Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36312e302f32342d3234203d3e203631363133.roa
File:                     34352e3137312e36312e302f32342d3234203d3e203631363133.roa (raw, json)
Hash identifier:          z6dt6l8yGqH/Mdg9dI3vL9wF0rO9aWDatEfYd9hcybc=
Subject key identifier:   A0:5E:82:61:6A:3D:C9:8A:8C:14:45:6C:33:08:38:73:7B:A6:8F:18
Certificate issuer:       /CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
Certificate serial:       414B3AF5782687FA989E1F4FC5C8568326AC7371
Authority key identifier: 98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36312e302f32342d3234203d3e203631363133.roa
Signing time:             Fri 05 May 2023 18:44:09 +0000
ROA not before:           Fri 05 May 2023 18:39:09 +0000
ROA not after:            Fri 03 May 2024 18:44:09 +0000
asID:                     61613
IP address blocks:        45.171.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4b:3a:f5:78:26:87:fa:98:9e:1f:4f:c5:c8:56:83:26:ac:73:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
        Validity
            Not Before: May  5 18:39:09 2023 GMT
            Not After : May  3 18:44:09 2024 GMT
        Subject: CN=A05E82616A3DC98A8C14456C330838737BA68F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:8b:c8:d8:04:4e:9c:b1:4c:bc:c0:96:9c:
                    42:f8:af:7b:fb:14:8c:3d:15:0d:bb:f1:11:6d:59:
                    dd:b6:6b:2f:a4:26:63:4e:4c:f2:93:1e:ac:c4:0c:
                    13:54:77:a1:3f:3c:93:74:30:e9:0e:2d:d0:9f:f1:
                    11:99:e7:b7:d3:bf:07:8c:a7:8b:19:d0:64:26:fd:
                    80:dd:2f:83:71:4b:88:25:c1:1d:29:34:33:4e:8a:
                    31:7b:a2:1e:66:e8:84:df:05:70:55:11:d6:d1:3b:
                    f3:b8:6f:49:3f:9b:a9:a8:ff:33:2d:0c:4c:bd:ab:
                    62:68:be:e0:01:93:7a:ae:af:49:33:7c:bc:24:62:
                    02:f6:2c:6a:92:3d:bb:bf:e6:f3:e3:f5:28:f9:24:
                    2a:b8:74:cd:f6:cc:1f:d8:1b:be:76:3a:79:8f:40:
                    49:c8:78:76:4e:cb:6b:c8:28:88:32:2f:eb:0b:54:
                    65:df:89:71:6b:1e:37:b8:e0:fa:cd:f7:0a:f0:b8:
                    e8:f7:00:8d:d3:fc:f9:9e:39:33:5b:f0:f5:46:0a:
                    cd:9f:47:fc:5c:8b:05:65:95:19:fa:b1:9c:58:44:
                    c1:1e:96:95:74:c1:04:bc:6d:5e:e1:36:2b:32:52:
                    0e:6d:75:7b:4a:59:ed:3e:43:8c:99:dc:32:df:46:
                    a4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5E:82:61:6A:3D:C9:8A:8C:14:45:6C:33:08:38:73:7B:A6:8F:18
            X509v3 Authority Key Identifier:
                keyid:98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36312e302f32342d3234203d3e203631363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:d6:57:65:d5:64:70:4e:9d:1c:e1:12:fe:fa:1a:50:75:7e:
         d4:7f:c1:0b:49:29:2d:a1:5d:c0:ba:a6:0f:7c:dd:dc:ff:cf:
         3b:3e:63:95:bf:c6:3c:ca:f6:10:79:88:0e:c8:61:ba:86:a5:
         a3:6a:4b:69:7a:0a:8f:df:70:f0:d4:2f:2f:5d:1e:60:63:48:
         90:ed:5c:83:25:9c:7e:74:df:58:b0:33:6d:1f:7c:f7:e7:f4:
         ce:cc:09:ed:64:06:22:96:d5:93:82:9f:3b:bf:8c:be:a5:50:
         2f:73:44:e9:7f:50:a4:90:10:33:e3:66:34:e4:87:12:90:46:
         58:69:2b:21:6c:4d:23:85:7e:55:ed:5b:f0:04:42:99:45:a6:
         10:86:cb:22:af:d8:3f:3e:63:9b:ee:51:46:38:58:b0:ab:e0:
         ba:a5:37:d3:a9:15:d1:fa:6d:b4:78:c4:b4:83:7f:ec:f1:e5:
         e9:17:99:43:0e:b1:d2:2a:d1:b6:97:f1:a7:ee:79:44:91:c0:
         d8:09:09:ed:b8:85:02:6f:16:16:7a:8d:b8:a4:7d:82:b8:e2:
         7a:f9:c3:48:54:7f:96:86:c2:f4:43:b0:7c:9a:2b:f5:7e:58:
         2a:ac:5b:93:87:fc:f8:41:4e:28:08:54:bb:c6:86:51:b3:e5:
         a5:5a:3a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:36 2025 by rpki-client