Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39372e302f32342d3234203d3e20323637363033.roa
File:                     34352e37312e39372e302f32342d3234203d3e20323637363033.roa (raw, json)
Hash identifier:          Hpd5ABTgjP0n7xj5OuBHFBRfuIYSXeysDWAnE9VXaak=
Subject key identifier:   E3:49:CE:A0:33:23:6E:96:D4:C5:E8:A1:69:43:FD:1C:7B:30:E3:B0
Certificate issuer:       /CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
Certificate serial:       42F2C36D804861E49D64C92D7C47C14C084CD944
Authority key identifier: 7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39372e302f32342d3234203d3e20323637363033.roa
Signing time:             Wed 20 Sep 2023 18:03:33 +0000
ROA not before:           Wed 20 Sep 2023 17:58:33 +0000
ROA not after:            Wed 18 Sep 2024 18:03:33 +0000
asID:                     267603
IP address blocks:        45.71.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f2:c3:6d:80:48:61:e4:9d:64:c9:2d:7c:47:c1:4c:08:4c:d9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
        Validity
            Not Before: Sep 20 17:58:33 2023 GMT
            Not After : Sep 18 18:03:33 2024 GMT
        Subject: CN=E349CEA033236E96D4C5E8A16943FD1C7B30E3B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:75:28:1b:a5:59:01:53:f0:99:fd:b4:68:
                    a8:02:7f:90:f1:fe:bd:c5:fc:1a:38:1f:8b:ab:5d:
                    da:99:58:86:de:ca:cb:79:37:95:d7:20:5a:67:c2:
                    19:b0:1f:67:e8:8c:0f:41:99:c9:be:45:4f:67:0e:
                    d3:f5:57:c4:f6:12:10:1b:fe:69:47:39:ea:4e:8e:
                    b2:b3:28:6e:a1:12:8e:14:dd:cc:a0:20:e4:7a:c1:
                    fd:52:80:ab:c7:35:26:7a:a3:59:ce:ee:2d:b5:3e:
                    2b:22:e2:4e:3c:86:c3:a8:70:ea:96:f8:c9:dd:73:
                    8f:c4:a0:67:39:1e:28:10:f6:14:b2:74:70:1c:ba:
                    e5:37:66:ea:8f:b3:d1:ad:d7:b0:33:18:8d:f7:16:
                    34:28:d7:a6:1a:0e:b3:d9:6c:72:cb:64:0b:05:0d:
                    e1:cc:c7:49:00:e6:4d:93:ec:a5:db:b7:df:95:46:
                    c5:cf:8d:9c:bf:c8:6a:ce:11:e5:c6:0a:16:86:c7:
                    f3:c9:d1:eb:63:4e:0c:40:a5:16:73:b4:cb:6d:ae:
                    ed:8b:ce:5a:0c:a7:b5:ef:f8:75:ce:50:9a:55:b9:
                    f3:e6:da:7d:a8:d2:81:f9:7b:44:49:9c:a3:23:fe:
                    e5:ca:58:b6:08:23:0b:bd:34:bf:74:68:de:b6:27:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:49:CE:A0:33:23:6E:96:D4:C5:E8:A1:69:43:FD:1C:7B:30:E3:B0
            X509v3 Authority Key Identifier:
                keyid:7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39372e302f32342d3234203d3e20323637363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:06:fa:e9:c7:a1:1d:7c:24:7d:07:a3:76:1f:2d:cc:c1:50:
