Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134352e302f32342d3234203d3e203631373137.roa
File:                     34352e37312e3134352e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          U4xk2NIV38rasE/qOGGz/evc9sqx3pUk1XhqwQZCVEQ=
Subject key identifier:   91:0E:CA:D1:E1:EB:8E:CB:F3:4D:A5:CC:22:9E:61:5E:14:5C:9E:D8
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       50403C1F356B07FA3C0EC3B33AA3E94C8C07FF69
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134352e302f32342d3234203d3e203631373137.roa
Signing time:             Fri 25 Aug 2023 11:08:33 +0000
ROA not before:           Fri 25 Aug 2023 11:03:33 +0000
ROA not after:            Fri 23 Aug 2024 11:08:33 +0000
asID:                     61717
IP address blocks:        45.71.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:40:3c:1f:35:6b:07:fa:3c:0e:c3:b3:3a:a3:e9:4c:8c:07:ff:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 25 11:03:33 2023 GMT
            Not After : Aug 23 11:08:33 2024 GMT
        Subject: CN=910ECAD1E1EB8ECBF34DA5CC229E615E145C9ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:13:3d:86:31:49:74:bb:c6:ea:31:ec:d3:
                    8a:37:ef:50:59:9a:2e:7e:d9:10:57:04:3b:29:3d:
                    c9:6d:f6:e6:4d:71:db:3d:5e:0c:6b:61:76:87:f4:
                    4f:ed:d6:f7:41:03:9a:3f:4f:5a:07:38:8b:97:b1:
                    63:b5:e2:e4:8b:1f:6a:bb:ca:b0:cb:f1:4c:78:7f:
                    01:39:1b:fd:da:05:1b:86:f9:35:bb:1e:b8:95:e7:
                    e4:d7:d3:ea:bc:c1:45:23:00:e4:06:48:ca:b0:be:
                    0c:c4:85:1e:23:73:7c:25:68:73:6e:af:d0:b0:13:
                    60:49:8b:8b:83:db:b6:85:23:bc:a9:c7:a4:a5:f4:
                    7f:50:6f:28:fd:c6:1a:ee:e8:a1:07:30:41:df:71:
                    84:de:ca:59:d6:36:9f:b6:da:36:c8:de:0d:13:69:
                    ed:ab:d2:4d:8b:b9:96:bd:ef:2f:02:24:d3:47:de:
                    74:ce:c8:13:f2:63:88:bc:bc:34:3c:85:04:43:c9:
                    77:1e:8e:0c:90:7b:41:56:cb:28:ba:18:2a:91:33:
                    1f:ea:80:35:18:a8:40:9f:d3:84:8a:d5:f2:55:e9:
                    0b:83:83:16:a7:19:11:08:24:96:c1:d8:7a:3c:4c:
                    cb:65:60:28:f0:15:29:25:f7:5c:d4:e4:d2:fc:26:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0E:CA:D1:E1:EB:8E:CB:F3:4D:A5:CC:22:9E:61:5E:14:5C:9E:D8
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134352e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:58:79:f6:9b:93:50:b8:bc:45:bd:67:13:5f:d5:f3:b3:03:
         8d:c8:f4:23:60:23:ef:55:6e:c6:20:04:8c:b4:b7:73:6c:28:
         1b:52:c6:9d:04:a4:33:69:c2:34:6a:55:96:e6:30:9b:29:bd:
         e5:7f:da:0f:07:4e:45:65:34:0e:fb:da:0e:f0:1b:cf:54:2f:
         1c:aa:ef:02:23:c8:46:7e:65:82:39:ed:42:f0:39:8b:c0:1d:
         f9:df:7d:e2:e2:74:ce:a3:db:2a:c2:01:cd:95:43:b9:9d:e9:
         d3:57:25:da:ae:ae:77:a1:4d:33:2b:9c:f1:e4:11:e0:d7:67:
         73:d1:5e:ea:1f:0a:1e:47:7a:66:a7:95:d7:c7:eb:c5:de:8d:
         2f:b4:3f:b8:73:8d:0a:c3:7c:9c:20:24:d5:17:e5:42:f0:f3:
         4c:83:8d:12:60:bb:25:1c:e9:31:ee:63:8d:d6:a7:42:3a:e4:
         c4:cf:0b:cd:f5:98:74:33:c0:15:f1:2b:14:c3:81:d8:68:dd:
         0e:22:b9:c5:2f:b7:60:62:28:b1:66:1c:e6:a0:a7:c3:3e:bc:
         b7:49:fe:4e:6f:5f:23:b9:16:16:57:6d:6e:a8:ec:20:2f:17:
         7f:43:02:2e:ef:7d:58:fb:e5:32:a1:90:85:dc:75:09:5d:38:
         e6:c9:58:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org