Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/3137392e302e37302e302f32342d3234203d3e20323635323037.roa
File:                     3137392e302e37302e302f32342d3234203d3e20323635323037.roa (raw, json)
Hash identifier:          7gboan2UMkU6Y/rsvvTz9MRpMZmWOwT1TD0P0OBYoKc=
Subject key identifier:   19:98:05:CB:9A:56:A0:D7:EE:9B:BB:79:65:34:36:FC:04:CD:51:D5
Certificate issuer:       /CN=61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B
Certificate serial:       35EEEE9D0C54861455064833246E7C97180021D3
Authority key identifier: 61:E4:6A:B8:6B:31:64:E8:2D:DF:72:DD:CF:60:7F:FC:C4:FA:C2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/3137392e302e37302e302f32342d3234203d3e20323635323037.roa
Signing time:             Fri 30 Jun 2023 13:07:35 +0000
ROA not before:           Fri 30 Jun 2023 13:02:35 +0000
ROA not after:            Fri 28 Jun 2024 13:07:35 +0000
asID:                     265207
IP address blocks:        179.0.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ee:ee:9d:0c:54:86:14:55:06:48:33:24:6e:7c:97:18:00:21:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B
        Validity
            Not Before: Jun 30 13:02:35 2023 GMT
            Not After : Jun 28 13:07:35 2024 GMT
        Subject: CN=199805CB9A56A0D7EE9BBB79653436FC04CD51D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:c7:e3:6b:10:f6:dd:79:39:42:20:53:2c:
                    a3:49:69:5a:9f:3f:2b:24:a0:bd:15:d0:c2:b3:2c:
                    83:45:dc:25:47:e4:63:b9:ba:24:3c:66:bb:13:5c:
                    37:99:71:dc:40:40:37:5a:93:aa:4a:08:d0:54:8d:
                    cc:58:f2:bc:74:b7:f3:27:c1:6b:46:c5:f3:5a:29:
                    d8:31:8a:e1:71:3b:e8:78:22:8b:14:66:63:ce:ef:
                    79:9a:04:1f:08:01:60:ba:0e:1c:97:8b:58:69:c4:
                    23:fe:75:83:f3:39:86:a4:53:28:b1:58:a5:06:d8:
                    b1:82:11:45:43:01:1d:7a:dd:ca:95:87:6e:5c:46:
                    3b:a2:55:b7:94:d2:43:f2:76:cf:a2:80:7b:f9:57:
                    16:9c:ca:7e:26:74:2a:e0:18:4c:72:2b:aa:fd:db:
                    56:a9:88:39:d5:ae:d8:1c:17:15:d4:9f:ea:9e:f2:
                    45:3c:db:a7:18:5a:fd:a0:78:ea:f6:5a:98:03:fd:
                    43:18:92:a3:a9:90:ee:a4:cf:34:67:e3:70:b9:f2:
                    17:9d:1a:6a:50:8c:df:77:2a:77:f5:0f:d5:30:d7:
                    cc:b2:a6:14:04:8a:9e:81:06:88:38:44:64:eb:ef:
                    e7:16:40:e1:83:2e:df:0d:d6:e6:ab:ac:bf:53:44:
                    f8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:98:05:CB:9A:56:A0:D7:EE:9B:BB:79:65:34:36:FC:04:CD:51:D5
            X509v3 Authority Key Identifier:
                keyid:61:E4:6A:B8:6B:31:64:E8:2D:DF:72:DD:CF:60:7F:FC:C4:FA:C2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/3137392e302e37302e302f32342d3234203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:17:86:c6:f2:9b:6e:3a:37:39:85:84:05:01:c0:05:b1:d3:
         74:48:bd:6d:6d:a9:99:75:92:00:36:2b:56:63:01:9b:f2:ef:
         dc:eb:be:bb:0e:d5:8a:05:b3:88:13:6c:5e:5c:1f:6c:49:4d:
         88:77:fb:f4:e2:4b:d7:34:ce:be:41:6a:b7:fa:26:ed:a7:b3:
         85:35:56:09:bb:83:3d:57:09:42:bd:ab:47:52:ca:18:bc:cb:
         90:fd:2a:70:ac:ae:3f:f5:f4:9f:95:5d:8c:8f:f1:69:84:81:
         fc:b6:56:53:2d:05:9f:96:9d:f2:a2:6b:b4:5e:7c:5f:bc:8b:
         5d:79:85:82:a0:45:54:67:01:fc:b8:35:c4:2d:79:d0:a3:2d:
         77:9c:4a:ba:43:2d:28:e5:d5:70:24:a2:7a:65:fc:1f:7d:0e:
         65:c3:4c:1c:4f:8b:4c:b4:6f:5b:c6:f2:35:c2:71:a0:2e:cf:
         ea:62:20:2c:3f:a5:8f:81:99:50:5a:88:8f:86:60:76:4f:d0:
         d9:d2:a1:e0:c6:ba:1a:c7:a0:21:b5:ce:9e:ea:18:3c:cb:c5:
         05:d9:2a:ea:fd:96:09:8a:cd:a2:22:08:b8:dd:e6:ba:7d:35:
         f7:91:52:c8:c7:9e:a7:e3:e0:53:00:a6:c5:31:be:c2:d2:b4:
         30:9a:fa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org