Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/34352e3138392e39372e302f32342d3234203d3e20323639353739.roa
File:                     34352e3138392e39372e302f32342d3234203d3e20323639353739.roa (raw, json)
Hash identifier:          OF1B0948wC0bHm4vWBYndiydV4vRep/85i+HkXA8xAQ=
Subject key identifier:   9D:10:05:EA:75:7E:C5:CF:FA:8F:A8:B4:BF:0A:5E:84:68:2A:7F:B4
Certificate issuer:       /CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
Certificate serial:       32F7CE423465E7958332778A17C45CDACCC400AD
Authority key identifier: 16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/34352e3138392e39372e302f32342d3234203d3e20323639353739.roa
Signing time:             Sat 26 Aug 2023 13:36:14 +0000
ROA not before:           Sat 26 Aug 2023 13:31:14 +0000
ROA not after:            Sat 24 Aug 2024 13:36:14 +0000
asID:                     269579
IP address blocks:        45.189.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f7:ce:42:34:65:e7:95:83:32:77:8a:17:c4:5c:da:cc:c4:00:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
        Validity
            Not Before: Aug 26 13:31:14 2023 GMT
            Not After : Aug 24 13:36:14 2024 GMT
        Subject: CN=9D1005EA757EC5CFFA8FA8B4BF0A5E84682A7FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:39:42:ab:ef:16:d8:88:e5:73:4e:4e:7a:
                    86:07:a8:e3:7c:c0:c1:da:1f:27:47:4d:52:33:2d:
                    e9:d8:94:5e:0a:1f:96:e3:8f:ae:bf:45:7c:f0:d2:
                    5c:57:b0:22:25:1e:1e:87:69:47:03:6a:83:12:eb:
                    17:e6:50:7a:30:4c:87:b6:ac:49:e2:db:aa:28:01:
                    91:48:c7:a1:a5:1e:57:d6:8f:13:6e:d7:d4:c6:9a:
                    e8:dc:87:64:5e:a5:c4:f5:f5:c6:e2:c9:c0:15:8a:
                    74:be:2d:1d:e8:fa:1c:42:26:51:27:96:51:dd:27:
                    a7:e4:6d:53:e7:a2:6b:89:e1:2e:93:1a:c3:05:1c:
                    7a:06:db:2d:ad:cb:39:1b:79:1e:ea:e6:60:ef:d2:
                    c2:20:68:7f:3a:54:e2:45:46:59:e1:de:a3:22:6c:
                    11:73:57:85:41:38:cf:23:97:ec:57:26:e6:79:3c:
                    32:48:7d:3c:e8:9e:7d:0e:83:f5:d7:a4:b6:f0:09:
                    37:b6:41:c1:42:96:b1:0e:c2:eb:3f:6a:fd:4f:fa:
                    57:03:3e:4c:29:1f:5a:98:0b:af:52:69:36:bc:3f:
                    3b:20:7d:88:cc:61:0b:f3:8b:9f:9d:53:2a:e5:e2:
                    81:bc:95:30:3e:7e:9a:3b:75:45:6d:33:06:89:16:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:10:05:EA:75:7E:C5:CF:FA:8F:A8:B4:BF:0A:5E:84:68:2A:7F:B4
            X509v3 Authority Key Identifier:
                keyid:16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/34352e3138392e39372e302f32342d3234203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:80:96:e0:a5:b4:32:33:1c:21:e7:0e:ed:a6:1d:10:3f:c8:
         ef:da:0f:db:fa:f6:6e:1f:62:bc:96:14:43:e4:f4:ef:e6:24:
         68:ba:fe:24:b9:4a:6c:ed:d2:ec:6d:f8:1f:7a:44:ea:63:96:
         88:86:64:53:c4:5f:81:76:be:37:ce:a6:6d:2f:65:49:58:c7:
         ca:2b:35:44:92:08:1f:e0:fc:71:16:ea:a6:5a:f6:4d:62:12:
         a0:f9:0f:fa:b5:1a:51:57:e0:e8:c3:98:d3:4b:6c:81:00:5f:
         b9:8c:b1:83:16:5f:83:c5:7e:c7:e2:91:03:c9:21:42:9e:b2:
         c9:17:1c:05:c1:c9:2c:5d:bc:6f:ed:d7:ea:cb:02:b0:38:99:
         0f:5d:e2:fb:b7:a6:ec:d4:4e:b2:d9:bd:12:4e:b6:d2:0c:33:
         61:d7:63:c6:03:c2:f6:79:26:38:e9:09:ee:b3:1a:5b:2c:87:
         6c:39:eb:29:e6:f2:f1:49:44:76:5c:b0:24:6f:4c:94:a6:9e:
         c7:08:0b:cd:27:f1:13:93:02:b8:c9:50:13:fe:0b:d9:43:aa:
         43:d4:28:62:ad:f2:d9:4e:7c:d4:ea:15:79:b7:44:5d:c0:71:
         b3:39:1a:e2:78:a4:8c:84:b0:9c:ce:70:31:b9:8d:49:4c:1f:
         06:f8:9b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org