Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39382e302f32332d3233203d3e203631373438.roa
File:                     3137302e3234352e39382e302f32332d3233203d3e203631373438.roa (raw, json)
Hash identifier:          M8fQBvWR+YAJWfs9mSawleWvVE3NnfErUr+qN5gkLI4=
Subject key identifier:   19:CE:1A:E3:E7:94:A5:A2:31:AD:0C:53:84:AC:26:1C:BE:4E:6D:88
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       329D6CAAE500A8D9291E084AC5E353B727F96443
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39382e302f32332d3233203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:20:09 +0000
ROA not before:           Wed 10 Apr 2024 19:15:09 +0000
ROA not after:            Wed 09 Apr 2025 19:20:09 +0000
asID:                     61748
IP address blocks:        170.245.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9d:6c:aa:e5:00:a8:d9:29:1e:08:4a:c5:e3:53:b7:27:f9:64:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:15:09 2024 GMT
            Not After : Apr  9 19:20:09 2025 GMT
        Subject: CN=19CE1AE3E794A5A231AD0C5384AC261CBE4E6D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dc:e2:81:1a:bb:5d:7c:42:b6:58:02:4f:72:
                    96:ce:2b:94:82:b4:d1:ca:df:56:66:cc:d6:d3:10:
                    ad:fe:af:60:02:46:37:98:e2:e8:0e:54:05:4c:8d:
                    a7:c3:2c:39:df:6a:01:ec:54:a2:69:da:cf:99:36:
                    2d:b1:b2:e5:a7:e3:f1:09:0b:71:8b:e8:a5:05:5f:
                    6d:e4:4e:5f:39:53:2d:7e:a3:09:3e:89:56:46:79:
                    6c:eb:51:cd:72:79:1e:7e:77:a1:1f:72:fa:c0:7a:
                    cf:03:6e:2f:a0:e6:9c:b7:7d:6b:9f:c9:b0:1b:9c:
                    2e:c6:23:a4:32:0e:e9:e0:3f:7d:f9:23:70:fb:c1:
                    ea:a3:f7:11:b1:dc:3e:0d:90:17:af:a3:05:6a:b6:
                    7f:85:fd:38:a0:f8:b9:47:a6:85:78:3f:33:15:6c:
                    1b:c6:db:a1:5c:77:aa:d2:f9:95:24:7a:71:1f:85:
                    e6:40:c0:bf:d8:3f:57:7a:35:8f:c8:12:58:09:7a:
                    ab:78:c5:4d:51:1a:c0:b5:08:33:23:61:4f:1b:42:
                    3f:41:ed:d1:9c:56:b9:25:07:9e:87:d1:e2:f6:9d:
                    a5:fe:d0:45:c4:e8:12:ca:ea:6f:78:e0:d1:fb:3b:
                    5c:bc:44:42:12:48:39:fd:f1:de:b7:46:a4:c1:19:
                    6f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CE:1A:E3:E7:94:A5:A2:31:AD:0C:53:84:AC:26:1C:BE:4E:6D:88
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39382e302f32332d3233203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:15:61:4f:8b:51:bf:7f:0b:9e:94:30:75:35:9c:2b:8d:39:
         ca:9a:04:23:d6:44:3a:f2:e5:85:f6:09:d8:f8:fe:c5:da:94:
         78:19:ca:d2:b6:5a:51:30:1d:12:3f:c5:8b:d7:1f:bf:6f:38:
         6a:20:48:bb:f4:21:f1:f1:78:e2:2c:1a:4f:d7:16:7b:28:22:
         ff:3c:12:bc:46:14:46:58:0a:b0:2d:05:4f:16:56:9d:49:4f:
         d2:28:fd:04:ed:d4:0b:bf:f8:9b:9f:12:a7:a4:55:df:10:60:
         ff:8a:86:5c:9a:af:d6:6b:27:db:25:d2:77:cb:96:4d:30:c7:
         be:46:ad:5d:f4:e3:af:94:b7:19:f3:07:10:8c:62:16:81:0c:
         b9:ac:d7:f4:37:49:2d:94:1c:c7:90:ec:9a:03:de:73:81:8d:
         1e:cb:9a:bc:72:17:0f:8d:c5:a5:86:2e:df:b9:ad:83:a1:88:
         87:f7:58:b5:c3:79:97:9b:50:33:66:86:7b:9b:86:86:0e:86:
         90:55:c7:8c:34:19:f8:3a:e4:84:38:17:23:b9:4a:6c:72:10:
         9d:4d:bc:42:8a:e2:58:06:06:42:26:e3:b7:62:2b:5f:42:6f:
         f3:23:7e:40:8a:45:0c:7c:6e:8a:c9:c4:67:d5:1d:e2:0c:71:
         d9:d6:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org