Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/34352e3138392e39382e302f32332d3233203d3e20323639353739.roa
File:                     34352e3138392e39382e302f32332d3233203d3e20323639353739.roa (raw, json)
Hash identifier:          OVA5h1eOTqAjOCAdcu6ZcjbwOuV8vBvVR9QK65+Ek9M=
Subject key identifier:   41:AB:72:EB:43:03:1A:C9:3A:F2:75:82:AB:CD:C5:2D:9F:8A:02:D6
Certificate issuer:       /CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
Certificate serial:       3FBAE95078D706604A44DFBDA6151BCF1CAC46B3
Authority key identifier: 16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/34352e3138392e39382e302f32332d3233203d3e20323639353739.roa
Signing time:             Sat 26 Aug 2023 13:35:36 +0000
ROA not before:           Sat 26 Aug 2023 13:30:36 +0000
ROA not after:            Sat 24 Aug 2024 13:35:36 +0000
asID:                     269579
IP address blocks:        45.189.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ba:e9:50:78:d7:06:60:4a:44:df:bd:a6:15:1b:cf:1c:ac:46:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
        Validity
            Not Before: Aug 26 13:30:36 2023 GMT
            Not After : Aug 24 13:35:36 2024 GMT
        Subject: CN=41AB72EB43031AC93AF27582ABCDC52D9F8A02D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:69:4e:f5:53:b6:0a:14:42:2b:ad:ac:6d:
                    70:a0:37:1b:a3:49:a8:b3:21:9f:8a:68:dd:a5:f6:
                    83:e2:04:a8:46:9b:d2:0f:e8:98:af:e5:d9:cf:45:
                    fa:64:af:1e:91:e9:c3:dc:aa:0a:75:48:9e:0a:e1:
                    c1:4b:fe:11:1f:c6:bb:2b:85:8e:7e:8c:b3:ec:29:
                    54:62:ec:55:93:f6:6b:ac:ed:52:7b:8e:ef:07:bd:
                    ec:f9:0e:13:28:0f:95:9d:b4:8a:8a:bf:43:2f:6d:
                    6d:dd:c2:02:15:95:36:13:96:43:b0:9c:a0:ec:ed:
                    b4:ce:0c:ff:88:1c:3a:9f:94:07:f0:c6:1a:2e:a6:
                    30:2d:ee:33:98:54:b5:96:72:a7:4b:2c:7e:ef:cf:
                    62:fa:f7:f6:ae:2b:33:9c:b5:c9:3c:5f:3c:7f:30:
                    c1:d6:fa:e4:0d:ba:d6:cd:fb:9f:7b:36:52:36:fb:
                    2b:57:24:68:df:12:09:a0:11:5e:91:af:6d:59:44:
                    89:52:95:0f:62:55:07:26:ae:63:e1:33:a4:ec:81:
                    e9:69:b1:6e:0f:2c:e1:27:79:6f:83:6a:98:40:46:
                    ee:da:61:0e:e4:e9:1d:63:5b:b2:98:b2:b4:0e:e0:
                    4f:e6:f1:80:1c:73:19:38:08:61:ae:a3:db:e3:9b:
                    39:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AB:72:EB:43:03:1A:C9:3A:F2:75:82:AB:CD:C5:2D:9F:8A:02:D6
            X509v3 Authority Key Identifier:
                keyid:16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/34352e3138392e39382e302f32332d3233203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:eb:1f:f2:11:fc:d7:dc:1c:da:bc:8a:25:83:f2:50:c1:23:
         81:c3:74:6b:5d:9c:21:94:11:49:36:2c:0a:85:5b:9f:bc:d2:
         86:8c:d3:50:41:49:a0:85:74:f0:63:b9:1e:e1:e8:12:b7:69:
         e3:45:f4:03:ff:bc:f6:17:5b:65:96:b9:b8:08:59:5f:73:7e:
         af:78:b3:9a:d7:8d:f0:0b:f7:68:dd:d0:c4:7e:6b:44:ec:f8:
         89:d8:ae:2c:6f:6b:8e:c4:22:37:64:4c:51:f3:31:16:a7:67:
         dc:0e:a3:98:be:8b:5b:d4:a9:01:5e:53:96:4f:96:2a:c4:22:
         19:b3:d8:00:97:6e:c2:b5:4c:ff:dc:bf:06:d1:b9:26:96:e6:
         0b:6e:a0:c4:32:bd:97:37:a7:5b:80:48:b2:78:51:c5:d0:a0:
         92:56:e8:09:3b:62:2d:43:ad:af:a0:b2:17:13:43:67:ac:c3:
         8e:e7:e0:c2:63:eb:ca:22:b2:eb:59:91:35:eb:e6:cc:f0:a2:
         ee:0e:85:96:5b:90:b4:16:c4:d5:81:bb:66:c8:76:78:99:0f:
         50:26:f0:b2:15:b5:59:df:80:88:7c:ac:72:51:37:0e:9c:0d:
         ce:42:10:a1:79:85:18:d5:e2:27:82:2f:8e:58:aa:93:99:41:
         34:d7:8c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org