Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36322e302f32332d3233203d3e203631363133.roa
File:                     34352e3137312e36322e302f32332d3233203d3e203631363133.roa (raw, json)
Hash identifier:          aBGPQ2ogBP1wL51b/jv6zs1xjHiFhEgbASBWrTPQ7RY=
Subject key identifier:   57:BB:8F:CF:7D:B6:31:3C:93:AB:85:9E:D4:08:0E:92:89:56:AE:77
Certificate issuer:       /CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
Certificate serial:       057062D2570C4FEBFD3F0F16D56F06F8ECB39465
Authority key identifier: 98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36322e302f32332d3233203d3e203631363133.roa
Signing time:             Fri 05 May 2023 18:43:53 +0000
ROA not before:           Fri 05 May 2023 18:38:53 +0000
ROA not after:            Fri 03 May 2024 18:43:53 +0000
asID:                     61613
IP address blocks:        45.171.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:70:62:d2:57:0c:4f:eb:fd:3f:0f:16:d5:6f:06:f8:ec:b3:94:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
        Validity
            Not Before: May  5 18:38:53 2023 GMT
            Not After : May  3 18:43:53 2024 GMT
        Subject: CN=57BB8FCF7DB6313C93AB859ED4080E928956AE77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:39:fe:f9:ea:cf:3b:79:9b:e7:23:dd:c4:
                    26:55:c5:a1:d5:27:66:ab:4b:80:07:42:58:2b:43:
                    33:72:7c:2d:3a:50:d0:3f:ae:d9:7b:90:a4:d3:59:
                    b1:e4:ea:4f:01:54:23:dc:a7:f2:73:78:11:33:64:
                    e6:51:1a:31:a1:8b:27:4e:3d:7f:9f:ed:43:4f:6a:
                    54:1a:81:c7:f2:86:5b:16:5b:37:0c:91:f0:c6:1b:
                    ec:16:de:0e:ad:13:46:5b:98:5b:a8:6c:59:33:dd:
                    91:3e:c1:5c:bb:ee:88:50:23:e3:5a:b0:64:f3:14:
                    29:84:2a:27:2d:bf:4e:9b:c7:78:cb:43:b2:20:01:
                    e3:b1:51:cc:66:a4:43:7a:c7:19:95:58:2a:e5:8d:
                    d2:36:40:42:92:ce:ac:8a:bd:2f:ee:81:15:6e:f3:
                    16:7f:ba:bf:42:c0:d9:48:2f:2a:5e:91:ad:39:1e:
                    b4:64:9d:3f:63:29:31:9f:3f:b1:ed:5b:89:fb:04:
                    36:b9:e3:4d:7c:6d:b9:9d:9b:e5:25:5b:54:15:c7:
                    7c:28:5b:96:83:70:4d:d6:b4:b8:ff:26:e7:e2:99:
                    7f:7d:f0:11:cc:9e:14:fd:39:68:cd:85:d3:59:c1:
                    5c:0f:7b:a6:87:3c:e8:77:fe:0e:66:85:61:f1:aa:
                    3b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BB:8F:CF:7D:B6:31:3C:93:AB:85:9E:D4:08:0E:92:89:56:AE:77
            X509v3 Authority Key Identifier:
                keyid:98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36322e302f32332d3233203d3e203631363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:61:76:03:a6:f0:04:ec:2d:e7:98:ff:d0:8a:fb:d9:c8:9b:
         04:8c:67:6e:53:2b:dc:6b:27:5a:4d:bb:09:b5:70:fd:d4:a8:
         e2:1a:f0:5a:75:c2:de:26:01:2a:d8:c4:ee:bc:74:f6:9f:d1:
         da:91:66:1c:41:7d:a4:39:15:60:b7:b6:3e:ae:20:ae:ac:ec:
         91:66:1a:f5:d8:59:e0:6c:ca:93:04:0b:89:e9:ba:bb:ee:55:
         9b:9f:6e:f3:42:10:56:14:78:0f:0a:cc:30:df:f1:0c:5a:0b:
         e5:83:f1:41:52:bd:21:37:b1:af:16:5f:1b:1e:05:bc:ae:23:
         e7:ff:1a:53:db:c7:de:62:f0:f5:a5:08:28:47:4e:3d:03:3e:
         c8:96:bc:85:22:6c:0d:b0:02:f1:e9:3f:86:c7:54:5d:ae:e4:
         82:46:15:e5:f7:9a:cf:db:ff:4c:79:36:1a:7b:87:f0:3b:db:
         48:3c:ea:f2:a9:9e:3f:e0:7b:0b:63:9b:7a:bb:83:b7:35:1b:
         2b:a4:cf:f0:ba:4a:75:cf:6d:37:5e:ae:23:69:ce:d1:81:3b:
         75:1d:e9:74:8d:81:2e:9f:35:94:ef:23:4b:6b:2e:c8:f4:9e:
         9e:07:7f:5a:2e:c3:99:d2:9d:fa:8f:e2:e5:2e:4e:5a:c9:89:
         48:de:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org