         4c:06:49:a3:6b:7e:5c:a9:10:91:ed:f3:6b:a6:a9:d7:4e:84:
         b7:64:64:2f:98:4d:88:1d:46:6d:c5:c7:d6:af:bd:e8:dd:64:
         c0:d9:dd:cf:82:79:d8:da:05:4f:da:b0:f2:53:6f:e2:f7:74:
         14:78:72:08:57:ec:14:50:70:5b:ca:d3:49:fc:e8:b3:d9:30:
         fd:34:15:ed:e7:43:d8:cb:7c:5c:a1:e8:ca:57:e9:85:8c:b6:
         d6:c9:2e:49:f5:49:b9:6a:48:4f:80:01:33:d8:53:e7:53:bc:
         a5:16:6b:ac:91:fb:b2:5b:76:3e:c2:df:d6:dc:56:3c:67:e8:
         c4:6c:db:f5:e9:ea:80:18:21:e3:48:06:49:e2:aa:81:da:55:
         37:9c:f2:bd:8b:dc:91:99:12:47:b6:29:5c:f0:23:cb:b6:d5:
         9d:e6:6c:5f:89:50:1a:18:02:20:f9:1d:84:84:bc:27:64:6f:
         c4:05:cf:9c:8d:88:6d:9b:85:c1:55:d2:17:58:cf:21:20:d6:
         be:e8:65:52:07:ba:9a:42:f2:0c:40:4a:63:36:49:05:51:88:
         63:3e:43:f6:86:11:5c:2e:87:98:73:f8:cc:2f:27:2f:09:72:
         f7:22:d7:52
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQvLDbYBIYeSdZMktfEfBTAhM2UQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q1QzVERDc5QkE2RjlCMTQ5NzBBQUQ0NEY3ODZCNERG
QUQ4OTY1MDAeFw0yMzA5MjAxNzU4MzNaFw0yNDA5MTgxODAzMzNaMDMxMTAvBgNV
BAMTKEUzNDlDRUEwMzMyMzZFOTZENEM1RThBMTY5NDNGRDFDN0IzMEUzQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xHUoG6VZAVPwmf20aKgCf5Dx
/r3F/Bo4H4urXdqZWIbeyst5N5XXIFpnwhmwH2fojA9Bmcm+RU9nDtP1V8T2EhAb
/mlHOepOjrKzKG6hEo4U3cygIOR6wf1SgKvHNSZ6o1nO7i21Pisi4k48hsOocOqW
+Mndc4/EoGc5HigQ9hSydHAcuuU3ZuqPs9Gt17AzGI33FjQo16YaDrPZbHLLZAsF
DeHMx0kA5k2T7KXbt9+VRsXPjZy/yGrOEeXGChaGx/PJ0etjTgxApRZztMttru2L
zloMp7Xv+HXOUJpVufPm2n2o0oH5e0RJnKMj/uXKWLYIIwu9NL90aN62J9idAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU40nOoDMjbpbUxeihaUP9HHsw47AwHwYDVR0j
BBgwFoAUfVxd15um+bFJcKrUT3hrTfrYllAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEh6ek5OY2VVVHRTTHZFalpXemp4VWhKelg4UEFuOUs4UnJDNkI4OXVt
Y3IvMC83RDVDNURENzlCQTZGOUIxNDk3MEFBRDQ0Rjc4NkI0REZBRDg5NjUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdENUM1REQ3OUJBNkY5QjE0
OTcwQUFENDRGNzg2QjRERkFEODk2NTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hIenpOTmNlVVR0U0x2RWpaV3pqeFVoSnpYOFBBbjlLOFJyQzZCODl1bWNyLzAv
MzQzNTJlMzczMTJlMzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM2
MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC1HYTANBgkqhkiG9w0BAQsFAAOCAQEAtQb66cehHXwk
fQejdh8tzMFQTAZJo2t+XKkQke3za6ap106Et2RkL5hNiB1GbcXH1q+96N1kwNnd
z4J52NoFT9qw8lNv4vd0FHhyCFfsFFBwW8rTSfzos9kw/TQV7edD2Mt8XKHoylfp
hYy21skuSfVJuWpIT4ABM9hT51O8pRZrrJH7slt2PsLf1txWPGfoxGzb9enqgBgh
40gGSeKqgdpVN5zyvYvckZkSR7YpXPAjy7bVneZsX4lQGhgCIPkdhIS8J2RvxAXP
nI2IbZuFwVXSF1jPISDWvuhlUge6mkLyDEBKYzZJBVGIYz5D9oYRXC6HmHP4zC8n
Lwly9yLXUg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org