Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/34352e37312e34382e302f32322d3332203d3e203631353836.roa
File:                     34352e37312e34382e302f32322d3332203d3e203631353836.roa (raw, json)
Hash identifier:          Np0uMw+s8tnLNyMLLorHZEIT3rgRRwYLjrHqAZGqTqM=
Subject key identifier:   1B:86:9E:AB:AE:65:76:16:6D:C7:D9:42:49:84:6F:87:E7:EF:34:A1
Certificate issuer:       /CN=D0590692F7D6B1EE39B74477FF54E33A9668696D
Certificate serial:       05F18F1D063992F7AA5CA50ABC53A9FC5DA4A7EB
Authority key identifier: D0:59:06:92:F7:D6:B1:EE:39:B7:44:77:FF:54:E3:3A:96:68:69:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0590692F7D6B1EE39B74477FF54E33A9668696D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/34352e37312e34382e302f32322d3332203d3e203631353836.roa
Signing time:             Thu 24 Aug 2023 18:16:13 +0000
ROA not before:           Thu 24 Aug 2023 18:11:13 +0000
ROA not after:            Thu 22 Aug 2024 18:16:13 +0000
asID:                     61586
IP address blocks:        45.71.48.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f1:8f:1d:06:39:92:f7:aa:5c:a5:0a:bc:53:a9:fc:5d:a4:a7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0590692F7D6B1EE39B74477FF54E33A9668696D
        Validity
            Not Before: Aug 24 18:11:13 2023 GMT
            Not After : Aug 22 18:16:13 2024 GMT
        Subject: CN=1B869EABAE6576166DC7D94249846F87E7EF34A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:13:ff:ff:ce:b2:34:c7:b0:76:14:08:d5:
                    29:d0:2e:26:6c:ee:b6:47:4a:e0:11:17:e9:fe:d9:
                    4a:d3:07:53:48:e6:fb:ad:75:df:a5:78:52:94:c7:
                    aa:1e:5e:6a:03:40:eb:53:d7:86:a3:c4:82:e9:39:
                    82:4b:6e:43:7f:b2:10:17:ea:59:a0:3c:db:24:37:
                    00:81:81:97:d0:8c:7b:e2:17:75:d7:0d:ba:87:93:
                    f0:a0:05:5c:47:51:27:99:6d:a1:86:23:ee:c9:16:
                    73:10:b3:51:e8:79:43:d7:51:a9:78:15:2a:74:dd:
                    f5:8c:1e:0e:6b:97:c9:bf:e9:a6:9f:2b:1c:53:a1:
                    b0:70:4d:6e:83:80:84:9e:c8:af:61:3a:dd:55:32:
                    72:ca:8d:7d:b3:44:93:86:d7:31:b9:36:bb:51:cb:
                    b2:e0:d2:e1:d5:92:df:94:f8:48:3c:65:a2:03:69:
                    40:a1:84:bb:26:7e:84:d0:e6:6f:fb:f3:a7:b3:36:
                    0a:2a:d5:13:a6:4d:59:01:86:78:40:6c:f8:e4:6e:
                    24:d0:5d:ff:6d:44:ad:85:77:62:56:15:5d:71:71:
                    63:96:29:9f:a2:5e:b7:d2:26:77:76:9a:f3:11:86:
                    19:73:31:2d:69:9a:16:4c:a8:3a:38:ec:f3:74:6a:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:86:9E:AB:AE:65:76:16:6D:C7:D9:42:49:84:6F:87:E7:EF:34:A1
            X509v3 Authority Key Identifier:
                keyid:D0:59:06:92:F7:D6:B1:EE:39:B7:44:77:FF:54:E3:3A:96:68:69:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/D0590692F7D6B1EE39B74477FF54E33A9668696D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0590692F7D6B1EE39B74477FF54E33A9668696D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/34352e37312e34382e302f32322d3332203d3e203631353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:80:21:af:3d:b0:9e:d9:13:f7:39:19:53:8e:ae:2b:7e:2d:
         9e:ac:c2:56:c1:b7:5e:1a:80:4d:a0:53:e4:46:b2:02:ff:d0:
         04:10:dd:34:15:ee:47:7b:15:5d:f1:7f:c3:ab:93:83:2a:79:
         55:0d:9c:2e:44:ec:04:86:02:f9:62:45:9d:40:8e:b1:f4:a3:
         58:67:2e:8b:8d:6b:fc:64:ec:7d:2f:07:ed:0a:c3:54:05:f5:
         e9:2d:cf:bf:79:1c:aa:56:03:a4:df:80:57:2b:dd:11:d8:f5:
         5e:99:f6:62:5d:2e:00:5f:69:11:ad:33:ed:db:36:1f:13:f3:
         d7:e3:f8:4d:15:77:57:c4:c4:4b:fe:10:24:70:f3:73:96:29:
         02:a1:af:8d:76:70:34:17:75:96:5d:c9:88:d5:9d:de:67:04:
         35:da:b1:76:3b:e0:97:4c:30:7c:63:c6:0b:c5:57:56:a3:6a:
         88:b9:26:09:f9:ef:b0:fa:18:bd:7a:02:20:6d:ed:f1:03:f6:
         67:ff:65:98:6c:f4:6b:38:b8:2a:cc:aa:1f:c4:2e:c1:48:53:
         ef:37:11:27:85:2d:dc:30:aa:a6:cc:44:6a:9f:7d:e7:95:81:
         50:46:f1:b2:6a:e6:e0:55:d4:b9:53:22:82:a4:f1:34:c5:88:
         1e:37:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org