Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231362e302f32342d3234203d3e20323638313733.roa
File:                     34352e3137302e3231362e302f32342d3234203d3e20323638313733.roa (raw, json)
Hash identifier:          LoxrxkG6HqHOMgJMfoAeO5GRHLJ9OPvgUxIH0Tg1xkA=
Subject key identifier:   34:15:5A:E8:18:33:02:FC:18:8A:DF:33:18:F7:C8:5B:A4:FD:83:A7
Certificate issuer:       /CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
Certificate serial:       0602B07721EC605CA79602A777CF775D7EB2DDEC
Authority key identifier: 35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231362e302f32342d3234203d3e20323638313733.roa
Signing time:             Tue 15 Aug 2023 18:23:43 +0000
ROA not before:           Tue 15 Aug 2023 18:18:43 +0000
ROA not after:            Tue 13 Aug 2024 18:23:43 +0000
asID:                     268173
IP address blocks:        45.170.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:02:b0:77:21:ec:60:5c:a7:96:02:a7:77:cf:77:5d:7e:b2:dd:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
        Validity
            Not Before: Aug 15 18:18:43 2023 GMT
            Not After : Aug 13 18:23:43 2024 GMT
        Subject: CN=34155AE8183302FC188ADF3318F7C85BA4FD83A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:ad:e1:be:91:9e:34:7a:ed:ba:bc:5e:16:
                    62:02:50:dc:1e:bd:22:fa:31:30:e8:0f:f3:bf:7f:
                    46:ac:d2:f8:08:63:4b:9b:3f:a2:ea:06:67:43:68:
                    0c:53:83:f3:57:2a:63:f9:ae:5e:e6:f9:1c:c3:a6:
                    62:fa:85:3f:8f:8c:67:f3:76:50:bc:c9:9b:4d:cc:
                    fa:c2:6c:5d:34:e0:6b:7d:73:cd:4e:38:1b:90:d0:
                    3b:aa:97:62:42:ae:1c:10:05:76:dd:71:1a:05:d9:
                    a6:7b:41:82:44:94:d7:b1:f0:22:03:bd:6d:50:b2:
                    b8:c3:ac:c6:91:a4:e3:8b:f0:cd:f9:a8:73:82:3c:
                    df:f6:8b:d2:18:07:49:e1:cf:61:a7:eb:28:cb:ef:
                    e6:20:cb:6b:81:fd:37:90:76:8b:a8:c3:47:b8:62:
                    a4:5b:2d:4e:8b:e6:7d:48:dc:ab:93:2f:b6:10:26:
                    f5:ee:a3:b8:1b:89:b6:cb:f6:f5:60:cf:1b:be:5e:
                    43:b0:51:14:13:80:05:f1:65:d7:92:5b:84:99:e9:
                    fc:7f:66:b2:be:4d:5b:e3:ca:07:29:12:f4:78:5c:
                    16:f8:ee:f1:e5:45:26:4f:5a:cb:26:c1:db:ef:fa:
                    46:cc:53:cb:23:d0:e5:ab:1f:15:2f:a1:b3:9c:00:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:15:5A:E8:18:33:02:FC:18:8A:DF:33:18:F7:C8:5B:A4:FD:83:A7
            X509v3 Authority Key Identifier:
                keyid:35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231362e302f32342d3234203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:84:27:33:d2:4e:24:cc:4d:da:6e:d3:ab:23:2c:8a:49:53:
         51:19:34:47:58:e5:3f:66:77:2e:30:83:a0:22:bb:83:3c:22:
         b1:4e:b1:c2:b7:8d:20:58:00:2d:2c:e4:f7:d8:0d:fb:e6:16:
         30:b4:bd:d1:3c:f2:ab:31:5c:82:9e:6f:71:e3:7a:c9:d0:11:
         1c:3b:fe:0a:16:4a:d5:1c:a8:21:8d:2c:18:ea:ab:80:cc:e0:
         91:d0:32:56:43:e2:42:ce:38:3d:98:70:68:78:04:07:95:75:
         ac:b2:fe:aa:6d:7e:1d:96:f9:c9:9e:ba:99:52:7c:45:d6:64:
         ac:17:cc:73:bc:7b:93:7d:6b:06:85:5a:cc:99:1f:70:e4:67:
         9e:5d:57:e6:9f:27:4f:f5:91:10:7c:d8:b8:be:92:a7:29:ad:
         0d:77:8c:27:64:97:58:31:b2:e8:cc:5b:a4:05:3a:b0:1e:f9:
         00:07:34:60:dc:f1:8d:97:4c:04:5c:de:23:09:9b:b2:17:ec:
         6d:b8:a7:74:c2:a6:cf:7a:6e:16:5d:40:6a:e1:eb:6f:3a:6c:
         98:72:60:e5:f8:05:f1:97:74:ca:1e:fb:82:d5:78:e3:6f:18:
         29:f5:c4:30:a3:84:8f:d1:c4:c8:c0:e4:01:6c:d8:c1:5b:f4:
         40:70:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org