Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131362e302f32322d3232203d3e20323637393536.roa
File:                     34352e3136362e3131362e302f32322d3232203d3e20323637393536.roa (raw, json)
Hash identifier:          iwozGKEYhjd68vnMf167h/cta3j7qA0O8p5IKJDvv5I=
Subject key identifier:   F5:11:93:AE:41:A7:36:B2:2E:5D:34:91:3F:57:1A:F8:7C:74:69:D4
Certificate issuer:       /CN=0B298E028BDDBEDE2A0ED25356B61E0F9368446D
Certificate serial:       58A922B828D34FCFA386D4CBE1861334151F3802
Authority key identifier: 0B:29:8E:02:8B:DD:BE:DE:2A:0E:D2:53:56:B6:1E:0F:93:68:44:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B298E028BDDBEDE2A0ED25356B61E0F9368446D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131362e302f32322d3232203d3e20323637393536.roa
Signing time:             Wed 24 Aug 2022 19:08:36 +0000
ROA not before:           Wed 24 Aug 2022 19:03:36 +0000
ROA not after:            Wed 23 Aug 2023 19:08:36 +0000
asID:                     267956
IP address blocks:        45.166.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a9:22:b8:28:d3:4f:cf:a3:86:d4:cb:e1:86:13:34:15:1f:38:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B298E028BDDBEDE2A0ED25356B61E0F9368446D
        Validity
            Not Before: Aug 24 19:03:36 2022 GMT
            Not After : Aug 23 19:08:36 2023 GMT
        Subject: CN=F51193AE41A736B22E5D34913F571AF87C7469D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:a0:1a:9f:c6:65:24:3f:bf:9a:55:e2:5c:
                    1e:a4:04:ed:f3:05:1a:cc:75:9e:c4:3b:b6:14:c3:
                    12:a8:ea:32:cf:16:44:e1:10:ca:77:9f:e5:ee:01:
                    bc:9c:9d:fe:8e:3a:9e:b7:57:c7:67:34:76:89:6e:
                    4c:be:35:ea:df:e4:ec:04:9d:58:57:26:48:a5:e3:
                    cd:d8:05:4b:f8:1b:7d:ec:dd:54:20:34:b6:8c:95:
                    fe:a1:90:8c:22:45:9e:ac:01:36:79:41:0f:ff:8a:
                    d7:d4:16:ab:96:b3:c8:a4:14:d0:78:41:41:27:dc:
                    f1:4c:9d:06:e5:7a:a0:11:95:72:0f:06:fb:c8:bb:
                    f4:18:c3:a5:6f:80:78:16:70:cd:96:da:c5:39:8e:
                    10:c2:ad:be:ca:65:2b:c2:b1:af:89:e8:9f:96:75:
                    4d:9d:1e:99:88:43:a4:83:cd:22:21:17:1d:32:e2:
                    03:c7:40:5d:c7:28:2b:fb:f3:6e:94:f7:37:25:1b:
                    60:dd:5d:37:62:eb:cd:5e:ae:71:d5:71:dc:3e:98:
                    7c:26:cc:61:32:bb:5b:b6:82:1e:8d:0a:c6:67:a2:
                    ae:13:70:66:ed:5e:e7:90:81:ac:26:9e:ed:71:9f:
                    37:2b:fb:30:52:b3:d5:45:17:a0:5a:cd:20:93:eb:
                    1e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:11:93:AE:41:A7:36:B2:2E:5D:34:91:3F:57:1A:F8:7C:74:69:D4
            X509v3 Authority Key Identifier:
                keyid:0B:29:8E:02:8B:DD:BE:DE:2A:0E:D2:53:56:B6:1E:0F:93:68:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/0B298E028BDDBEDE2A0ED25356B61E0F9368446D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B298E028BDDBEDE2A0ED25356B61E0F9368446D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131362e302f32322d3232203d3e20323637393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:73:71:b3:98:e6:84:4d:a0:18:62:57:66:be:db:30:41:16:
         c3:41:4a:9b:8d:69:c4:d4:eb:12:5b:25:7f:26:da:1b:82:40:
         f8:11:67:dd:9e:f1:38:19:8b:0f:4c:92:cf:a4:da:35:67:0c:
         6d:9c:0b:cd:d5:17:cf:38:34:a3:a9:64:8f:a5:51:50:8e:c4:
         87:df:8f:da:23:c7:0a:5a:be:17:58:0e:8c:7a:c0:45:00:3d:
         fd:6e:1c:bd:61:72:37:d8:23:ee:68:7b:a6:3f:40:09:aa:8d:
         cf:36:0a:72:e8:48:7b:05:5e:fe:de:44:d6:36:05:df:fa:39:
         b1:5e:26:11:16:c9:87:de:0f:03:1d:21:e1:9f:73:28:10:64:
         27:62:17:88:50:1e:fd:ba:4a:d3:e1:50:4c:0e:17:97:3e:95:
         62:8f:5a:eb:8f:e4:ae:fe:a8:44:b4:ef:12:66:c8:b0:01:6b:
         fb:9c:bc:93:46:f6:49:04:da:f4:e1:7f:58:7e:50:10:c0:61:
         e1:47:fc:ee:eb:cc:62:cf:41:5f:d0:2e:5a:30:75:f5:47:df:
         ea:4b:f6:d1:29:41:d1:29:55:d0:ac:8a:96:74:1e:1c:c7:84:
         ca:ce:77:f4:12:4f:d5:22:b0:55:ad:cd:28:29:23:2f:b0:bc:
         d2:4f:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org