Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/34352e3138392e39392e302f32342d3234203d3e20323639353739.roa
File:                     34352e3138392e39392e302f32342d3234203d3e20323639353739.roa (raw, json)
Hash identifier:          BMS8FShewZpJ1Dim1Z6V3U8A85KOJT+TQGLo7dpwOLA=
Subject key identifier:   51:E5:9B:B9:F1:1B:8A:8B:6D:54:5A:28:14:62:6C:C3:24:8C:92:8B
Certificate issuer:       /CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
Certificate serial:       2AA116FD42E60B153F553B5B913BF8A6A95DCB8E
Authority key identifier: 16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/34352e3138392e39392e302f32342d3234203d3e20323639353739.roa
Signing time:             Sat 26 Aug 2023 13:36:46 +0000
ROA not before:           Sat 26 Aug 2023 13:31:46 +0000
ROA not after:            Sat 24 Aug 2024 13:36:46 +0000
asID:                     269579
IP address blocks:        45.189.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a1:16:fd:42:e6:0b:15:3f:55:3b:5b:91:3b:f8:a6:a9:5d:cb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
        Validity
            Not Before: Aug 26 13:31:46 2023 GMT
            Not After : Aug 24 13:36:46 2024 GMT
        Subject: CN=51E59BB9F11B8A8B6D545A2814626CC3248C928B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:e0:19:6f:85:1e:31:29:09:be:f1:a1:2a:
                    a5:ef:ec:50:ad:d7:3b:7f:bd:5d:ab:51:aa:a4:2d:
                    ac:c8:c2:36:9b:2c:3c:3f:6e:a3:4a:db:25:3e:0b:
                    6a:c3:4d:c2:2a:fb:35:19:ed:ed:e3:24:d9:32:f9:
                    ea:88:ee:be:5c:e3:80:c1:50:b9:5d:19:56:ec:cf:
                    b3:8e:96:f5:a2:82:36:ad:a5:93:c6:f1:ea:c8:70:
                    07:40:bc:3d:1a:7a:7d:14:38:ed:35:7d:5f:b0:40:
                    07:14:fc:10:23:6e:7e:6e:b4:17:00:c2:8d:0e:17:
                    42:b8:71:e4:39:0f:11:20:ee:ac:d4:16:8c:d7:2a:
                    c8:85:8b:ea:53:78:4c:1b:6f:31:b4:22:ba:07:5a:
                    03:66:15:9f:26:7d:67:88:3b:22:30:6b:e4:c5:ae:
                    58:6b:75:8b:15:d3:9c:d8:a0:af:06:8c:ce:0d:4b:
                    40:57:0e:4c:86:99:9d:eb:16:f4:6c:ec:7a:ce:da:
                    92:d6:01:de:d4:21:69:e3:13:6e:f6:6a:39:da:02:
                    e8:6f:b3:dd:42:7c:07:ed:6c:9a:ac:cf:f5:73:c2:
                    37:2f:01:69:bf:2b:a5:05:23:dc:bc:ae:83:9e:47:
                    66:67:6f:73:aa:ff:04:bb:4b:24:72:73:02:a3:1f:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E5:9B:B9:F1:1B:8A:8B:6D:54:5A:28:14:62:6C:C3:24:8C:92:8B
            X509v3 Authority Key Identifier:
                keyid:16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/34352e3138392e39392e302f32342d3234203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:1b:9d:c1:0a:76:c8:78:31:7a:57:f0:d4:58:c3:01:92:4e:
         91:2e:ba:30:59:8e:6d:0d:44:41:f2:14:26:d6:ca:3b:8a:ca:
         06:75:19:8d:05:08:b9:dc:b4:c6:f2:72:5f:97:66:48:c7:20:
         b8:d6:20:bc:22:f2:21:b6:e2:81:45:ca:85:1b:00:5c:c7:d8:
         98:57:e9:92:f0:ab:a6:77:7d:5a:32:78:77:4d:a9:7d:58:ca:
         ef:b6:aa:a0:4a:70:48:47:0a:53:f5:77:00:3b:d0:27:8e:c9:
         72:01:8a:47:65:54:21:23:34:11:31:ca:1c:d3:8d:0e:31:2e:
         98:89:f2:9a:47:16:ee:1f:21:eb:9d:98:ef:27:d1:0d:52:f8:
         1a:fa:7a:42:32:8c:a2:7e:79:f3:86:c4:b7:15:8f:1b:95:ee:
         e1:2c:ae:31:6d:16:3a:52:b2:20:54:61:da:16:b5:d7:c0:f2:
         9a:0b:a9:fe:06:7f:47:f5:93:75:2b:a0:18:16:57:b2:c5:4a:
         f3:0e:65:48:02:bc:81:53:ba:88:76:ce:1e:a0:f1:f5:74:59:
         50:d6:fc:52:54:08:ae:11:8c:e6:2d:3d:21:89:20:97:d0:3e:
         38:a2:eb:9d:06:09:2d:cd:40:e1:08:ef:91:c0:4a:93:18:25:
         24:eb:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org