Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/34352e37302e36342e302f32322d3232203d3e20323637353636.roa
File:                     34352e37302e36342e302f32322d3232203d3e20323637353636.roa (raw, json)
Hash identifier:          s219Elcvo4Z8HD78iisNNdNXmirXNqW9fIi8tmi/daM=
Subject key identifier:   D6:0C:1F:AA:5B:E4:79:DC:97:7E:09:5B:AF:BE:E3:A9:CD:5C:A6:72
Certificate issuer:       /CN=7963354CD1BDFFB3853B646759C33FB17C53C980
Certificate serial:       0C706A4DDD28E0E52648FCFE15C2A4046B83AE17
Authority key identifier: 79:63:35:4C:D1:BD:FF:B3:85:3B:64:67:59:C3:3F:B1:7C:53:C9:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7963354CD1BDFFB3853B646759C33FB17C53C980.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/34352e37302e36342e302f32322d3232203d3e20323637353636.roa
Signing time:             Sat 09 Dec 2023 03:15:05 +0000
ROA not before:           Sat 09 Dec 2023 03:10:05 +0000
ROA not after:            Sat 07 Dec 2024 03:15:05 +0000
asID:                     267566
IP address blocks:        45.70.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:70:6a:4d:dd:28:e0:e5:26:48:fc:fe:15:c2:a4:04:6b:83:ae:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7963354CD1BDFFB3853B646759C33FB17C53C980
        Validity
            Not Before: Dec  9 03:10:05 2023 GMT
            Not After : Dec  7 03:15:05 2024 GMT
        Subject: CN=D60C1FAA5BE479DC977E095BAFBEE3A9CD5CA672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e7:fe:4b:92:36:02:a8:67:e4:a4:dc:c3:c9:
                    5d:e3:ca:94:65:01:16:9a:5a:c7:f1:3f:57:f9:32:
                    81:f9:68:69:f1:b6:e7:0b:12:40:e7:81:c2:d1:65:
                    b0:20:19:7a:45:b4:d6:35:f9:0a:20:c9:3c:ff:f3:
                    0d:bb:a7:e9:5f:f3:cd:98:1d:94:7b:7f:e5:51:a3:
                    86:06:c7:fa:a4:c8:e0:83:a5:6b:84:e9:62:72:10:
                    b2:78:66:b1:b1:ad:9b:c2:7e:58:d2:19:56:d1:11:
                    b0:3b:b1:54:7c:b6:b6:cb:4c:41:bf:d0:e7:ad:79:
                    fb:28:c5:0b:fd:46:26:36:dc:53:29:ad:d6:e2:10:
                    41:de:27:26:75:29:c2:ba:43:8d:5c:c4:87:51:15:
                    20:ae:77:8d:a3:10:fe:8a:3a:f3:f2:40:81:2f:d1:
                    00:af:99:a2:41:9f:60:22:e5:68:85:62:85:fd:3e:
                    0a:48:e1:aa:61:55:1e:ed:d6:5b:32:49:04:c9:04:
                    b8:a7:a8:ce:b7:19:b1:39:ad:67:fb:88:a1:b2:05:
                    97:10:68:32:94:2c:8c:cc:71:be:e4:24:59:3c:46:
                    f8:84:16:c3:df:f8:38:cb:e6:5c:99:2a:25:16:90:
                    c5:5d:30:0e:a6:48:68:3d:90:b8:04:8a:4d:ae:63:
                    e3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0C:1F:AA:5B:E4:79:DC:97:7E:09:5B:AF:BE:E3:A9:CD:5C:A6:72
            X509v3 Authority Key Identifier:
                keyid:79:63:35:4C:D1:BD:FF:B3:85:3B:64:67:59:C3:3F:B1:7C:53:C9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/7963354CD1BDFFB3853B646759C33FB17C53C980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7963354CD1BDFFB3853B646759C33FB17C53C980.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/34352e37302e36342e302f32322d3232203d3e20323637353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:d5:26:e9:f4:8f:35:e2:56:d7:55:28:83:b6:4d:ff:e4:df:
         f2:59:cd:8a:ca:af:df:f5:29:12:73:45:fa:15:27:4d:53:b1:
         0b:bc:7f:1f:15:85:bd:01:96:2d:cc:26:d4:8e:f9:82:b5:c9:
         e4:da:2b:52:be:25:7d:f1:6f:1c:79:2f:99:b3:73:4d:a9:7f:
         9a:d0:af:ab:20:74:1a:d4:b7:49:31:a0:66:69:dd:cb:55:c8:
         58:5b:d7:95:30:2e:9b:30:76:ca:2a:60:ab:9a:66:b2:25:96:
         12:a7:4d:0a:79:12:7d:69:28:1d:a7:f6:d3:6e:4c:7c:dc:a0:
         52:47:3e:fb:58:c1:7b:50:9e:ee:24:3e:8b:ae:18:02:e3:ba:
         87:9a:54:01:a6:31:ba:46:5d:77:21:e4:85:79:ec:92:7b:9f:
         b6:e9:9b:ea:0b:5d:30:3d:d8:80:27:8c:89:3c:a9:60:bb:35:
         dc:48:a8:bd:f5:50:d6:ac:f8:9a:ad:90:e1:63:df:9e:f9:97:
         e5:8e:72:d5:71:dd:20:61:9d:d1:32:46:97:56:85:9c:80:71:
         0b:c3:7e:99:21:8e:5f:cb:40:7c:ed:e1:9c:23:1e:6a:cb:bc:
         5b:fb:65:72:91:51:81:e1:1e:97:93:0b:3a:61:70:6e:dd:82:
         89:63:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org