Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134372e302f32342d3234203d3e203631373137.roa
File:                     34352e37312e3134372e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          VwAhVdlH2+dB5VsrbrJgdQ12C1RkoAJXvWu67wGQOX0=
Subject key identifier:   D0:31:B8:ED:BC:CF:77:28:67:09:DC:9B:49:18:60:74:1E:65:C2:AD
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       6D1E64A2D2E92C27B14A50F04C40A672484340C2
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134372e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:57 +0000
ROA not before:           Thu 10 Aug 2023 12:17:57 +0000
ROA not after:            Thu 08 Aug 2024 12:22:57 +0000
asID:                     61717
IP address blocks:        45.71.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1e:64:a2:d2:e9:2c:27:b1:4a:50:f0:4c:40:a6:72:48:43:40:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:57 2023 GMT
            Not After : Aug  8 12:22:57 2024 GMT
        Subject: CN=D031B8EDBCCF77286709DC9B491860741E65C2AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:83:52:55:b3:85:fb:3f:9b:73:e3:5e:8d:
                    24:13:20:0c:f7:ef:65:d4:82:4d:b1:60:7e:6d:e3:
                    cf:09:19:c9:e7:5d:6c:95:88:61:28:92:30:45:24:
                    21:34:30:41:1c:37:6a:e3:d2:6f:66:fa:a0:bf:21:
                    ff:4e:e5:a3:4e:a5:47:b3:fc:80:2f:fe:2e:a5:8a:
                    4c:54:85:f1:47:96:a0:dd:9f:39:35:9c:5b:19:94:
                    56:4c:bd:49:30:38:f6:73:2b:01:be:34:da:31:15:
                    93:6a:8b:2d:bf:f3:ff:21:49:e4:0c:88:7a:96:a5:
                    d1:da:cb:78:35:91:b7:c4:da:c2:c7:08:eb:88:da:
                    2c:89:4e:16:cf:6d:51:eb:80:31:b9:81:3d:bd:0e:
                    38:8e:e1:cc:e8:4f:bc:a3:3f:95:a7:77:17:7d:f1:
                    39:c5:3d:0a:8b:06:76:af:ba:4c:97:7d:bf:53:fc:
                    14:d8:0b:a2:8c:bd:59:c8:0b:45:a4:29:bd:e3:08:
                    a0:0c:57:af:96:d9:2e:51:79:a4:f7:9c:88:4f:45:
                    e9:53:cd:1d:7d:90:45:88:5f:6d:ac:ba:50:e5:35:
                    b4:20:04:d8:4c:3e:6e:34:41:4e:80:92:34:ef:f6:
                    73:d4:a9:9f:df:ce:66:4e:34:33:e5:89:76:d3:33:
                    3d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:31:B8:ED:BC:CF:77:28:67:09:DC:9B:49:18:60:74:1E:65:C2:AD
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/34352e37312e3134372e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:a5:6c:19:33:05:88:23:85:60:84:19:85:c1:5a:80:e7:90:
         24:27:dd:97:98:c2:2a:ff:8e:fb:69:05:09:2d:af:ba:1e:e9:
         9d:f1:7a:72:b4:a5:53:d6:76:b5:a1:53:73:b6:5e:49:9a:10:
         ab:ac:0c:72:d0:e8:95:ff:74:31:13:cb:99:2e:81:f1:ec:e8:
         a6:b3:8d:5f:5f:7c:9b:58:be:7f:31:c4:ed:60:ad:7d:4c:f5:
         59:c0:c0:6b:8b:4f:ec:32:2a:47:63:4e:45:84:a5:e9:2f:d6:
         fb:a9:76:86:7a:13:3c:a6:59:82:6b:77:1d:0b:4a:ba:a2:1e:
         57:23:71:a9:ab:10:4f:28:3c:2d:4e:b6:c3:69:43:31:89:93:
         41:c8:e4:58:c2:36:67:99:88:90:31:78:09:5a:63:e2:eb:21:
         43:90:50:d9:98:ff:eb:6a:f6:01:8d:72:5e:ec:75:75:b6:78:
         dd:49:88:f9:fe:d4:a4:ec:24:1b:14:c8:9c:5a:0c:6f:1e:25:
         e7:38:80:ca:c1:a5:8e:e5:1f:7a:1f:65:d5:d8:13:28:87:c9:
         cd:7d:a3:37:54:61:8f:65:9e:86:bb:e4:99:59:c2:34:57:0d:
         73:7c:68:e2:5e:2b:ad:05:69:df:6d:63:69:92:62:62:eb:52:
         47:09:e4:86
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbR5kotLpLCexSlDwTECmckhDQMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM5OTE0QTM1QUNCQUJBQzZBNkU1RkFBNTk5NDk3REQ5
N0M0MTJBNTAeFw0yMzA4MTAxMjE3NTdaFw0yNDA4MDgxMjIyNTdaMDMxMTAvBgNV
BAMTKEQwMzFCOEVEQkNDRjc3Mjg2NzA5REM5QjQ5MTg2MDc0MUU2NUMyQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CoNSVbOF+z+bc+NejSQTIAz3
72XUgk2xYH5t488JGcnnXWyViGEokjBFJCE0MEEcN2rj0m9m+qC/If9O5aNOpUez
/IAv/i6likxUhfFHlqDdnzk1nFsZlFZMvUkwOPZzKwG+NNoxFZNqiy2/8/8hSeQM
iHqWpdHay3g1kbfE2sLHCOuI2iyJThbPbVHrgDG5gT29DjiO4czoT7yjP5Wndxd9
8TnFPQqLBnavukyXfb9T/BTYC6KMvVnIC0WkKb3jCKAMV6+W2S5ReaT3nIhPRelT
zR19kEWIX22sulDlNbQgBNhMPm40QU6AkjTv9nPUqZ/fzmZONDPliXbTMz1PAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0DG47bzPdyhnCdybSRhgdB5lwq0wHwYDVR0j
BBgwFoAUXJkUo1rLq6xqbl+qWZSX3ZfEEqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTd2UE56bmdFOGZFRFZnaWNGWEpBWnl0Zk04MThqWG85UEZrNlQxTEtH
SlgvMC81Qzk5MTRBMzVBQ0JBQkFDNkE2RTVGQUE1OTk0OTdERDk3QzQxMkE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDOTkxNEEzNUFDQkFCQUM2
QTZFNUZBQTU5OTQ5N0REOTdDNDEyQTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3dlBOem5nRThmRURWZ2ljRlhKQVp5dGZNODE4alhvOVBGazZUMUxLR0pYLzAv
MzQzNTJlMzczMTJlMzEzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM3
MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC1HkzANBgkqhkiG9w0BAQsFAAOCAQEAjaVsGTMFiCOF
YIQZhcFagOeQJCfdl5jCKv+O+2kFCS2vuh7pnfF6crSlU9Z2taFTc7ZeSZoQq6wM
ctDolf90MRPLmS6B8ezoprONX198m1i+fzHE7WCtfUz1WcDAa4tP7DIqR2NORYSl
6S/W+6l2hnoTPKZZgmt3HQtKuqIeVyNxqasQTyg8LU62w2lDMYmTQcjkWMI2Z5mI
kDF4CVpj4ushQ5BQ2Zj/62r2AY1yXux1dbZ43UmI+f7UpOwkGxTInFoMbx4l5ziA
ysGljuUfeh9l1dgTKIfJzX2jN1Rhj2WehrvkmVnCNFcNc3xo4l4rrQVp321jaZJi
YutSRwnkhg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org