Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231372e302f32342d3234203d3e20323638313733.roa
File:                     34352e3137302e3231372e302f32342d3234203d3e20323638313733.roa (raw, json)
Hash identifier:          7T+68brmZpuAdpBrVDlCpczSha59ChuCCRRhALzUBPE=
Subject key identifier:   D9:97:7C:BE:90:48:94:0D:8A:35:64:06:98:90:C9:65:F8:12:B1:A4
Certificate issuer:       /CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
Certificate serial:       355B8E27A10F810A4DCAB8654FB746F209DEB797
Authority key identifier: 35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231372e302f32342d3234203d3e20323638313733.roa
Signing time:             Tue 15 Aug 2023 18:23:47 +0000
ROA not before:           Tue 15 Aug 2023 18:18:47 +0000
ROA not after:            Tue 13 Aug 2024 18:23:47 +0000
asID:                     268173
IP address blocks:        45.170.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5b:8e:27:a1:0f:81:0a:4d:ca:b8:65:4f:b7:46:f2:09:de:b7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
        Validity
            Not Before: Aug 15 18:18:47 2023 GMT
            Not After : Aug 13 18:23:47 2024 GMT
        Subject: CN=D9977CBE9048940D8A3564069890C965F812B1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:cb:43:8c:67:3f:68:01:fe:ce:a6:9f:f0:
                    aa:6d:3b:f2:69:c4:08:33:6f:21:65:b6:a5:43:46:
                    cd:83:8f:33:ef:be:ac:fd:da:5c:26:83:f0:2e:8c:
                    b8:9a:39:23:5c:78:85:ae:77:ec:e9:58:9a:a5:b8:
                    c3:7c:4d:c5:0a:f6:37:ca:dd:eb:9c:07:ab:e1:f6:
                    61:ed:e6:37:72:61:42:1b:31:ed:15:1f:6f:04:95:
                    35:4f:49:e2:4d:74:d5:e9:b7:21:95:a1:a8:2e:94:
                    55:fc:58:00:3f:d2:e0:02:e9:3a:d0:98:0b:47:3b:
                    fd:ac:01:78:b8:8f:8b:51:36:dc:ff:4a:58:74:ac:
                    34:39:2f:31:da:43:aa:09:25:76:d2:02:92:87:60:
                    ee:28:08:d7:61:41:ab:b7:cd:ca:b3:d0:ba:44:37:
                    36:4f:67:e7:4d:61:bb:e8:3f:c7:7b:99:8e:aa:bb:
                    53:94:29:70:73:62:7f:a7:e6:cd:6d:aa:ce:99:4a:
                    19:ff:52:dc:e1:7d:b4:90:d3:ed:e5:ce:d5:40:8e:
                    f3:65:83:84:dd:ae:29:e4:59:68:02:0b:a0:ac:c2:
                    6f:bb:ea:1f:df:c4:4b:0c:6d:eb:be:8b:37:f0:15:
                    2e:4a:73:81:0e:4e:20:eb:2d:4f:b1:38:b4:35:79:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:97:7C:BE:90:48:94:0D:8A:35:64:06:98:90:C9:65:F8:12:B1:A4
            X509v3 Authority Key Identifier:
                keyid:35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231372e302f32342d3234203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:c6:40:8a:12:f9:cd:fb:b3:2b:e0:50:f6:33:34:74:56:62:
