:                     3134332e3133372e35362e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          I+ElmSUVzzr4YRulm3e6nlA9brQucUPrWiEL94T/26Y=
Subject key identifier:   FE:6B:D0:8F:7C:DB:8A:44:0A:B8:1E:30:C6:7E:26:CC:7A:ED:4C:B2
Certificate issuer:       /CN=35DA915E4E399FE6438B815F4C97CEAE6DB92975
Certificate serial:       75882465E17093E9B9824B958C7F258A6A9F3EE4
Authority key identifier: 35:DA:91:5E:4E:39:9F:E6:43:8B:81:5F:4C:97:CE:AE:6D:B9:29:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35DA915E4E399FE6438B815F4C97CEAE6DB92975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/3134332e3133372e35362e302f32322d3332203d3e203533313831.roa
Signing time:             Sat 11 Mar 2023 14:18:54 +0000
ROA not before:           Sat 11 Mar 2023 14:13:54 +0000
ROA not after:            Sat 09 Mar 2024 14:18:54 +0000
asID:                     53181
IP address blocks:        143.137.56.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:88:24:65:e1:70:93:e9:b9:82:4b:95:8c:7f:25:8a:6a:9f:3e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35DA915E4E399FE6438B815F4C97CEAE6DB92975
        Validity
            Not Before: Mar 11 14:13:54 2023 GMT
            Not After : Mar  9 14:18:54 2024 GMT
        Subject: CN=FE6BD08F7CDB8A440AB81E30C67E26CC7AED4CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:62:90:ce:cb:87:66:94:c6:5d:d3:79:6c:e1:
                    3d:0d:f1:df:4a:48:ad:ee:f4:45:65:cd:9b:66:34:
                    2f:d1:4f:40:84:3a:18:e6:da:97:58:f9:4f:67:d5:
                    a1:b3:81:fc:ff:61:d9:10:db:f5:ed:28:88:3d:b6:
                    73:e5:7a:45:79:a9:83:b8:d5:b8:1b:cb:88:d2:db:
                    08:47:02:ec:14:d9:88:c4:bb:f9:90:a9:05:56:cd:
                    61:3e:8b:53:a2:26:e4:db:6f:7f:86:be:c5:4a:0c:
                    4d:07:bf:5b:7a:ec:8f:7c:af:cf:e8:9a:d8:28:a3:
                    a5:aa:92:17:7d:38:e4:56:27:3f:7f:b1:8b:88:3b:
                    fd:63:c6:7b:f8:de:6f:44:8b:a9:96:a8:63:6f:b0:
                    b2:cc:91:51:f3:7d:8c:b2:d2:24:0f:d9:78:53:00:
                    74:27:53:6e:6a:31:bd:bf:41:0d:a7:b8:6d:dd:0d:
                    2c:a1:f4:ea:2e:81:57:23:3d:9f:00:8c:52:99:17:
                    69:95:15:1b:98:d4:f5:be:2c:a1:d3:a4:80:ec:33:
                    ca:e3:b6:b1:27:da:ea:6f:ad:6a:d7:7b:0a:fa:a3:
                    4a:a0:d2:26:2a:4d:0e:57:b0:25:57:9b:3b:98:f3:
                    90:6c:a6:99:95:f6:03:8f:a3:96:90:8a:7d:ab:04:
                    1a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6B:D0:8F:7C:DB:8A:44:0A:B8:1E:30:C6:7E:26:CC:7A:ED:4C:B2
            X509v3 Authority Key Identifier:
                keyid:35:DA:91:5E:4E:39:9F:E6:43:8B:81:5F:4C:97:CE:AE:6D:B9:29:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/35DA915E4E399FE6438B815F4C97CEAE6DB92975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35DA915E4E399FE6438B815F4C97CEAE6DB92975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/3134332e3133372e35362e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:a9:40:c3:bc:02:92:1a:01:f7:56:75:2e:e6:9c:5e:72:6e:
         55:fb:16:a1:80:18:60:a9:d0:15:ee:18:ee:23:13:c2:2b:05:
         69:e0:12:15:58:89:ff:78:e6:4f:69:90:49:5d:de:20:d4:c5:
         a3:2d:1c:b4:e1:1e:60:9b:ed:ff:45:f6:11:eb:69:10:15:4d:
         37:40:ec:11:bf:1b:a0:be:af:4c:23:55:17:8b:8d:39:82:a1:
         c9:de:7e:04:6a:4d:54:11:8c:e4:5d:41:25:72:37:03:d3:ca:
         2b:2b:ba:38:7c:fb:e8:19:d4:b3:6c:71:e6:84:43:03:b0:bd:
         e9:6f:aa:aa:d9:6d:54:d8:29:fe:a6:5d:65:e3:6b:8c:2a:77:
         6b:b4:9b:72:63:5b:50:40:ae:59:f1:aa:7c:69:76:f3:16:db:
         84:5d:c5:38:ee:8b:5f:5b:a6:f7:4c:38:fa:b3:82:02:5e:ca:
         75:78:a1:10:87:34:27:a5:c4:4a:e4:91:5e:6e:a1:44:18:2d:
         f4:c3:86:c6:e5:f5:a9:a3:40:ad:91:f3:08:92:03:dc:0a:ff:
         e3:be:41:b2:5a:98:b8:6f:bd:24:d8:bb:53:28:b0:fe:ef:d6:
         ef:67:f8:85:17:00:d9:ea:2a:cb:f0:4c:17:a6:74:82:0f:2c:
         2d:86:2c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org