Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/34352e3138392e39362e302f32322d3232203d3e20323639353739.roa
File:                     34352e3138392e39362e302f32322d3232203d3e20323639353739.roa (raw, json)
Hash identifier:          VvIgHD0lV1HgFA0yizz9KiK/dS/15qOX3W8YVkgQMjo=
Subject key identifier:   5E:52:C0:99:46:BD:1A:34:D5:3A:4E:8E:58:2B:B3:8E:87:26:6C:78
Certificate issuer:       /CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
Certificate serial:       299B47875E704E0E8B903E7CC21151CE87D730E4
Authority key identifier: 7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/34352e3138392e39362e302f32322d3232203d3e20323639353739.roa
Signing time:             Wed 03 Apr 2024 18:30:02 +0000
ROA not before:           Wed 03 Apr 2024 18:25:02 +0000
ROA not after:            Wed 02 Apr 2025 18:30:02 +0000
asID:                     269579
IP address blocks:        45.189.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9b:47:87:5e:70:4e:0e:8b:90:3e:7c:c2:11:51:ce:87:d7:30:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
        Validity
            Not Before: Apr  3 18:25:02 2024 GMT
            Not After : Apr  2 18:30:02 2025 GMT
        Subject: CN=5E52C09946BD1A34D53A4E8E582BB38E87266C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bf:c8:69:d0:54:7b:16:96:41:4f:7a:34:1f:
                    78:bc:ed:d4:4d:42:e3:88:7c:5c:82:79:e9:4c:77:
                    df:cb:b3:19:1d:d9:cd:72:7c:f5:42:9f:b2:8b:98:
                    49:7e:2a:6b:e4:e6:66:9b:bf:c3:f5:23:ad:58:2d:
                    74:25:f0:71:78:b7:06:21:eb:9a:85:3d:be:bf:e6:
                    c7:b8:1a:cb:2c:00:e1:b2:52:66:d5:80:94:5b:f1:
                    4e:e5:fa:85:fc:79:2b:5b:e2:ac:5c:94:25:92:e9:
                    3e:3c:d3:de:54:ff:10:40:22:6c:78:2e:75:02:65:
                    66:3c:d1:5e:e2:94:d7:c4:4e:d4:23:a7:57:d1:4d:
                    a4:ac:d3:8d:26:a2:14:9c:f6:fd:72:9a:3c:20:ee:
                    98:6c:4a:54:0c:34:29:06:2e:18:6b:48:45:e9:ec:
                    73:1c:56:89:aa:1f:cf:2e:77:fd:c9:26:05:b9:47:
                    22:0a:2f:ba:e9:be:b7:b8:1b:2c:d0:0f:5d:95:cb:
                    98:91:71:fc:16:12:d1:15:78:b0:13:92:39:33:ee:
                    4f:99:bf:5e:e0:00:8e:ea:51:41:a1:7a:6d:e8:66:
                    f5:11:4c:02:b8:6f:9d:19:d7:d9:0b:b9:ad:22:27:
                    6a:58:66:d5:5d:b7:4b:f5:58:f6:1d:61:ea:88:ca:
                    dd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:52:C0:99:46:BD:1A:34:D5:3A:4E:8E:58:2B:B3:8E:87:26:6C:78
            X509v3 Authority Key Identifier:
                keyid:7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/34352e3138392e39362e302f32322d3232203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:5f:8a:60:02:4c:9a:ea:5f:87:19:25:20:88:30:96:39:06:
         1c:64:1a:f3:f8:ce:5e:21:73:3c:bb:24:76:db:fe:02:9c:ec:
         06:1d:a8:f1:d6:cd:21:e5:7d:12:ea:41:b6:a3:fc:6d:d7:a8:
         a8:3c:9a:91:74:bc:76:ea:56:b5:c0:e5:bf:3d:56:dc:ac:86:
         0e:f5:5b:62:55:0a:c0:cd:f8:20:a2:7a:98:4a:79:4f:5c:b9:
         78:f6:e2:e1:85:e7:32:8d:6f:10:23:4e:7e:50:d6:92:03:03:
         c4:56:b9:2d:02:4e:a2:2f:c1:72:fa:bd:c4:5b:f9:e5:60:00:
         70:20:87:b4:85:0f:25:62:ac:01:1c:05:8b:e7:e0:a8:90:60:
         93:b9:77:5a:5a:e0:31:0d:54:b8:ca:e6:b0:27:8a:3a:90:f3:
         a8:c6:89:56:68:e2:79:a7:e8:ea:0d:76:ac:0a:88:8d:34:f4:
         11:34:7b:31:22:15:69:53:31:12:a3:c5:b4:d1:96:e9:21:f6:
         49:61:e6:32:ec:bc:a8:92:ca:24:8c:9e:66:53:05:10:e4:69:
         d2:74:cb:75:29:5f:f0:5a:8a:24:10:36:bc:7a:79:a9:80:cf:
         eb:af:85:3c:9a:f3:e7:89:f9:7f:5a:e5:b9:b1:ef:f1:44:30:
         da:65:01:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org