Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36322e302f32342d3234203d3e203631363133.roa
File:                     34352e3137312e36322e302f32342d3234203d3e203631363133.roa (raw, json)
Hash identifier:          bmTREkhrRMnutP5nM4fp74vJXLvZ2cKhid4954USA4M=
Subject key identifier:   D8:1D:7B:A6:6A:5B:26:AD:2A:05:77:1A:D8:FC:64:12:27:13:A2:C4
Certificate issuer:       /CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
Certificate serial:       722C861A2E87FAFF90A738AEA6A170AD1A5D9B6A
Authority key identifier: 98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36322e302f32342d3234203d3e203631363133.roa
Signing time:             Fri 05 May 2023 18:44:21 +0000
ROA not before:           Fri 05 May 2023 18:39:21 +0000
ROA not after:            Fri 03 May 2024 18:44:21 +0000
asID:                     61613
IP address blocks:        45.171.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2c:86:1a:2e:87:fa:ff:90:a7:38:ae:a6:a1:70:ad:1a:5d:9b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
        Validity
            Not Before: May  5 18:39:21 2023 GMT
            Not After : May  3 18:44:21 2024 GMT
        Subject: CN=D81D7BA66A5B26AD2A05771AD8FC64122713A2C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:18:7b:7e:3f:50:44:3f:71:93:81:95:30:
                    f6:c6:65:3b:2b:ee:3e:76:12:ea:c5:7e:a0:e0:ee:
                    da:ab:f1:90:d5:06:4f:f3:79:4a:a1:81:8a:98:c3:
                    f3:7d:67:61:ba:d6:85:a8:9b:a7:49:bf:34:13:17:
                    5e:44:f7:b9:86:10:2b:3b:71:79:52:9b:80:6f:28:
                    c4:f1:bb:8e:25:b9:be:5e:44:80:19:99:59:42:f0:
                    8d:12:cd:71:ed:49:c9:6e:be:a2:00:6a:a8:e0:55:
                    f1:4d:f7:44:f6:30:97:26:5d:bd:b7:f7:9a:f6:e6:
                    8e:76:37:f7:7e:da:37:2f:54:12:70:5a:5c:62:e7:
                    c9:4d:43:45:98:c8:12:6a:65:29:f4:77:b7:5f:91:
                    24:6b:d0:bf:1f:cf:58:b3:0f:35:a8:aa:94:7d:f3:
                    06:8d:c5:74:ef:66:12:a2:e4:c3:ea:e7:e5:39:64:
                    28:2f:5e:83:4c:54:ab:4b:2d:1f:42:8d:1f:68:d7:
                    ef:87:28:dc:a5:40:8a:d1:33:34:98:cd:f8:e5:b8:
                    23:07:0f:5f:23:fd:64:29:a1:33:e3:70:5f:53:31:
                    b9:e0:a5:13:ed:c4:75:f5:09:4b:a1:76:f9:94:ed:
                    ec:0c:87:2a:59:c0:ff:28:75:42:80:69:fb:e5:ea:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1D:7B:A6:6A:5B:26:AD:2A:05:77:1A:D8:FC:64:12:27:13:A2:C4
            X509v3 Authority Key Identifier:
                keyid:98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36322e302f32342d3234203d3e203631363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f7:3c:7c:cc:5d:71:f0:01:ac:b0:48:24:b1:cd:aa:e4:14:
         50:66:1f:ff:d3:92:d5:bf:99:c7:fb:64:06:0c:ea:10:76:81:
         26:1c:5f:7c:86:a1:22:e9:8d:ac:5b:c4:00:50:05:d2:2e:ac:
         8b:a7:7d:35:61:3e:44:2d:d9:ff:5e:b8:fa:2b:73:be:63:19:
         51:9a:1c:93:3c:65:08:be:3c:24:f5:b5:92:4d:b4:7e:dc:48:
         41:60:eb:4f:3d:9c:3e:9a:4d:e2:bf:66:79:97:78:38:91:71:
         c1:47:b2:30:cb:7e:9d:84:c6:8c:a8:a7:27:5d:bb:14:48:e7:
         f2:24:88:54:83:32:32:28:3c:fe:27:db:fc:d2:e9:3b:4b:8f:
         17:91:c9:0f:75:5d:0e:93:96:cb:dc:61:e6:b0:24:4d:1e:82:
         f6:2d:ec:46:0e:2f:0b:f2:81:21:71:67:97:08:ad:a3:52:38:
         fd:23:7d:4e:4c:17:95:ee:1c:03:28:d9:4e:4e:c6:33:13:5f:
         c5:b4:21:d1:10:de:fa:cb:26:81:d3:c3:3c:d9:ac:0e:6d:db:
         9e:a1:1f:ed:49:dd:6e:3d:1e:86:71:47:11:96:59:8d:b3:01:
         1b:d5:ec:66:39:27:0f:af:54:28:82:8f:ff:45:71:dc:2a:fd:
         f8:fc:27:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org