Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36332e302f32342d3234203d3e203631363133.roa
File:                     34352e3137312e36332e302f32342d3234203d3e203631363133.roa (raw, json)
Hash identifier:          lsSFFPRzrDLGhrA/w/VEZ9H8JX73L83YaUd3Y3yxowQ=
Subject key identifier:   21:68:F6:B5:89:33:B5:D0:1B:BA:06:91:DD:8A:CB:3F:3D:9D:FE:D9
Certificate issuer:       /CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
Certificate serial:       420F7DD9733D40E663CFA890861F6B1D2542099F
Authority key identifier: 98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36332e302f32342d3234203d3e203631363133.roa
Signing time:             Fri 05 May 2023 18:44:41 +0000
ROA not before:           Fri 05 May 2023 18:39:41 +0000
ROA not after:            Fri 03 May 2024 18:44:41 +0000
asID:                     61613
IP address blocks:        45.171.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0f:7d:d9:73:3d:40:e6:63:cf:a8:90:86:1f:6b:1d:25:42:09:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
        Validity
            Not Before: May  5 18:39:41 2023 GMT
            Not After : May  3 18:44:41 2024 GMT
        Subject: CN=2168F6B58933B5D01BBA0691DD8ACB3F3D9DFED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4d:49:96:f6:b6:e9:f4:1d:b1:83:af:e2:02:
                    74:1a:8c:9d:c2:7f:04:9c:01:db:ea:cf:b7:dd:98:
                    fb:67:51:06:f8:f4:b1:33:a1:97:21:4b:69:d5:2d:
                    99:99:b9:52:61:bd:08:e2:d2:e3:ff:4d:17:6c:87:
                    55:1c:93:ba:d0:50:33:a5:08:65:af:91:b3:b0:2e:
                    5d:f6:7e:d1:23:8c:e7:07:9b:b7:eb:6f:06:8b:8a:
                    2c:f0:64:21:ba:4e:e6:94:6b:8d:d6:8b:ba:6f:6e:
                    d5:24:23:e8:4a:74:89:45:1f:0c:98:fc:30:b3:b2:
                    97:50:94:2d:69:0c:e9:bb:43:1d:27:c2:99:8c:80:
                    38:9b:3d:bf:a7:48:a4:12:e5:87:64:dc:63:09:d2:
                    68:41:6f:c5:89:a2:ba:87:0b:ba:2e:fe:ab:24:6c:
                    ef:40:d1:b5:e0:1e:1b:82:f6:7b:7e:73:9a:4c:50:
                    d4:fa:9e:e4:fb:93:e0:39:6f:c8:a5:ae:ed:38:69:
                    76:26:c1:4f:d9:a8:c1:9a:7c:36:30:b6:61:ff:05:
                    82:16:a5:14:f1:18:77:63:f0:47:8b:5f:3b:c6:fc:
                    69:cb:c5:c3:ca:ab:89:c7:96:76:06:f6:7d:ed:95:
                    14:9d:1c:f1:e3:56:cd:d1:57:e3:82:52:84:84:67:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:68:F6:B5:89:33:B5:D0:1B:BA:06:91:DD:8A:CB:3F:3D:9D:FE:D9
            X509v3 Authority Key Identifier:
                keyid:98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36332e302f32342d3234203d3e203631363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:8c:dd:09:f1:75:70:bd:29:1b:ee:02:83:3d:84:5d:36:e9:
         93:9c:0b:46:f6:d3:44:6b:68:f5:dd:89:db:bd:3c:9c:c2:aa:
         50:da:3b:f3:c1:10:9c:4d:30:0d:2f:07:18:63:90:c4:cd:c1:
         3c:10:c0:20:d9:9f:af:d0:4c:30:f8:bd:94:97:29:c0:bf:a4:
         6b:46:27:33:97:91:77:0f:88:1a:b4:42:ee:c1:75:68:33:1e:
         eb:69:46:53:d7:aa:74:29:26:9f:c7:56:47:1b:d8:f5:8f:c3:
         72:11:4c:0c:85:b0:84:d3:11:c6:58:48:9b:ea:b5:19:ed:36:
         07:34:a1:94:88:13:21:3b:8c:51:70:58:06:c6:e2:28:10:8a:
         18:6b:7f:fb:06:78:e7:4c:03:09:97:cf:30:54:0f:65:4f:e4:
         0b:d4:d8:a1:4d:0e:ac:17:a0:de:be:d9:f7:96:01:de:5e:74:
         f6:ac:b6:7e:ce:28:1c:54:87:f0:bd:dc:cb:46:8b:45:ed:68:
         f3:46:96:f4:d0:f0:40:80:6d:cc:ac:cc:e5:33:15:83:2f:0b:
         95:31:dd:66:d4:e3:5a:72:0e:61:32:4b:83:ee:02:19:86:87:
         36:71:9b:5d:bf:d2:30:ff:89:d1:3d:72:a7:81:9d:f6:e1:49:
         0a:be:a6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org