Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134362e302f32342d3234203d3e203631373137.roa
File:                     34352e37312e3134362e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          +uVRqIy8EkHCzaOWAXbyRAUQ2FTcOYWBY8ol8yKMXGk=
Subject key identifier:   18:8E:19:D6:C7:8E:4D:F5:BC:C4:06:A8:59:8C:60:0F:09:2A:6B:FF
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       3C028F0AB7C93D8C35DFF07918AF701E98D4F838
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134362e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:57 +0000
ROA not before:           Thu 10 Aug 2023 12:17:57 +0000
ROA not after:            Thu 08 Aug 2024 12:22:57 +0000
asID:                     61717
IP address blocks:        45.71.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:02:8f:0a:b7:c9:3d:8c:35:df:f0:79:18:af:70:1e:98:d4:f8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:57 2023 GMT
            Not After : Aug  8 12:22:57 2024 GMT
        Subject: CN=188E19D6C78E4DF5BCC406A8598C600F092A6BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:20:65:ab:a2:9b:a2:72:89:d9:bd:f9:e6:
                    58:c9:50:e5:63:f1:06:b6:b2:cf:f8:ee:17:1b:26:
                    33:7c:88:10:a4:72:07:40:d6:09:23:00:88:2e:0a:
                    b2:bb:66:f9:35:8a:e4:6b:53:af:fe:dc:78:90:69:
                    3e:d8:cd:60:23:24:c8:64:7e:18:3c:93:7a:62:79:
                    85:72:6d:19:0e:52:75:62:af:cd:dc:33:9e:7a:4b:
                    2c:20:27:e8:a3:bf:50:3a:00:36:db:dc:6e:ad:3e:
                    28:23:7e:6f:4c:e5:fd:97:d7:7b:b7:a9:f8:e5:a4:
                    a2:30:b4:ab:c4:db:2c:46:0f:fa:17:08:37:cd:b6:
                    82:bf:98:74:db:4b:ba:55:b8:a1:52:22:38:e0:19:
                    bd:11:bd:a4:a4:0b:8f:9d:12:ef:19:5b:30:3d:86:
                    7c:cd:c8:d2:14:3a:59:e6:73:a4:ed:ad:11:1f:bc:
                    90:cd:92:d9:c4:81:9b:83:97:b5:36:d8:e3:7c:7d:
                    15:ea:ed:be:4f:ab:c9:2b:94:1a:40:de:1a:59:6c:
                    49:54:94:fc:2a:2a:80:d3:9b:74:a4:cd:99:8b:6e:
                    71:a4:f6:04:d8:21:e8:c0:d2:24:ae:b4:51:0a:93:
                    90:0a:44:b7:43:36:79:e8:b5:90:a7:8a:33:6a:39:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8E:19:D6:C7:8E:4D:F5:BC:C4:06:A8:59:8C:60:0F:09:2A:6B:FF
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134362e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:98:c5:49:29:5f:5e:05:c7:de:3d:c0:21:cc:31:94:15:f9:
         74:6f:4c:f1:32:72:80:49:71:62:03:ee:7e:4e:d1:7b:63:65:
         82:10:f8:bd:a9:63:45:56:91:d3:f4:9d:f6:1a:9b:2c:8b:45:
         f5:17:54:96:7d:7e:87:25:af:5f:4e:c6:a0:7a:6f:12:b2:10:
         28:d4:4c:b0:5a:e6:89:3c:0e:4a:68:5d:c1:f7:9e:6c:18:36:
         fb:22:32:c8:42:c2:25:5a:3d:17:93:1c:05:64:63:64:98:c6:
         ee:73:c1:a4:a8:09:05:14:38:a2:76:82:2b:0c:11:09:e0:fb:
         27:58:5a:47:83:a8:c8:89:2a:b1:9e:ac:28:b6:49:34:b9:77:
         78:19:8c:d7:69:6b:76:c4:39:ff:04:77:8e:b7:dd:3b:2f:af:
         4d:91:0a:3f:6a:16:e1:be:07:a0:26:13:30:de:41:68:31:a9:
         1d:f7:fc:fb:b6:a5:0c:19:ee:64:db:7f:04:b8:2b:9f:8e:7e:
         75:ac:cc:d5:10:4a:dd:1f:c3:a3:f4:ae:e4:93:12:8d:d2:1d:
         18:16:16:25:ff:05:f6:b5:ed:54:53:2f:50:e0:59:dc:fe:3a:
         e9:a7:9e:eb:1e:46:73:9a:b8:8c:9e:e2:a1:ae:64:4c:a0:19:
         2f:d7:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org