Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39392e302f32342d3234203d3e20323637363033.roa
File:                     34352e37312e39392e302f32342d3234203d3e20323637363033.roa (raw, json)
Hash identifier:          8o6kjhBYiYogNi1OaAaaGiUBCVEkk/VUiQBfZo76QIw=
Subject key identifier:   8C:98:B1:BC:56:24:F6:64:E7:5E:55:C7:71:BA:0F:EA:6E:49:13:1A
Certificate issuer:       /CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
Certificate serial:       1E2261FBA168029CBC1A0B0F5E5523219BC4CF87
Authority key identifier: 7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39392e302f32342d3234203d3e20323637363033.roa
Signing time:             Wed 20 Sep 2023 18:03:33 +0000
ROA not before:           Wed 20 Sep 2023 17:58:33 +0000
ROA not after:            Wed 18 Sep 2024 18:03:33 +0000
asID:                     267603
IP address blocks:        45.71.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:22:61:fb:a1:68:02:9c:bc:1a:0b:0f:5e:55:23:21:9b:c4:cf:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650
        Validity
            Not Before: Sep 20 17:58:33 2023 GMT
            Not After : Sep 18 18:03:33 2024 GMT
        Subject: CN=8C98B1BC5624F664E75E55C771BA0FEA6E49131A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:80:24:a6:65:7c:53:35:d3:b0:68:ba:90:
                    ee:b2:0d:95:44:87:bf:2e:3d:5f:d0:a4:64:ab:6f:
                    4f:7a:12:b1:ba:09:6c:2b:c0:d4:2f:bb:77:ed:91:
                    cb:9b:d9:e8:71:a7:35:9f:b0:e6:72:12:01:9d:2d:
                    de:cd:15:6a:d3:b7:17:b5:04:c4:6e:cb:ca:8b:e6:
                    70:88:c1:6b:e8:d0:ed:0c:98:67:0b:ab:f1:25:0f:
                    9d:a7:0e:86:33:b7:b1:b7:84:26:ee:37:1a:f5:3b:
                    58:d7:5d:eb:27:30:db:fe:37:b9:73:b9:4b:b5:d0:
                    3b:9f:9f:9b:96:db:5e:42:69:8b:21:88:31:92:95:
                    3d:67:31:c3:78:50:8e:6d:bd:c5:6c:d6:42:e9:d5:
                    96:5b:8a:64:db:bf:e9:a9:4c:bd:e7:7d:7d:23:fe:
                    29:99:b7:88:68:9c:4a:5c:e0:15:df:50:1e:a3:d8:
                    07:c6:c8:1d:63:08:76:aa:33:1c:31:72:ce:aa:7c:
                    9c:cc:e1:87:a4:7e:cd:e1:2e:35:9e:98:c1:ea:cf:
                    52:75:0e:20:2d:6f:27:bf:7b:f5:e7:5a:6c:67:a3:
                    d4:1f:f8:00:e3:3f:8b:8f:c5:d2:63:bb:fa:08:50:
                    21:76:62:24:ea:f2:b9:f8:d2:53:f4:79:29:57:88:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:98:B1:BC:56:24:F6:64:E7:5E:55:C7:71:BA:0F:EA:6E:49:13:1A
            X509v3 Authority Key Identifier:
                keyid:7D:5C:5D:D7:9B:A6:F9:B1:49:70:AA:D4:4F:78:6B:4D:FA:D8:96:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D5C5DD79BA6F9B14970AAD44F786B4DFAD89650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHzzNNceUTtSLvEjZWzjxUhJzX8PAn9K8RrC6B89umcr/0/34352e37312e39392e302f32342d3234203d3e20323637363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:4e:e4:18:e6:75:9f:17:48:6b:59:22:b2:d1:0b:1f:46:6c:
         92:13:3b:ff:16:33:44:7d:16:56:f5:93:c4:7e:ae:90:c8:c4:
         62:f8:bc:ad:55:37:f4:be:fa:5f:40:6e:bb:53:ac:d6:7e:be:
         d1:c4:84:d6:37:db:a3:73:45:a8:ef:e7:b1:34:f3:05:7c:06:
         ee:66:d3:05:a5:5e:1f:9f:9d:14:33:91:c2:20:f1:18:42:58:
         fe:72:9e:e3:96:14:9a:52:98:8b:8b:8d:83:82:fd:73:2c:a0:
         d3:2a:12:4a:79:ed:46:ef:90:53:cd:80:99:eb:76:b7:5e:b7:
         20:36:e8:bc:b6:05:f1:3a:da:90:59:14:9b:82:92:41:cb:73:
         73:eb:3e:0f:49:f7:69:4e:8f:ad:04:20:3c:0a:79:80:75:36:
         3f:49:73:f3:bb:71:3a:b1:a6:96:d0:20:fc:7c:1a:de:67:10:
         00:13:4b:f8:44:57:b8:bb:df:40:36:bb:7d:3b:a9:38:4c:fc:
         a1:75:90:a9:9d:63:45:05:c1:59:ab:f1:6b:a1:d5:8f:92:9b:
         74:bd:03:92:23:ae:b3:27:e5:8d:9c:ba:75:3c:1e:f1:8e:b5:
         d2:2d:11:23:92:d8:1f:27:e5:47:ed:fc:05:b3:a7:9c:f6:7d:
         f0:34:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org