Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39362e302f32322d3332203d3e20323639363033.roa
File:                     34352e37312e39362e302f32322d3332203d3e20323639363033.roa (raw, json)
Hash identifier:          dMKEfK4EN1MKCygJLXMIeHq3RS3B6xrlopLpFDH8NuY=
Subject key identifier:   FD:61:48:59:8C:06:8E:48:53:B0:E8:6A:50:3B:C8:BF:F5:15:FF:65
Certificate issuer:       /CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
Certificate serial:       12ABEBDDB7BFFC146C49C47CD2C9677954A6BDCF
Authority key identifier: 7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39362e302f32322d3332203d3e20323639363033.roa
Signing time:             Wed 20 Sep 2023 18:04:25 +0000
ROA not before:           Wed 20 Sep 2023 17:59:25 +0000
ROA not after:            Wed 18 Sep 2024 18:04:25 +0000
asID:                     269603
IP address blocks:        45.71.96.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ab:eb:dd:b7:bf:fc:14:6c:49:c4:7c:d2:c9:67:79:54:a6:bd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
        Validity
            Not Before: Sep 20 17:59:25 2023 GMT
            Not After : Sep 18 18:04:25 2024 GMT
        Subject: CN=FD6148598C068E4853B0E86A503BC8BFF515FF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:62:65:bc:87:3d:41:6e:78:e8:c4:c4:a5:
                    59:32:1a:ec:ba:40:03:9c:b6:95:94:c1:08:5b:36:
                    82:06:97:e0:13:25:3e:c9:1e:97:ea:27:9d:c7:00:
                    d8:0d:78:7a:fb:99:3f:b3:a2:0b:9f:9f:aa:c2:66:
                    b8:b5:09:fc:f1:73:0d:36:39:15:95:5d:34:0d:b3:
                    6a:e1:60:c5:81:38:47:2a:48:a0:17:a7:d0:c5:fa:
                    1f:99:1b:ca:c4:ff:1e:1d:d2:d5:fb:96:4c:87:ec:
                    19:bf:cd:ba:e4:43:ca:eb:c2:b2:b5:31:a3:55:1e:
                    6e:40:ef:e0:f3:7d:58:93:72:8d:24:6a:6a:3e:ce:
                    ec:50:3d:fb:d0:21:fd:cf:2a:f3:f6:da:7a:b0:35:
                    5a:59:18:9c:ca:c4:64:de:cc:53:6d:34:1e:d4:2f:
                    54:67:f6:3a:2d:f9:a2:d0:04:6a:45:31:a8:96:b2:
                    91:4e:02:c9:f9:fd:bd:d5:0a:bd:e7:74:7f:72:8b:
                    81:2b:ff:35:93:cd:de:84:bf:a3:b7:73:cd:a8:84:
                    0d:c2:45:c7:65:81:3e:e6:16:6f:a6:21:27:b4:1d:
                    97:7a:64:d8:d8:9d:1a:dd:9f:6a:0e:b3:70:ae:88:
                    37:17:9e:b6:a3:01:51:40:a8:23:fb:8f:79:f6:f0:
                    0a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:61:48:59:8C:06:8E:48:53:B0:E8:6A:50:3B:C8:BF:F5:15:FF:65
            X509v3 Authority Key Identifier:
                keyid:7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39362e302f32322d3332203d3e20323639363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:56:56:fb:04:d2:e6:24:f3:14:82:68:bb:70:e2:c0:bc:6a:
         25:1e:43:59:28:97:2f:61:23:36:c5:63:a4:1b:49:26:fe:b5:
         63:eb:6a:c2:a3:8b:93:39:d7:d8:3c:1f:bb:5c:4f:3c:0c:b2:
         47:04:21:54:bb:73:fe:0f:96:5f:91:f3:fe:ae:b5:6e:a8:c7:
         11:6c:3f:06:f9:66:22:56:ae:01:dc:67:d3:ae:00:30:f4:61:
         e4:fe:a4:ee:78:ac:89:34:df:95:4a:a4:1b:f3:fd:b1:32:9b:
         e9:79:06:f6:6c:bc:41:87:fa:d5:6e:5f:c3:01:8b:15:7a:1d:
         24:29:48:c7:d2:8b:8e:5d:f2:0b:7b:f7:e5:2b:4c:f5:54:a3:
         f8:84:29:5b:5f:4c:d7:f5:a3:00:a8:b6:40:96:d1:30:66:32:
         64:f7:4a:6e:30:e7:bb:2e:d6:ca:e2:75:22:5b:91:b6:ca:f5:
         29:6a:f4:31:fd:b1:47:2c:93:20:d1:14:16:86:eb:58:a6:e7:
         44:00:0a:09:2a:dc:fa:b5:4a:1a:fd:28:ae:c6:3a:c6:06:48:
         3e:2f:85:95:89:94:19:6a:d8:57:92:89:9f:35:d8:8d:04:c5:
         43:f4:90:eb:b5:cc:25:31:16:82:c8:f9:f9:f8:3a:d2:4d:9b:
         c6:c7:e5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org