Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231382e302f32332d3233203d3e20323638313733.roa
File:                     34352e3137302e3231382e302f32332d3233203d3e20323638313733.roa (raw, json)
Hash identifier:          8K+P7luhkXNFpfj8AGgI/VkbuKWPK2F32KuHBKZszKw=
Subject key identifier:   8E:78:D2:FF:B0:A8:09:D4:1F:EA:E2:74:09:F1:1B:6F:00:6C:73:0E
Certificate issuer:       /CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
Certificate serial:       37BD8FA9036F23B04365AFC189D756AAF9A08A48
Authority key identifier: 35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231382e302f32332d3233203d3e20323638313733.roa
Signing time:             Fri 24 Nov 2023 14:04:40 +0000
ROA not before:           Fri 24 Nov 2023 13:59:40 +0000
ROA not after:            Fri 22 Nov 2024 14:04:40 +0000
asID:                     268173
IP address blocks:        45.170.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:bd:8f:a9:03:6f:23:b0:43:65:af:c1:89:d7:56:aa:f9:a0:8a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
        Validity
            Not Before: Nov 24 13:59:40 2023 GMT
            Not After : Nov 22 14:04:40 2024 GMT
        Subject: CN=8E78D2FFB0A809D41FEAE27409F11B6F006C730E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ec:fb:7d:25:e3:ee:63:dd:f9:3c:d8:93:5f:
                    63:58:db:d0:b0:14:4e:c5:a6:a1:09:43:22:af:f7:
                    97:52:ee:65:18:e5:7c:0c:a3:85:4c:4d:a5:d5:b6:
                    0e:a2:93:5f:a6:92:c5:8e:ae:dd:98:8a:8c:03:2f:
                    f8:1d:a8:39:d2:22:cb:ef:75:bc:22:dc:66:77:cb:
                    57:97:eb:81:1b:79:89:4a:b3:8e:95:e1:07:9b:95:
                    2a:39:d1:9c:f1:1b:7f:c9:11:35:d8:fb:e9:9a:1c:
                    bd:11:16:43:e8:5c:67:f5:fb:6c:2f:aa:c0:1f:44:
                    9f:13:79:6a:09:91:58:f8:7e:9c:48:93:09:73:97:
                    86:ee:58:dc:79:e9:21:7b:21:52:b2:6c:ef:b7:24:
                    2a:52:ea:19:f3:73:e6:8f:2f:52:47:c1:3e:a7:9f:
                    49:ef:d3:79:15:8f:0f:41:b3:ea:1c:76:d8:80:81:
                    a8:0c:f4:16:4c:ab:00:73:e0:5d:6e:e4:02:29:03:
                    b8:e2:b5:2b:50:2a:ac:7f:50:5b:2e:b7:3e:c4:3c:
                    7c:1b:13:4a:f8:86:40:15:a5:04:45:03:ae:22:f9:
                    4c:c4:ea:6a:21:66:72:1f:cc:11:02:81:61:2c:2f:
                    5d:ac:bb:a4:3a:79:cb:ca:c8:43:a9:6e:74:67:ef:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:78:D2:FF:B0:A8:09:D4:1F:EA:E2:74:09:F1:1B:6F:00:6C:73:0E
            X509v3 Authority Key Identifier:
                keyid:35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231382e302f32332d3233203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:54:8f:7a:02:70:8a:cc:3b:05:54:9a:21:f1:73:85:fa:b0:
