Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/34352e3138392e39382e302f32332d3233203d3e20323639353739.roa
File:                     34352e3138392e39382e302f32332d3233203d3e20323639353739.roa (raw, json)
Hash identifier:          7e9irPirgUlJKgNLw6msHq2/57fC22mX3wgVMjNbsPE=
Subject key identifier:   9F:BA:89:1D:83:03:C3:C5:49:00:E4:1E:E0:B6:DF:BC:B0:1F:F8:B2
Certificate issuer:       /CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
Certificate serial:       1A9A5395E05B97A65CD492FC1AD6B6B9B3BEAC82
Authority key identifier: 7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/34352e3138392e39382e302f32332d3233203d3e20323639353739.roa
Signing time:             Wed 03 Apr 2024 18:30:02 +0000
ROA not before:           Wed 03 Apr 2024 18:25:02 +0000
ROA not after:            Wed 02 Apr 2025 18:30:02 +0000
asID:                     269579
IP address blocks:        45.189.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9a:53:95:e0:5b:97:a6:5c:d4:92:fc:1a:d6:b6:b9:b3:be:ac:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0
        Validity
            Not Before: Apr  3 18:25:02 2024 GMT
            Not After : Apr  2 18:30:02 2025 GMT
        Subject: CN=9FBA891D8303C3C54900E41EE0B6DFBCB01FF8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:c3:ac:62:6a:a6:a8:9f:c2:9c:fc:32:80:
                    e3:b4:70:b2:c4:30:50:c1:da:bd:61:be:5f:ae:16:
                    e7:0e:a2:b5:26:69:81:d8:d7:89:49:c8:10:6e:30:
                    9b:31:d4:64:ca:16:c3:db:c7:60:b2:cb:2d:ef:f6:
                    a6:62:6c:e5:a0:4b:5e:51:f0:92:e9:9b:79:44:0d:
                    0f:0e:e2:db:1c:f2:83:2a:e2:73:fd:01:0c:05:b1:
                    30:b0:6a:ea:d6:76:dc:bc:69:f2:11:95:82:37:f1:
                    00:98:d1:39:9a:9c:a4:88:9e:17:84:03:b3:7c:e6:
                    22:cf:af:c3:b4:32:0b:34:3d:ba:c9:be:b7:a4:75:
                    f8:a0:fc:ef:0d:a9:3e:1f:eb:65:dd:93:4e:5d:a0:
                    0b:a7:62:4c:f0:bc:59:4b:6d:32:b8:3f:37:47:5f:
                    07:1f:51:c6:06:66:c4:ea:dc:ef:7e:fb:d4:e7:58:
                    5e:24:18:b3:d7:73:91:a8:39:90:94:2f:e7:b7:33:
                    0a:91:90:0d:99:b9:bd:c4:d4:b2:ee:c4:17:d5:3d:
                    76:32:b5:04:4e:da:0d:e6:32:98:ab:f3:bd:c6:48:
                    05:ee:61:84:73:62:af:2d:36:92:40:d4:b9:b8:f6:
                    02:59:61:31:e4:4a:f7:89:82:00:eb:82:d3:b0:83:
                    71:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BA:89:1D:83:03:C3:C5:49:00:E4:1E:E0:B6:DF:BC:B0:1F:F8:B2
            X509v3 Authority Key Identifier:
                keyid:7E:A4:26:2C:73:E9:C3:CB:DF:61:1C:6B:5D:05:E1:CE:5B:58:1B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA4262C73E9C3CBDF611C6B5D05E1CE5B581BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/1/34352e3138392e39382e302f32332d3233203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:6c:07:89:35:29:8d:c6:0d:c0:66:20:7f:cd:44:82:49:bb:
         8d:cf:36:8f:5e:01:69:65:6f:dd:5f:7b:87:87:a9:77:ad:c1:
         cd:3f:cd:21:00:6c:89:ba:96:f6:f4:df:7d:a4:94:fb:b1:06:
         5b:a6:16:a6:36:4d:58:38:15:aa:91:8d:36:ce:ae:6a:e5:43:
         b9:87:97:1e:f5:df:69:43:79:f0:d4:a0:db:dd:49:04:94:02:
         3e:1c:de:b5:78:66:03:cf:5b:ed:af:62:d4:98:74:e4:30:51:
         f2:ba:3e:2f:2a:40:ee:42:ee:b0:00:b6:fe:bc:b2:46:e5:8a:
         79:90:8a:fb:93:84:ca:8d:35:ef:e4:29:bc:de:64:4e:85:3f:
         e5:b9:8f:20:04:f9:0c:93:eb:0a:3f:ad:da:da:12:87:a8:44:
         42:1b:9f:cb:83:2c:6d:71:cc:fd:3a:e6:7a:aa:ac:ff:82:98:
         ea:f6:94:6d:0f:2c:84:06:1e:15:16:fc:86:5a:73:2a:3e:f8:
         6b:e0:77:ea:1a:71:3b:08:3a:d6:5c:73:56:f7:9d:37:33:67:
         7c:7f:24:5c:bf:9c:2b:0d:c3:21:93:ec:cf:35:d5:47:41:a4:
         50:5c:24:b7:ff:32:16:ff:f9:00:7f:e5:67:70:59:87:cd:af:
         7f:13:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org