Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39362e302f32342d3234203d3e20323637363033.roa
File:                     34352e37312e39362e302f32342d3234203d3e20323637363033.roa (raw, json)
Hash identifier:          Vhq0eLueD4OhB0ndA/e/tPAXU7fv58US4kz13J12/2w=
Subject key identifier:   68:26:17:DA:DF:D3:19:41:0D:00:52:E2:D8:B9:E2:A1:4F:FC:45:67
Certificate issuer:       /CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
Certificate serial:       6E2BDCBC7D14D1B141B1E397A093C5E61A144C28
Authority key identifier: 7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39362e302f32342d3234203d3e20323637363033.roa
Signing time:             Wed 20 Sep 2023 18:03:33 +0000
ROA not before:           Wed 20 Sep 2023 17:58:33 +0000
ROA not after:            Wed 18 Sep 2024 18:03:33 +0000
asID:                     267603
IP address blocks:        45.71.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2b:dc:bc:7d:14:d1:b1:41:b1:e3:97:a0:93:c5:e6:1a:14:4c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
        Validity
            Not Before: Sep 20 17:58:33 2023 GMT
            Not After : Sep 18 18:03:33 2024 GMT
        Subject: CN=682617DADFD319410D0052E2D8B9E2A14FFC4567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:56:11:42:ce:ff:0d:af:74:9a:3d:af:a7:
                    bc:fb:57:0b:92:ce:13:3c:60:fe:22:8d:e1:64:3f:
                    6d:e8:0f:f4:ed:2e:e7:32:c2:e2:5b:8b:a5:21:7d:
                    84:19:38:ce:24:16:6c:61:d7:73:d2:0d:8f:a0:07:
                    d9:fa:c4:d0:0b:cc:5f:88:f5:a1:fc:3a:e1:df:d9:
                    5a:93:fd:31:2a:b6:06:fb:0e:0c:97:09:58:a9:24:
                    69:ee:37:96:ab:a9:31:8c:eb:34:e4:07:70:af:bc:
                    67:b7:f2:dd:c2:e9:30:3c:9e:13:f6:58:0d:a8:f8:
                    f8:69:9f:01:d1:b7:06:52:c1:27:04:d9:b5:f1:69:
                    8e:89:5d:9a:b3:dc:8e:e4:77:08:51:78:97:27:c9:
                    24:25:02:3a:45:2d:59:46:89:d9:4b:b5:14:53:86:
                    ad:af:5e:33:7c:fe:d5:18:5e:74:20:cb:81:ba:5d:
                    bb:b6:bb:f2:0a:ef:26:c1:59:43:27:7b:b4:0a:ef:
                    38:e0:5b:b4:27:f3:50:4b:9a:48:8f:df:88:c6:67:
                    a4:bd:2b:a3:a4:d6:c8:de:ae:52:d2:38:6b:c4:73:
                    3d:ba:41:32:08:b2:c2:fb:17:ec:b9:3b:ea:78:c6:
                    50:28:2f:7c:4b:af:55:67:fb:37:05:c7:a4:90:a9:
                    e8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:26:17:DA:DF:D3:19:41:0D:00:52:E2:D8:B9:E2:A1:4F:FC:45:67
            X509v3 Authority Key Identifier:
                keyid:7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39362e302f32342d3234203d3e20323637363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:35:82:aa:24:9a:e4:a7:c1:f5:fb:f0:2f:b1:7c:be:7a:
         34:66:64:c8:4d:b7:d2:17:ea:c4:13:15:d5:f1:d4:f3:d4:fe:
         b2:00:7b:4f:dd:c8:9d:ef:dc:06:89:af:74:c6:cb:4e:38:e2:
         bc:8d:89:83:ca:36:e3:52:a8:22:93:f2:c0:9b:3b:23:e5:8a:
         2f:ec:ae:5c:69:77:2b:a9:93:9a:a3:61:0f:14:31:4e:e9:a3:
         fb:4e:c9:75:c7:29:d7:ce:19:b4:30:8d:ce:86:96:13:9f:01:
         b1:d9:c0:f3:85:dc:ce:15:b6:5f:23:6e:a0:73:4f:e8:23:b7:
         ea:b1:ae:cc:a4:f4:61:31:a3:36:f4:8b:6c:de:c5:50:50:bb:
         19:0b:9c:47:37:42:4d:cf:a6:b2:d5:20:60:57:1c:f9:c0:da:
         e2:3c:e1:3a:22:09:f0:18:4a:d4:9f:b3:76:aa:36:5f:2f:0a:
         88:df:09:2a:5e:e2:22:52:3a:ce:e3:8d:93:ba:f0:92:4a:02:
         e5:d2:39:c1:ac:1b:fd:03:f5:48:f1:be:e9:1f:81:30:74:52:
         94:a0:a7:88:94:bf:5b:e1:03:f7:d2:bc:3f:3e:60:8f:d8:a4:
         ec:f6:60:d2:47:0e:64:10:8e:ad:a2:5c:64:b8:1a:28:c6:7c:
         e3:4c:26:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org