Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231392e302f32342d3234203d3e20323638313733.roa
File:                     34352e3137302e3231392e302f32342d3234203d3e20323638313733.roa (raw, json)
Hash identifier:          RXzeyCJFU+pambr4n/onx+mA7GlCP2zsjdD01untVq0=
Subject key identifier:   F7:8C:4A:4E:90:A6:44:28:63:C5:58:6C:1E:4B:77:CF:33:0F:F6:97
Certificate issuer:       /CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
Certificate serial:       2F33A83F0A05B0F2F9E26E3139ECE017B7B76AB1
Authority key identifier: 35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231392e302f32342d3234203d3e20323638313733.roa
Signing time:             Tue 15 Aug 2023 18:23:54 +0000
ROA not before:           Tue 15 Aug 2023 18:18:54 +0000
ROA not after:            Tue 13 Aug 2024 18:23:54 +0000
asID:                     268173
IP address blocks:        45.170.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:33:a8:3f:0a:05:b0:f2:f9:e2:6e:31:39:ec:e0:17:b7:b7:6a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
        Validity
            Not Before: Aug 15 18:18:54 2023 GMT
            Not After : Aug 13 18:23:54 2024 GMT
        Subject: CN=F78C4A4E90A6442863C5586C1E4B77CF330FF697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:1a:a7:90:0c:f2:af:3f:80:78:24:93:a0:
                    3a:9e:c3:19:07:ab:99:cf:73:6f:44:ad:f1:76:2c:
                    da:18:6f:3d:77:c7:81:65:1c:ba:49:69:e2:7f:42:
                    fd:83:82:13:ef:2e:4b:94:11:da:a1:00:40:a0:69:
                    4c:45:45:db:c2:f1:6d:ce:58:1f:56:77:3e:79:99:
                    13:9c:7a:e9:e2:eb:47:74:a0:a6:9d:5b:65:4b:40:
                    25:9e:92:64:1c:c1:50:a3:81:5e:e5:a2:9e:28:8b:
                    61:38:fc:09:c0:30:28:73:b7:7d:67:8f:38:ea:77:
                    ec:5b:04:0b:e1:9e:ce:ef:80:0c:63:8d:cf:2a:8e:
                    cb:f2:ea:f0:6f:61:fe:54:74:ef:93:2a:e4:dc:d0:
                    4a:3e:0c:dd:69:4c:c2:6b:e3:0f:2e:61:14:74:d3:
                    5a:fa:2e:52:5d:cb:bc:a9:3d:2b:2c:73:b3:f8:10:
                    4e:68:59:bd:17:33:a0:f9:00:4e:a9:c5:67:67:bb:
                    21:f2:66:ee:73:b3:fc:5a:90:68:93:6e:da:9a:f2:
                    9d:50:38:cf:f7:1c:9b:09:4d:a9:16:dc:9f:13:65:
                    dd:08:d4:16:31:1d:a4:2d:c1:ab:49:d6:d0:91:2e:
                    31:1e:86:ad:a8:9a:84:04:29:d2:f7:e2:de:52:e9:
                    67:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8C:4A:4E:90:A6:44:28:63:C5:58:6C:1E:4B:77:CF:33:0F:F6:97
            X509v3 Authority Key Identifier:
                keyid:35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231392e302f32342d3234203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:08:70:a0:ad:49:90:95:48:7d:e0:7e:9f:1f:d0:0a:87:
         30:97:18:17:c1:3f:76:53:64:21:c7:0c:f9:e6:28:a7:42:00:
         ca:57:d6:2c:36:6d:80:80:c3:71:32:71:f4:7f:fd:16:1e:2c:
         06:f4:e8:1f:cc:01:e6:e0:f6:f2:fe:25:fc:ae:58:4c:02:b8:
         62:4f:09:52:83:ee:eb:c2:09:18:2b:0a:29:66:a5:69:6d:e6:
         d4:97:31:a9:58:28:bc:5e:2c:c5:69:67:45:2b:56:db:96:f2:
         a5:6b:2a:e9:48:8e:74:4b:a9:a6:24:40:b5:92:0f:f0:c6:b3:
         79:a7:cd:89:86:94:4d:ce:19:28:c8:5f:52:f2:bd:29:95:72:
         01:b2:0d:c0:cf:dc:4f:fa:79:10:c4:c1:7e:6c:fb:b1:30:10:
         50:ac:59:1d:f2:39:de:47:2a:3e:38:6d:03:0a:35:16:75:0f:
         26:8d:04:f5:b5:2f:76:ee:38:cc:71:36:9d:b6:21:5c:ce:b4:
         97:dd:a3:ab:90:8d:34:a6:8f:7d:00:24:50:d1:4b:c2:f0:b0:
         04:f5:00:28:fc:ed:02:d9:2c:5b:cb:f1:e9:61:0e:d6:94:3d:
         ea:7c:3c:99:d4:5f:42:3a:f8:3e:8c:73:28:f1:b3:d3:42:a1:
         2d:aa:17:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org