Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231362e302f32332d3233203d3e20323638313733.roa
File:                     34352e3137302e3231362e302f32332d3233203d3e20323638313733.roa (raw, json)
Hash identifier:          5z9vuzt5Q5DqN1g+codOuefmdcvwNGRJbIVb5hbkWmg=
Subject key identifier:   03:35:70:65:84:5A:90:24:80:0D:CA:2C:48:9B:19:A5:F3:BB:05:BA
Certificate issuer:       /CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
Certificate serial:       2CF225CE41EE15AE6006DBFC9A2B81A1B51603E5
Authority key identifier: 35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231362e302f32332d3233203d3e20323638313733.roa
Signing time:             Tue 15 Aug 2023 18:23:40 +0000
ROA not before:           Tue 15 Aug 2023 18:18:40 +0000
ROA not after:            Tue 13 Aug 2024 18:23:40 +0000
asID:                     268173
IP address blocks:        45.170.216.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f2:25:ce:41:ee:15:ae:60:06:db:fc:9a:2b:81:a1:b5:16:03:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
        Validity
            Not Before: Aug 15 18:18:40 2023 GMT
            Not After : Aug 13 18:23:40 2024 GMT
        Subject: CN=03357065845A9024800DCA2C489B19A5F3BB05BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:2b:e7:31:7d:59:db:76:0a:60:fb:bd:12:
                    04:ba:1f:ae:55:ea:25:0b:7f:84:92:ec:7e:7f:f5:
                    88:06:27:53:f3:8a:56:3b:7d:ff:0b:56:75:57:fb:
                    c6:37:ce:be:58:2c:2a:db:60:6d:67:66:76:4d:21:
                    7f:d1:8e:45:4f:84:fa:16:db:18:c4:6f:15:d4:9a:
                    ce:66:4b:9f:7c:ed:87:95:33:9c:2e:cd:64:30:75:
                    5f:01:c9:fe:cf:c7:d8:bd:c7:af:ce:17:c8:9c:c2:
                    5c:cf:61:d8:e9:99:04:c0:13:c4:64:e4:46:8b:c0:
                    2a:d0:65:af:32:44:4e:10:73:d3:f5:98:d2:2e:dc:
                    2d:33:05:d2:0a:74:62:8c:23:ae:79:01:c6:e4:79:
                    4d:cd:97:8d:7e:f6:a4:8f:3c:27:05:5b:e8:90:2a:
                    94:f6:1b:37:23:39:08:9d:01:31:1e:3d:3e:a6:2c:
                    6b:57:5d:16:79:fd:ae:7b:82:d5:98:10:d1:76:c7:
                    24:d0:2b:48:2a:7c:18:66:c0:71:4b:27:cf:f8:19:
                    4e:68:1c:43:41:e9:9e:3a:21:90:d0:ef:91:0e:0d:
                    51:d7:e9:88:e3:47:73:b2:00:44:36:62:29:e3:d3:
                    23:b8:4a:9e:6d:06:41:39:15:ca:3e:15:95:b3:f9:
                    03:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:35:70:65:84:5A:90:24:80:0D:CA:2C:48:9B:19:A5:F3:BB:05:BA
            X509v3 Authority Key Identifier:
                keyid:35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231362e302f32332d3233203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:dd:48:8e:13:fd:28:a9:3a:5d:be:48:31:1c:e0:43:94:1c:
         2f:5a:40:37:05:0b:6c:2c:96:ac:23:7d:99:ed:89:39:e5:3e:
         4b:67:c9:f3:25:e5:18:1b:44:28:58:31:3a:5d:b3:76:0a:5f:
         57:41:e7:cb:49:e3:e4:e0:20:ec:62:6f:80:d9:d4:4c:56:ec:
         f1:be:6c:ac:a2:08:35:ee:00:01:5a:0c:98:ad:60:0c:07:24:
         1c:6e:d4:28:c4:d6:eb:86:19:05:cf:77:93:bd:d1:41:1c:e4:
         48:15:6e:ac:7a:fc:fa:a4:cd:dd:bd:ae:5b:20:a4:6f:3a:09:
         bd:73:c8:de:2a:3f:1e:18:c8:97:6d:dc:2e:27:6a:5a:c0:d9:
         35:c2:69:88:6c:1d:bc:26:f3:a9:33:6e:9d:45:76:25:14:53:
         24:78:f7:eb:ef:af:e0:2b:5f:4a:3d:5f:31:d0:68:02:75:e5:
         f2:33:16:b9:f8:1e:b6:0d:4d:6f:72:b9:b6:04:38:88:72:34:
         39:9e:31:00:09:36:30:39:89:27:af:04:db:bd:6d:af:20:5c:
         26:bd:81:04:13:ae:dd:a0:b0:6f:0e:5e:28:9b:fe:23:b6:7e:
         9d:f9:d6:60:b4:00:3f:4e:38:44:b1:5d:20:c9:3b:78:09:08:
         89:93:03:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:51 2025 by rpki-client