Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134342e302f32342d3234203d3e203631373137.roa
File:                     34352e37312e3134342e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          HORLtRhtj6m/Z+gGQQAV8OMskjQNQujCzsnWYw96RwI=
Subject key identifier:   74:8F:7D:AB:BF:DA:D2:4F:63:C0:CC:9F:3E:28:94:71:0E:25:50:E6
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       6C1D16F108C52952DFC734136E35669BF88199F2
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134342e302f32342d3234203d3e203631373137.roa
Signing time:             Sat 09 Dec 2023 13:03:43 +0000
ROA not before:           Sat 09 Dec 2023 12:58:43 +0000
ROA not after:            Sat 07 Dec 2024 13:03:43 +0000
asID:                     61717
IP address blocks:        45.71.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1d:16:f1:08:c5:29:52:df:c7:34:13:6e:35:66:9b:f8:81:99:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Dec  9 12:58:43 2023 GMT
            Not After : Dec  7 13:03:43 2024 GMT
        Subject: CN=748F7DABBFDAD24F63C0CC9F3E2894710E2550E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:32:89:e9:19:d2:e9:d8:c7:15:3b:e8:66:
                    fb:c3:d3:e8:8d:5a:5c:53:3e:5c:c9:59:f2:80:be:
                    a7:c0:79:5d:79:6c:6f:22:63:33:09:f1:c4:83:fc:
                    b4:15:de:df:0f:cf:2a:64:aa:93:ca:87:5f:e6:74:
                    80:d1:be:80:8c:7e:d0:69:33:5f:38:b5:e3:a3:07:
                    3f:3e:b5:a7:65:d7:bd:a8:e6:1d:61:76:93:80:60:
                    8c:ea:66:22:95:54:8f:5f:08:b8:b4:12:ae:d5:d6:
                    83:91:43:81:5e:68:70:97:2a:9a:31:54:f1:30:00:
                    b4:a8:8e:10:6f:c4:f6:1d:67:05:b7:45:fc:38:f4:
                    4f:2b:16:8e:8d:ec:88:94:86:e5:14:51:86:a2:99:
                    f3:ed:f6:bc:e0:fe:53:0c:07:68:45:c2:ea:6e:fc:
                    90:ff:36:81:73:09:84:f8:1e:c6:0b:bc:ff:65:a7:
                    0f:11:f7:e8:45:73:10:99:c5:d1:1e:bf:17:ad:65:
                    45:a2:a7:bb:05:68:c2:56:14:92:2a:2d:35:aa:5b:
                    28:ea:2e:42:89:24:28:32:89:ea:01:47:d7:c8:9b:
                    3a:fc:ca:49:61:83:80:e8:c2:b3:34:80:b6:ec:04:
                    08:f2:a7:81:9a:c9:d8:1d:99:e0:b7:f3:47:5f:75:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8F:7D:AB:BF:DA:D2:4F:63:C0:CC:9F:3E:28:94:71:0E:25:50:E6
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134342e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:54:68:30:85:28:a1:34:74:03:07:56:fb:0e:c1:81:cc:a5:
         0e:82:cd:05:c3:94:cd:8f:58:09:a4:ca:1f:ec:41:3f:7e:1d:
         1d:b1:e5:cf:88:0d:db:02:92:57:5b:b0:0a:84:72:44:16:2e:
         a3:3f:f0:09:31:fc:dd:c1:5e:28:97:d7:d1:18:16:c7:27:01:
         84:fe:a0:36:fc:59:7e:4d:fa:3b:f5:6a:5a:7a:79:7e:10:48:
         6f:11:4b:70:1c:85:7b:b8:6a:3a:a7:a9:9f:6f:72:42:58:ce:
         c7:f8:94:44:e9:ba:0d:ae:9e:5d:ea:43:bc:41:32:af:84:64:
         14:78:92:6e:9c:80:79:2a:e0:f0:b9:bd:e4:bc:72:c9:ab:61:
         0e:57:f2:06:94:2b:64:48:ca:e0:1d:e9:77:c7:cc:09:84:30:
         26:38:ff:35:37:35:9e:5f:7a:00:b8:c1:16:57:98:84:fd:03:
         ac:b7:7f:34:45:84:33:25:b6:27:2a:e8:ed:f2:3b:15:91:54:
         ee:b4:48:20:cc:0d:34:89:29:a1:59:4f:99:0f:08:14:36:b1:
         e6:b0:9b:a3:1c:ad:52:d9:a0:21:b7:5c:ea:ff:ab:d2:69:b0:
         34:6b:1f:e7:17:69:1d:48:3e:01:52:da:e5:f0:c1:35:7a:7b:
         f5:6c:2b:dd
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbB0W8QjFKVLfxzQTbjVmm/iBmfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM5OTE0QTM1QUNCQUJBQzZBNkU1RkFBNTk5NDk3REQ5
N0M0MTJBNTAeFw0yMzEyMDkxMjU4NDNaFw0yNDEyMDcxMzAzNDNaMDMxMTAvBgNV
BAMTKDc0OEY3REFCQkZEQUQyNEY2M0MwQ0M5RjNFMjg5NDcxMEUyNTUwRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVDKJ6RnS6djHFTvoZvvD0+iN
WlxTPlzJWfKAvqfAeV15bG8iYzMJ8cSD/LQV3t8PzypkqpPKh1/mdIDRvoCMftBp
M184teOjBz8+tadl172o5h1hdpOAYIzqZiKVVI9fCLi0Eq7V1oORQ4FeaHCXKpox
VPEwALSojhBvxPYdZwW3Rfw49E8rFo6N7IiUhuUUUYaimfPt9rzg/lMMB2hFwupu
/JD/NoFzCYT4HsYLvP9lpw8R9+hFcxCZxdEevxetZUWip7sFaMJWFJIqLTWqWyjq
LkKJJCgyieoBR9fImzr8yklhg4DowrM0gLbsBAjyp4GaydgdmeC380dfdaJzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUdI99q7/a0k9jwMyfPiiUcQ4lUOYwHwYDVR0j
BBgwFoAUXJkUo1rLq6xqbl+qWZSX3ZfEEqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTd2UE56bmdFOGZFRFZnaWNGWEpBWnl0Zk04MThqWG85UEZrNlQxTEtH
SlgvMC81Qzk5MTRBMzVBQ0JBQkFDNkE2RTVGQUE1OTk0OTdERDk3QzQxMkE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDOTkxNEEzNUFDQkFCQUM2
QTZFNUZBQTU5OTQ5N0REOTdDNDEyQTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3dlBOem5nRThmRURWZ2ljRlhKQVp5dGZNODE4alhvOVBGazZUMUxLR0pYLzAv
MzQzNTJlMzczMTJlMzEzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM3
MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC1HkDANBgkqhkiG9w0BAQsFAAOCAQEAjlRoMIUooTR0
AwdW+w7BgcylDoLNBcOUzY9YCaTKH+xBP34dHbHlz4gN2wKSV1uwCoRyRBYuoz/w
CTH83cFeKJfX0RgWxycBhP6gNvxZfk36O/VqWnp5fhBIbxFLcByFe7hqOqepn29y
QljOx/iUROm6Da6eXepDvEEyr4RkFHiSbpyAeSrg8Lm95LxyyathDlfyBpQrZEjK
4B3pd8fMCYQwJjj/NTc1nl96ALjBFleYhP0DrLd/NEWEMyW2Jyro7fI7FZFU7rRI
IMwNNIkpoVlPmQ8IFDax5rCboxytUtmgIbdc6v+r0mmwNGsf5xdpHUg+AVLa5fDB
NXp79Wwr3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org