         bc:0d:c4:04:13:37:53:0c:6f:c5:9f:20:e1:75:75:ac:bc:64:
         2a:75:da:40:6f:65:64:85:18:2b:07:a6:f3:7c:aa:87:b2:b1:
         b4:84:91:57:95:48:a4:53:a7:86:94:ec:59:91:aa:8b:42:5b:
         6c:84:fe:b2:c5:0c:ed:cc:77:1f:c2:25:30:5a:2d:48:de:b8:
         2c:1f:d3:9f:43:0c:e3:7a:72:06:51:89:9e:2f:66:1a:59:2c:
         5e:94:a9:d6:28:9f:ea:ad:96:ce:a4:52:78:6d:71:a4:bc:03:
         64:4f:cf:63:e5:23:ec:99:f1:ac:a2:53:14:ee:42:0a:b2:91:
         83:8b:c0:2c:a8:d1:23:0d:de:e1:2a:5c:b6:e5:3d:0e:e3:a6:
         b2:f2:e6:f1:67:86:f5:04:31:5f:04:de:2f:fc:83:46:2f:e2:
         c9:fa:0a:03:50:8f:98:6f:60:77:c5:c8:80:bb:6d:45:1d:7d:
         56:79:a9:6d:d1:56:7c:f7:29:f3:0b:20:f3:57:64:fa:b8:f1:
         f6:06:bf:0d:23:3d:59:cd:f6:2e:a2:a2:24:57:0a:98:16:25:
         ec:f1:dd:e5:84:ec:96:b1:6b:89:f2:c0:0e:29:e8:94:c1:4d:
         87:e7:31:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNVuOJ6EPgQpNyrhlT7dG8gnet5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVDRUUzNkRDMjJCOTFBNDI2OUQxMjZEQjUxNzFEQjc1
QzQ0QzFGRDAeFw0yMzA4MTUxODE4NDdaFw0yNDA4MTMxODIzNDdaMDMxMTAvBgNV
BAMTKEQ5OTc3Q0JFOTA0ODk0MEQ4QTM1NjQwNjk4OTBDOTY1RjgxMkIxQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPstDjGc/aAH+zqaf8KptO/Jp
xAgzbyFltqVDRs2DjzPvvqz92lwmg/AujLiaOSNceIWud+zpWJqluMN8TcUK9jfK
3eucB6vh9mHt5jdyYUIbMe0VH28ElTVPSeJNdNXptyGVoagulFX8WAA/0uAC6TrQ
mAtHO/2sAXi4j4tRNtz/Slh0rDQ5LzHaQ6oJJXbSApKHYO4oCNdhQau3zcqz0LpE
NzZPZ+dNYbvoP8d7mY6qu1OUKXBzYn+n5s1tqs6ZShn/UtzhfbSQ0+3lztVAjvNl
g4TdrinkWWgCC6Cswm+76h/fxEsMbeu+izfwFS5Kc4EOTiDrLU+xOLQ1eS4tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2Zd8vpBIlA2KNWQGmJDJZfgSsaQwHwYDVR0j
BBgwFoAUNc7jbcIrkaQmnRJttRcdt1xEwf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmFCVnlpY25xNzE1aExmOUFla1dTWWNjUmFpbWZRTHhiSHBQWkt3QVVG
OFIvMC8zNUNFRTM2REMyMkI5MUE0MjY5RDEyNkRCNTE3MURCNzVDNDRDMUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1Q0VFMzZEQzIyQjkxQTQy
NjlEMTI2REI1MTcxREI3NUM0NEMxRkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZhQlZ5aWNucTcxNWhMZjlBZWtXU1ljY1JhaW1mUUx4YkhwUFpLd0FVRjhSLzAv
MzQzNTJlMzEzNzMwMmUzMjMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqtkwDQYJKoZIhvcNAQELBQADggEBAAHGQIoS
+c37syvgUPYzNHRWYrwNxAQTN1MMb8WfIOF1day8ZCp12kBvZWSFGCsHpvN8qoey
sbSEkVeVSKRTp4aU7FmRqotCW2yE/rLFDO3Mdx/CJTBaLUjeuCwf059DDON6cgZR
iZ4vZhpZLF6UqdYon+qtls6kUnhtcaS8A2RPz2PlI+yZ8ayiUxTuQgqykYOLwCyo
0SMN3uEqXLblPQ7jprLy5vFnhvUEMV8E3i/8g0Yv4sn6CgNQj5hvYHfFyIC7bUUd
fVZ5qW3RVnz3KfMLIPNXZPq48fYGvw0jPVnN9i6ioiRXCpgWJezx3eWE7Jaxa4ny
wA4p6JTBTYfnMas=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org