Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/34352e3136312e39342e302f32332d3233203d3e203532363137.roa
File:                     34352e3136312e39342e302f32332d3233203d3e203532363137.roa (raw, json)
Hash identifier:          G9HJHqXHs8fw9GqIUiJ6ktEBnk8BQzpfMdlx49FK4Fk=
Subject key identifier:   AA:5D:DB:9A:6A:20:A7:7B:9B:44:33:FB:95:EB:28:8C:9D:DF:75:C3
Certificate issuer:       /CN=713B957336855F584C130E6F0AF402476B26B912
Certificate serial:       28516B79DB15D6B1CCB21601423A82A187550A9E
Authority key identifier: 71:3B:95:73:36:85:5F:58:4C:13:0E:6F:0A:F4:02:47:6B:26:B9:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/713B957336855F584C130E6F0AF402476B26B912.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/34352e3136312e39342e302f32332d3233203d3e203532363137.roa
Signing time:             Tue 06 Dec 2022 15:19:13 +0000
ROA not before:           Tue 06 Dec 2022 15:14:13 +0000
ROA not after:            Tue 05 Dec 2023 15:19:13 +0000
asID:                     52617
IP address blocks:        45.161.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:51:6b:79:db:15:d6:b1:cc:b2:16:01:42:3a:82:a1:87:55:0a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713B957336855F584C130E6F0AF402476B26B912
        Validity
            Not Before: Dec  6 15:14:13 2022 GMT
            Not After : Dec  5 15:19:13 2023 GMT
        Subject: CN=AA5DDB9A6A20A77B9B4433FB95EB288C9DDF75C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:6b:da:b4:69:eb:42:5c:bf:a8:81:29:ee:
                    02:fe:f8:e7:d6:1b:f8:49:61:3f:6a:32:15:34:39:
                    42:ee:c0:db:6a:2f:da:2d:91:16:9a:9e:3b:4f:8e:
                    a3:fc:9a:9e:81:02:1f:8b:e4:47:63:75:7e:67:b7:
                    b3:b2:0e:0d:9c:3a:57:22:6b:c8:73:5c:59:f7:04:
                    17:86:4d:3f:f0:cc:77:36:32:0b:42:8c:d8:9d:51:
                    54:9f:8d:ae:32:81:e8:55:dc:f0:cf:c3:48:69:fb:
                    63:1c:6f:8c:e2:1c:78:fd:db:16:19:bf:33:20:19:
                    5d:38:09:bf:fa:36:a3:25:35:0d:6a:a3:a2:56:78:
                    9a:b3:97:a1:c3:53:4b:62:a1:fe:3a:87:ba:2e:7e:
                    6d:5c:a1:98:91:9c:f2:0c:38:d8:b0:d6:b1:64:dd:
                    10:34:b7:98:30:a2:ff:70:06:2e:43:3a:07:cb:01:
                    1e:e3:8e:5b:84:ba:8d:e5:83:64:17:ed:e5:1d:c0:
                    9e:ed:70:29:b3:b8:35:d6:2c:98:86:59:a4:f7:e3:
                    5b:33:26:d8:7d:35:a0:ef:0c:80:b8:e9:3a:01:35:
                    76:6c:fd:85:e5:32:5d:56:26:f3:ff:49:0a:c5:16:
                    7e:ac:7b:5e:a3:48:85:97:72:55:e4:e9:99:32:34:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5D:DB:9A:6A:20:A7:7B:9B:44:33:FB:95:EB:28:8C:9D:DF:75:C3
            X509v3 Authority Key Identifier:
                keyid:71:3B:95:73:36:85:5F:58:4C:13:0E:6F:0A:F4:02:47:6B:26:B9:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/713B957336855F584C130E6F0AF402476B26B912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/713B957336855F584C130E6F0AF402476B26B912.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/34352e3136312e39342e302f32332d3233203d3e203532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:1c:90:8c:5e:14:e2:5b:4c:8c:26:c7:c2:5f:fd:eb:04:
         1d:b0:d0:b0:35:7b:e0:3e:d4:f5:1f:10:67:8f:db:04:89:38:
         f8:23:9f:ff:f1:72:9a:ed:05:06:48:6d:f0:28:78:e0:1e:04:
         d0:64:7d:b6:7c:65:a0:38:72:10:58:b4:57:88:6c:47:12:7f:
         9e:e7:37:c3:18:e6:3d:f5:a7:ca:97:79:06:c0:57:b0:00:08:
         b1:61:00:d2:74:a1:9e:32:50:4b:4a:17:9a:23:df:01:fe:21:
         da:ed:f9:0f:d3:25:1e:da:3d:f4:96:cc:aa:d8:cb:bc:89:8d:
         df:3d:ea:b9:7e:b3:d4:2f:d0:c5:97:3e:ac:44:ff:e0:93:35:
         83:47:32:37:98:8e:0a:8f:d5:a2:de:7d:f1:b6:66:03:0a:24:
         2f:4c:3c:c2:fb:61:fc:2c:73:60:61:b0:69:92:9b:2e:7c:16:
         9a:9c:5a:74:cd:e1:d5:52:1c:fe:c9:20:a5:54:f5:b1:9c:2e:
         dc:48:b7:ca:0c:76:63:d8:75:36:82:3b:a3:9c:e2:2e:68:a5:
         5b:04:7a:76:38:99:f3:fa:e9:46:57:8f:8d:b3:40:e5:2c:ed:
         3e:82:d7:88:3b:17:d6:0c:1d:df:30:56:8c:52:30:00:dc:9a:
         24:d9:fa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:34 2023 by rpki-client on console.sobornost.net