Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/34352e3138392e39382e302f32342d3234203d3e20323639353739.roa
File:                     34352e3138392e39382e302f32342d3234203d3e20323639353739.roa (raw, json)
Hash identifier:          xC9+9TNeQR+/mdc4a31UfRuHAWCyFvqB66hH8618S+8=
Subject key identifier:   4A:00:53:35:34:9C:25:30:95:6B:13:1A:4C:4E:FB:A6:A4:34:58:46
Certificate issuer:       /CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
Certificate serial:       52EBE045D29A399DBAAA5D6F01F80FFE4BF5CE44
Authority key identifier: 16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/34352e3138392e39382e302f32342d3234203d3e20323639353739.roa
Signing time:             Sat 26 Aug 2023 13:36:33 +0000
ROA not before:           Sat 26 Aug 2023 13:31:33 +0000
ROA not after:            Sat 24 Aug 2024 13:36:33 +0000
asID:                     269579
IP address blocks:        45.189.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:eb:e0:45:d2:9a:39:9d:ba:aa:5d:6f:01:f8:0f:fe:4b:f5:ce:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
        Validity
            Not Before: Aug 26 13:31:33 2023 GMT
            Not After : Aug 24 13:36:33 2024 GMT
        Subject: CN=4A005335349C2530956B131A4C4EFBA6A4345846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:44:6b:e0:59:be:79:3b:cc:f3:81:5d:ef:
                    85:2d:ab:d2:ad:f6:24:be:23:c4:b4:8c:51:1f:d0:
                    80:f2:f9:72:1a:ab:24:6f:5c:21:67:bf:d3:23:c9:
                    f8:71:ee:ee:30:1a:83:37:31:67:90:9d:fd:c2:3f:
                    ea:e6:db:38:91:37:1f:02:66:b2:a6:89:62:67:dc:
                    07:2e:8b:13:94:c2:7e:b6:c3:1d:6e:3b:7d:12:9d:
                    83:f9:4a:2b:a8:7c:56:2a:5f:f1:48:1a:03:59:16:
                    1b:81:15:93:62:1a:20:1c:42:be:ee:61:e7:a7:78:
                    2d:f1:50:93:50:d1:04:b0:08:bf:30:b6:40:24:e9:
                    b2:84:54:ce:44:dd:77:06:95:44:8c:ef:31:03:b0:
                    68:2f:de:15:20:a8:a1:4a:f7:98:68:e9:7e:82:83:
                    fb:28:ca:61:69:45:0f:60:31:62:c0:27:5d:18:9e:
                    3f:c0:04:ee:b3:e6:1b:36:b8:c0:9d:38:ed:69:84:
                    b3:43:3e:c3:98:20:0d:9d:07:71:1f:cf:02:36:f7:
                    5d:e9:91:00:5b:de:20:ca:76:71:25:a8:94:87:70:
                    06:22:ff:1f:c7:4b:e0:5b:fb:2f:46:60:c7:7c:1d:
                    16:84:87:3a:a0:15:50:86:df:31:a0:16:0c:3e:3a:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:00:53:35:34:9C:25:30:95:6B:13:1A:4C:4E:FB:A6:A4:34:58:46
            X509v3 Authority Key Identifier:
                keyid:16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/34352e3138392e39382e302f32342d3234203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:9f:34:a4:2a:65:a4:54:73:89:eb:86:69:94:7e:2f:5a:00:
         60:e1:70:7c:e6:32:02:d2:f8:c4:8d:dd:5e:a1:ed:15:17:91:
         dd:a4:87:dd:a9:eb:ea:3f:83:a4:48:05:95:ce:ad:b1:6a:bc:
         7e:5f:5e:92:52:d7:a9:65:3c:4f:bd:cb:8f:b6:da:4a:35:6b:
         84:03:1b:8d:fe:2b:b2:51:e4:a5:44:0f:b0:33:ee:48:10:96:
         ed:cc:c3:e4:9a:00:70:d4:bf:32:06:44:06:49:84:c0:5b:23:
         ae:37:c2:11:d3:64:3c:23:7e:fb:4c:d4:d3:53:91:be:40:9d:
         99:70:11:96:51:51:37:8d:dd:af:8d:8c:5e:f8:6d:7b:1a:cb:
         e3:90:0a:3e:2f:5d:ef:0f:ce:ad:fe:ea:97:e5:ba:4b:5b:3b:
         fe:e0:2d:26:a0:a1:37:08:6d:1f:59:99:b9:34:5d:b7:b6:5a:
         cf:82:86:93:5f:e1:bb:3a:f2:ed:af:05:c0:65:94:1a:8c:78:
         47:ae:72:ab:15:86:67:32:eb:cd:ca:fc:43:be:fa:a4:3e:75:
         d5:11:80:19:21:c7:6a:6b:6d:4b:f2:4e:bf:f5:a8:6e:02:1f:
         a1:5d:17:bd:28:30:6d:03:64:0b:9f:29:ec:4f:40:61:24:70:
         92:50:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org