Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33352e302f32342d3234203d3e20323637333034.roa
File:                     34352e3233332e33352e302f32342d3234203d3e20323637333034.roa (raw, json)
Hash identifier:          OvOl0YCuUbthB+A6ppCDpTUlWQtA1XLadIcMLRg4IFU=
Subject key identifier:   8E:1D:84:8D:E0:30:2F:58:4A:33:8C:64:C3:BA:29:39:D6:37:BC:0A
Certificate issuer:       /CN=DA84F3349D037892FF53E38ABDA8EBDFA6F8F499
Certificate serial:       0E40B6EA6E04FA6B02DD39C52A847F545720EEF9
Authority key identifier: DA:84:F3:34:9D:03:78:92:FF:53:E3:8A:BD:A8:EB:DF:A6:F8:F4:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33352e302f32342d3234203d3e20323637333034.roa
Signing time:             Thu 14 Jul 2022 15:00:01 +0000
ROA not before:           Thu 14 Jul 2022 14:55:01 +0000
ROA not after:            Fri 14 Jul 2023 15:00:01 +0000
asID:                     267304
IP address blocks:        45.233.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:40:b6:ea:6e:04:fa:6b:02:dd:39:c5:2a:84:7f:54:57:20:ee:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA84F3349D037892FF53E38ABDA8EBDFA6F8F499
        Validity
            Not Before: Jul 14 14:55:01 2022 GMT
            Not After : Jul 14 15:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:71:b8:3b:3f:16:bd:89:8b:45:85:4c:4e:9c:
                    37:e9:b4:d5:9c:40:fd:5e:13:bb:c6:ae:fc:f5:1a:
                    6f:2a:ab:f8:19:99:a2:fd:45:a6:c9:f7:cc:25:ef:
                    d7:b2:1e:55:19:5e:9f:66:e7:5f:fb:e9:8b:9e:c9:
                    77:d5:a3:9c:0a:cc:5c:e7:ba:98:26:a0:6d:1e:37:
                    e2:e4:f3:d1:e9:d2:6c:55:08:56:fe:f6:a4:fb:25:
                    4c:0b:45:7a:d6:5c:56:29:cc:4a:11:a2:98:ed:d6:
                    92:0f:7b:80:69:12:63:f9:31:57:09:3c:ab:1f:72:
                    80:67:73:3f:f2:20:7b:7b:72:c2:ef:a4:4d:07:d9:
                    da:af:e3:41:6b:9b:23:76:78:73:af:18:b9:11:b0:
                    1d:0b:85:2e:7b:47:29:e4:32:f3:ea:a1:1f:29:e8:
                    e6:ba:e2:91:85:7b:a9:b0:9f:2d:4e:c8:2b:49:5c:
                    66:77:3e:34:a2:3e:6d:2a:22:41:9a:1d:12:ce:fc:
                    37:ae:61:75:5c:c9:58:e1:d1:e9:15:6c:bf:a7:14:
                    4c:9a:f1:8a:d1:4b:84:bb:48:be:97:22:3b:77:3a:
                    51:83:c7:c0:f0:bf:2d:82:3a:38:b6:d5:f7:98:df:
                    c7:50:aa:fb:e4:78:e3:0b:9e:8c:4d:40:12:89:8b:
                    d3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1D:84:8D:E0:30:2F:58:4A:33:8C:64:C3:BA:29:39:D6:37:BC:0A
            X509v3 Authority Key Identifier:
                keyid:DA:84:F3:34:9D:03:78:92:FF:53:E3:8A:BD:A8:EB:DF:A6:F8:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33352e302f32342d3234203d3e20323637333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:0a:42:d8:89:95:24:fa:c2:73:2c:cb:13:73:c1:a9:b0:9b:
         d0:2a:c4:53:15:19:19:5c:1b:b1:b7:05:51:72:93:95:87:92:
         a4:de:f4:b7:27:0b:6f:bd:63:ee:e1:90:50:ca:00:92:68:4c:
         b7:3c:21:88:f5:bd:45:95:df:93:1c:17:eb:2f:89:59:56:b1:
         26:01:43:8d:81:c7:fb:70:77:5a:c5:71:2c:28:59:58:2b:06:
         06:23:60:a9:43:d6:c9:ef:2f:77:57:1a:a7:e1:bf:04:25:ac:
         b3:96:04:5d:09:20:53:81:22:ed:d1:0b:7e:63:9d:15:80:47:
         cf:b3:1e:33:bc:97:a5:0f:4f:e3:29:69:0c:e9:99:53:fe:7c:
         da:80:fa:ed:73:32:dc:49:05:ae:b9:39:2f:22:46:96:59:d5:
         9a:5d:e1:1b:c7:a3:e5:3c:da:b7:59:fb:22:fb:77:04:56:eb:
         71:96:f8:40:5b:5f:30:c3:43:54:d2:03:58:7b:5e:f3:d3:47:
         e5:9d:af:86:79:e8:0d:5b:48:b1:70:1c:f1:2e:95:ad:63:7e:
         b8:f3:af:51:33:c5:fb:56:ce:6d:0d:6f:7b:3d:ba:c6:7b:fe:
         69:d1:43:2c:c5:fa:30:eb:ca:ce:96:12:10:f3:31:0d:4c:82:
         83:fe:6c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org