Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134342e302f32322d3232203d3e203631373137.roa
File:                     34352e37312e3134342e302f32322d3232203d3e203631373137.roa (raw, json)
Hash identifier:          narpVpeP/+VYBWUluFyFy3SHu1lOhdRBYuKXSyP9x3s=
Subject key identifier:   D1:FA:E5:BE:5E:CB:8B:6B:90:AA:81:4A:F5:3F:44:35:B9:92:0B:00
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       2590E66A44DBBC4A47C204316513E2EAD82AF56F
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134342e302f32322d3232203d3e203631373137.roa
Signing time:             Fri 25 Aug 2023 11:08:33 +0000
ROA not before:           Fri 25 Aug 2023 11:03:33 +0000
ROA not after:            Fri 23 Aug 2024 11:08:33 +0000
asID:                     61717
IP address blocks:        45.71.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:90:e6:6a:44:db:bc:4a:47:c2:04:31:65:13:e2:ea:d8:2a:f5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 25 11:03:33 2023 GMT
            Not After : Aug 23 11:08:33 2024 GMT
        Subject: CN=D1FAE5BE5ECB8B6B90AA814AF53F4435B9920B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:32:59:14:06:9e:9c:d7:4f:06:4e:c9:92:
                    a1:a9:cb:34:78:28:26:f3:ef:f6:09:0f:a5:23:01:
                    7a:cf:d7:d6:7b:15:0d:d6:a9:f7:1a:58:ee:1e:77:
                    31:9d:40:4d:08:62:b2:74:ad:18:a1:8e:66:cc:9b:
                    fc:73:69:4d:b5:a1:e8:7a:7a:80:d6:61:d7:bc:0e:
                    21:d8:d3:46:7d:ce:25:20:37:40:7f:1f:f0:b2:45:
                    c3:ea:1c:8c:6e:93:3f:8c:83:1e:3f:ef:3f:5e:19:
                    85:31:4a:ff:a7:c3:53:b5:83:8a:cb:31:7e:54:81:
                    3d:ae:dd:2b:1d:48:ec:94:4b:7e:49:60:03:ed:33:
                    32:f4:a7:95:ee:11:c1:6d:24:55:2b:f8:5b:2d:1c:
                    a3:eb:c7:9e:66:76:aa:a7:03:d5:02:2b:d4:9b:4a:
                    c1:89:36:8b:33:c6:33:c7:f2:a7:c8:4d:0f:f9:71:
                    06:b5:05:94:24:96:a1:86:76:5c:6b:4c:b0:c1:27:
                    6b:dd:c5:1b:1f:a3:1a:e3:82:5a:28:e5:c0:6f:72:
                    de:33:cb:7e:aa:c8:b3:07:a5:f6:9a:d7:de:0a:eb:
                    a8:c2:85:a6:c1:a1:c8:5d:7f:04:db:b7:57:37:14:
                    ea:c9:4d:4f:04:7f:9a:40:3e:e5:1c:a3:f5:b3:d6:
                    27:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FA:E5:BE:5E:CB:8B:6B:90:AA:81:4A:F5:3F:44:35:B9:92:0B:00
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134342e302f32322d3232203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:a0:d7:c9:d2:78:69:c2:04:84:cd:73:74:63:65:d9:52:fa:
         41:6c:6b:71:66:43:1e:1d:5b:21:04:c8:8e:c7:67:0d:35:5c:
         11:54:a9:8d:f9:f9:4f:3e:42:46:e8:de:e0:36:bd:61:9d:64:
         1b:2e:d3:18:5d:b4:d9:c1:a6:e7:aa:48:78:11:39:28:32:34:
         d3:a2:34:a4:ea:dd:27:03:4e:b9:1c:43:0f:33:8d:97:76:9f:
         76:9b:27:00:d4:b2:35:bb:09:2e:a2:00:a3:42:49:3e:b5:86:
         9f:7f:87:c7:df:9d:4b:6e:92:ee:1b:67:8f:58:95:4f:8c:9a:
         83:a1:ff:94:36:df:d5:34:38:a6:98:eb:af:5f:b3:b0:d5:ad:
         13:96:aa:3e:a8:d1:b5:37:ce:c4:6c:be:65:ca:3b:f1:aa:7f:
         f5:31:fd:48:35:da:20:a3:26:ad:12:01:4e:21:cf:b2:a0:0e:
         21:9b:1d:01:8b:e0:f8:71:12:9f:31:d1:4c:c8:da:e6:81:47:
         98:c3:07:ea:56:a0:cc:6b:e8:bc:ef:b5:52:4c:45:86:7c:bd:
         bb:4c:ea:26:91:ad:37:9a:ba:59:01:9c:1e:d8:a7:56:fa:9d:
         bb:41:f0:50:89:ee:62:68:2c:9a:55:31:ab:03:5e:a4:82:e1:
         15:7d:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org