         9a:fd:3f:11:f0:a1:62:23:a2:bd:25:6b:7d:24:9f:6e:a8:73:
         e1:13:88:f5:e7:10:9f:18:e6:c1:77:d8:f3:05:3d:83:2e:a4:
         07:38:5b:fe:d7:cf:3e:05:cd:e6:a1:2d:da:81:5a:a9:34:65:
         38:4d:df:a2:3d:2a:22:7f:49:46:c9:03:50:ee:15:c0:04:50:
         c7:06:dc:93:96:be:31:7c:cf:5c:bf:69:aa:d1:95:bc:84:eb:
         7f:88:7f:49:10:cc:9f:b5:e1:01:fb:a8:ed:29:03:10:7a:55:
         2a:b3:7e:91:68:c2:08:d0:2a:75:00:c6:c7:e1:f3:a5:3e:38:
         ee:e5:d7:97:0b:16:8c:b1:08:d6:04:80:71:4c:91:8d:9f:23:
         e3:14:8d:3b:10:d1:15:0a:c5:e9:45:ff:62:5a:d5:88:95:3b:
         de:91:c3:4a:05:61:0a:24:ea:a0:4b:33:f3:3f:cd:66:90:0a:
         04:10:96:fd:9a:ae:94:1f:32:b2:21:6d:c3:e8:80:10:05:51:
         b9:3d:e5:62:da:03:d2:2a:7c:13:67:26:97:98:65:90:86:08:
         36:72:f2:98:83:8d:7f:b4:ff:dd:25:56:2c:18:38:f2:31:78:
         14:42:ba:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN72PqQNvI7BDZa/BiddWqvmgikgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVDRUUzNkRDMjJCOTFBNDI2OUQxMjZEQjUxNzFEQjc1
QzQ0QzFGRDAeFw0yMzExMjQxMzU5NDBaFw0yNDExMjIxNDA0NDBaMDMxMTAvBgNV
BAMTKDhFNzhEMkZGQjBBODA5RDQxRkVBRTI3NDA5RjExQjZGMDA2QzczMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb7Pt9JePuY935PNiTX2NY29Cw
FE7FpqEJQyKv95dS7mUY5XwMo4VMTaXVtg6ik1+mksWOrt2YiowDL/gdqDnSIsvv
dbwi3GZ3y1eX64EbeYlKs46V4QeblSo50ZzxG3/JETXY++maHL0RFkPoXGf1+2wv
qsAfRJ8TeWoJkVj4fpxIkwlzl4buWNx56SF7IVKybO+3JCpS6hnzc+aPL1JHwT6n
n0nv03kVjw9Bs+ocdtiAgagM9BZMqwBz4F1u5AIpA7jitStQKqx/UFsutz7EPHwb
E0r4hkAVpQRFA64i+UzE6mohZnIfzBECgWEsL12su6Q6ecvKyEOpbnRn764pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjnjS/7CoCdQf6uJ0CfEbbwBscw4wHwYDVR0j
BBgwFoAUNc7jbcIrkaQmnRJttRcdt1xEwf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmFCVnlpY25xNzE1aExmOUFla1dTWWNjUmFpbWZRTHhiSHBQWkt3QVVG
OFIvMC8zNUNFRTM2REMyMkI5MUE0MjY5RDEyNkRCNTE3MURCNzVDNDRDMUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1Q0VFMzZEQzIyQjkxQTQy
NjlEMTI2REI1MTcxREI3NUM0NEMxRkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZhQlZ5aWNucTcxNWhMZjlBZWtXU1ljY1JhaW1mUUx4YkhwUFpLd0FVRjhSLzAv
MzQzNTJlMzEzNzMwMmUzMjMxMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtqtowDQYJKoZIhvcNAQELBQADggEBAGlUj3oC
cIrMOwVUmiHxc4X6sJr9PxHwoWIjor0la30kn26oc+ETiPXnEJ8Y5sF32PMFPYMu
pAc4W/7Xzz4FzeahLdqBWqk0ZThN36I9KiJ/SUbJA1DuFcAEUMcG3JOWvjF8z1y/
aarRlbyE63+If0kQzJ+14QH7qO0pAxB6VSqzfpFowgjQKnUAxsfh86U+OO7l15cL
FoyxCNYEgHFMkY2fI+MUjTsQ0RUKxelF/2Ja1YiVO96Rw0oFYQok6qBLM/M/zWaQ
CgQQlv2arpQfMrIhbcPogBAFUbk95WLaA9IqfBNnJpeYZZCGCDZy8piDjX+0/90l
ViwYOPIxeBRCulM=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org