Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39382e302f32342d3234203d3e20323637363033.roa
File:                     34352e37312e39382e302f32342d3234203d3e20323637363033.roa (raw, json)
Hash identifier:          /KpAmLEt56PdgDwfpHnAml1OZ4Lf5A34b7E821HurcM=
Subject key identifier:   46:A3:EB:07:55:E0:AC:AD:67:F9:B3:33:CA:D8:EF:80:C1:42:3F:B9
Certificate issuer:       /CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
Certificate serial:       600086D7EBB5EF70BF4545577C8970258BBD7C45
Authority key identifier: 7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39382e302f32342d3234203d3e20323637363033.roa
Signing time:             Wed 20 Sep 2023 18:03:34 +0000
ROA not before:           Wed 20 Sep 2023 17:58:34 +0000
ROA not after:            Wed 18 Sep 2024 18:03:34 +0000
asID:                     267603
IP address blocks:        45.71.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:00:86:d7:eb:b5:ef:70:bf:45:45:57:7c:89:70:25:8b:bd:7c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
        Validity
            Not Before: Sep 20 17:58:34 2023 GMT
            Not After : Sep 18 18:03:34 2024 GMT
        Subject: CN=46A3EB0755E0ACAD67F9B333CAD8EF80C1423FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:7e:7c:4b:00:a5:95:01:b5:4d:de:40:2f:
                    ea:6e:d5:70:b1:5a:06:c6:46:af:fd:4f:a0:49:f0:
                    9b:34:22:55:f4:f5:f4:44:bd:84:ac:c4:bc:45:db:
                    1f:ac:f6:11:2e:28:9c:ea:3a:67:7c:c6:26:6e:cd:
                    f8:4e:bd:21:58:f7:27:b2:d5:ea:5e:d4:3d:d2:ae:
                    cf:73:17:83:04:2c:dd:75:8c:92:ca:5e:2b:1c:aa:
                    47:ab:c9:16:8a:ab:b4:82:40:40:2a:73:d0:e6:e1:
                    44:15:53:b1:10:a9:18:e3:87:b0:9e:bc:21:32:24:
                    a0:37:ce:7c:75:7f:bb:8d:4f:45:69:ad:87:c1:f1:
                    3a:c5:5c:a3:65:3c:28:4c:99:d4:44:c8:ca:6d:85:
                    b3:b0:93:6a:a4:0c:be:56:9a:88:97:9c:1e:d3:e9:
                    1e:5f:4d:55:27:e9:f4:47:be:1c:c8:87:d6:fe:a8:
                    6a:d8:d6:93:98:b4:3e:f9:c6:0e:0d:42:bc:56:df:
                    b4:91:f7:99:35:c6:e4:5a:42:95:14:d8:59:32:0f:
                    d1:77:4e:c1:b9:c5:1e:1f:01:b1:a7:51:f7:21:38:
                    7e:ea:14:82:05:17:29:51:10:29:60:0c:86:fc:53:
                    39:b4:40:dc:70:17:88:8f:4c:81:3d:08:99:8c:34:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A3:EB:07:55:E0:AC:AD:67:F9:B3:33:CA:D8:EF:80:C1:42:3F:B9
            X509v3 Authority Key Identifier:
                keyid:7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39382e302f32342d3234203d3e20323637363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:1a:82:23:3c:f3:e2:03:21:26:6d:2d:0b:1c:1f:62:37:
         c2:e7:9b:aa:24:87:2a:26:0a:ad:e1:ee:88:12:eb:4e:76:b2:
         0e:0c:98:1e:be:1b:2f:85:ce:f2:c2:61:94:af:03:64:bc:ab:
         eb:c9:fe:d2:55:e1:05:1a:67:ec:6a:5b:c6:3d:d7:65:98:5b:
         d8:cd:82:36:04:60:34:fc:71:06:8e:83:6b:94:20:ea:4f:85:
         d4:65:89:1e:3e:b5:d8:51:19:bc:2c:9b:3c:5e:92:3b:5e:79:
         c5:33:51:96:1e:0a:e3:bc:3a:d3:a0:a8:28:e8:96:fa:b0:e1:
         fe:61:75:9c:a7:43:1b:8f:de:d6:b3:c0:3f:ec:bd:99:4c:b3:
         a7:d9:6a:27:a4:db:dd:c8:b7:e1:21:bf:0a:78:a6:5c:90:e2:
         53:14:a7:82:c5:de:be:34:ec:85:8f:29:62:2a:12:bb:b4:7b:
         59:aa:38:7b:79:41:eb:19:ed:ef:59:94:8b:5a:5b:8b:1e:c1:
         30:d8:a1:40:64:a4:f1:d6:a0:12:72:61:d1:ef:90:12:1e:03:
         41:94:22:3f:fc:ea:64:58:bc:59:55:bc:d3:1e:51:32:3f:24:
         07:05:dd:14:71:74:89:ce:c3:96:ab:88:71:85:f2:ce:d9:39:
         65:5d:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org