Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32332d3233203d3e203631363133.roa
File:                     34352e3137312e36302e302f32332d3233203d3e203631363133.roa (raw, json)
Hash identifier:          6Ot3qoyvJTYSL0j8uv4V3qpzoLFYzZq8LQeeqTk/fsA=
Subject key identifier:   AA:01:33:2C:D1:73:EE:90:CC:FD:1D:B6:86:75:7E:C5:99:5A:33:F7
Certificate issuer:       /CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
Certificate serial:       5A7BEB6578F69198131DFAD62883406C47630D5F
Authority key identifier: 98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32332d3233203d3e203631363133.roa
Signing time:             Fri 05 May 2023 18:43:46 +0000
ROA not before:           Fri 05 May 2023 18:38:46 +0000
ROA not after:            Fri 03 May 2024 18:43:46 +0000
asID:                     61613
IP address blocks:        45.171.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7b:eb:65:78:f6:91:98:13:1d:fa:d6:28:83:40:6c:47:63:0d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
        Validity
            Not Before: May  5 18:38:46 2023 GMT
            Not After : May  3 18:43:46 2024 GMT
        Subject: CN=AA01332CD173EE90CCFD1DB686757EC5995A33F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:8f:2d:24:56:6a:05:33:94:34:1a:fa:e0:
                    8a:a5:41:30:f3:60:61:d6:38:be:08:c0:06:9e:40:
                    77:03:b9:78:84:c7:86:da:ef:c6:14:d5:f3:c2:e5:
                    a7:4e:d9:ce:d4:c2:35:4f:3a:22:3e:cc:78:57:73:
                    5b:77:5a:40:23:90:5f:e6:10:d9:e4:65:ae:48:cd:
                    b2:7d:3f:9c:fb:12:a4:21:9d:eb:08:bf:a1:ad:05:
                    ff:03:a4:12:d1:74:8e:dd:41:0d:2c:9c:e3:6c:bd:
                    a5:bf:cd:c1:92:10:f6:6a:31:5e:76:eb:18:49:20:
                    75:ea:48:6d:ec:10:05:68:b7:42:00:09:3e:eb:91:
                    f1:e4:aa:ec:d9:0f:d2:f4:c7:32:f4:fc:d5:2d:91:
                    7a:09:b6:f5:05:62:17:56:3f:00:64:34:05:86:f7:
                    88:9f:8e:77:f1:d8:fc:d9:5c:1d:37:c3:52:55:4a:
                    7b:f0:87:70:a1:e9:1c:bc:b2:4e:30:cd:2f:dc:49:
                    31:94:3a:e0:92:44:8b:b1:6b:4d:61:ca:02:86:4e:
                    0c:5f:bc:a2:5c:32:cc:92:c3:65:fd:7e:9d:20:80:
                    e1:36:eb:90:d4:e7:49:65:39:da:29:9d:cc:67:b5:
                    75:b3:a1:62:bb:fd:4c:2b:60:34:63:68:0d:ad:ab:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:01:33:2C:D1:73:EE:90:CC:FD:1D:B6:86:75:7E:C5:99:5A:33:F7
            X509v3 Authority Key Identifier:
                keyid:98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32332d3233203d3e203631363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:10:cb:b8:40:4e:7b:5c:da:e9:8e:9a:56:c4:54:cf:03:10:
         f4:1d:d9:db:d0:cb:a6:87:00:25:b1:55:0d:ef:13:ca:98:75:
         80:4e:83:eb:7a:dc:09:bb:9f:b8:41:8f:a4:de:5c:ee:02:f7:
         0e:4b:45:d8:f5:c6:d3:a9:aa:cb:c5:ea:d5:98:bf:b9:18:11:
         40:a6:77:21:88:43:f4:96:10:62:12:89:a2:75:b6:37:e1:66:
         aa:e4:b0:54:43:6b:41:b4:de:4e:eb:84:55:ea:de:bb:ce:a1:
         f8:5a:2a:6e:11:79:0d:43:78:c1:1f:10:a0:6d:f6:c2:32:69:
         ea:e6:7d:4a:42:75:00:22:b4:71:10:98:e6:57:e3:4d:a4:38:
         17:a4:f5:a0:d8:62:65:64:68:eb:9e:e0:67:53:5f:7f:93:a4:
         21:05:ab:e2:49:6d:07:01:13:ba:a9:67:2d:8b:7b:50:2f:5a:
         15:79:6b:6a:21:46:10:40:e1:c0:65:00:fe:1c:e3:af:75:4b:
         7c:c8:8c:9a:a3:f0:e5:da:b0:4b:a2:3d:fd:70:ed:68:14:0b:
         32:3d:aa:18:d4:c3:af:05:5d:4a:25:98:35:f9:0b:4c:11:e3:
         18:ba:a2:71:0c:ff:f7:e9:f7:ea:54:04:96:4e:6e:29:6d:85:
         d7:ed:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org