Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/34352e37302e36362e302f32332d3233203d3e20323637353636.roa
File:                     34352e37302e36362e302f32332d3233203d3e20323637353636.roa (raw, json)
Hash identifier:          YC2B6focaULNUqZBDCL4CPWdfH+3sJlGne7HjoKfPQU=
Subject key identifier:   84:A1:22:80:68:FA:48:B0:F2:20:5B:12:3A:15:47:D6:36:C3:C0:7D
Certificate issuer:       /CN=7963354CD1BDFFB3853B646759C33FB17C53C980
Certificate serial:       079F7D8683366DF39246DB9A20B1FB88E71AA9BA
Authority key identifier: 79:63:35:4C:D1:BD:FF:B3:85:3B:64:67:59:C3:3F:B1:7C:53:C9:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7963354CD1BDFFB3853B646759C33FB17C53C980.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/34352e37302e36362e302f32332d3233203d3e20323637353636.roa
Signing time:             Sat 09 Dec 2023 03:15:10 +0000
ROA not before:           Sat 09 Dec 2023 03:10:10 +0000
ROA not after:            Sat 07 Dec 2024 03:15:10 +0000
asID:                     267566
IP address blocks:        45.70.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9f:7d:86:83:36:6d:f3:92:46:db:9a:20:b1:fb:88:e7:1a:a9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7963354CD1BDFFB3853B646759C33FB17C53C980
        Validity
            Not Before: Dec  9 03:10:10 2023 GMT
            Not After : Dec  7 03:15:10 2024 GMT
        Subject: CN=84A1228068FA48B0F2205B123A1547D636C3C07D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ff:7d:38:17:60:e2:88:c4:91:88:8b:34:a2:
                    e5:64:cd:8c:02:67:cc:d6:75:99:b9:10:51:11:7b:
                    f5:0a:3d:f7:6f:09:04:1f:7c:47:69:1c:70:fc:47:
                    b5:6e:99:ce:0f:af:cc:e6:7b:d8:1f:02:58:89:60:
                    7d:ec:1e:56:7c:3b:10:11:60:36:ac:63:5b:20:33:
                    10:fc:03:fb:01:53:60:56:d3:1a:71:7a:7d:29:d4:
                    ce:35:48:7b:aa:18:b4:ac:5b:8a:c1:b6:3c:92:99:
                    49:ad:bd:22:be:85:6e:a9:f4:bb:81:f2:ad:8e:21:
                    81:85:01:13:a6:b4:cf:2b:8b:70:63:5a:b6:96:fb:
                    d1:46:bc:90:0a:7b:a9:63:9b:90:44:fb:83:8f:b1:
                    52:0f:4f:f6:74:74:29:6d:4c:d0:5b:5b:f6:bc:23:
                    7e:79:ca:f9:f3:44:3d:c8:e0:31:b5:88:78:13:4a:
                    9e:4b:16:f2:0d:24:f4:9d:bd:45:2e:70:6a:21:37:
                    4d:ad:07:2f:4c:6d:2d:4c:ca:96:3d:b6:f9:06:4e:
                    ae:7a:6b:a1:5c:d5:14:d5:7c:35:fb:ee:99:7c:92:
                    b3:d8:48:c2:ec:47:cc:63:e0:1e:cf:43:ff:72:f2:
                    1d:17:b5:a8:08:9e:6c:e0:6a:5e:a9:ce:97:4e:48:
                    42:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A1:22:80:68:FA:48:B0:F2:20:5B:12:3A:15:47:D6:36:C3:C0:7D
            X509v3 Authority Key Identifier:
                keyid:79:63:35:4C:D1:BD:FF:B3:85:3B:64:67:59:C3:3F:B1:7C:53:C9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/7963354CD1BDFFB3853B646759C33FB17C53C980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7963354CD1BDFFB3853B646759C33FB17C53C980.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzuvtricDrLiTUu81jm3eo21EVLrV6tTZdy5FmS6VvVo/0/34352e37302e36362e302f32332d3233203d3e20323637353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:1d:6f:98:5b:77:52:5e:c5:35:62:31:61:38:6f:f7:08:4f:
         e1:6c:a8:01:f9:01:09:92:c2:b9:8e:23:65:f4:14:de:fa:c0:
         13:d1:82:9c:99:c3:09:77:6a:e3:62:b0:9a:17:1c:6f:79:fd:
         7a:2e:49:95:5b:6e:a7:d5:d2:d8:8a:8a:28:2a:74:5f:8a:60:
         dc:e8:e0:07:ea:23:59:84:85:3a:ef:22:26:cb:50:b4:a9:96:
         bd:b9:15:da:82:55:66:56:86:ca:d6:87:bc:13:5c:28:02:a8:
         e8:76:2a:10:3d:a0:58:7d:ea:e8:e8:6e:38:a0:f2:c9:9a:4a:
         11:97:99:e2:a8:e8:4e:ac:db:a1:cf:f5:91:e6:61:97:e1:d3:
         e6:da:85:3d:e5:ed:2b:e3:51:0a:ea:0c:a1:43:85:bb:ad:e2:
         ad:81:3d:73:b4:c0:f3:dd:8e:db:78:3d:4d:9c:18:34:23:59:
         e0:24:eb:22:7d:b9:dc:43:11:04:4b:13:8b:2e:0a:fb:6a:ec:
         a4:6c:90:6e:02:7f:a9:e3:be:fd:c6:15:7f:e1:2d:2c:36:e5:
         05:f8:bb:2b:aa:f7:9b:0c:66:02:1b:3f:91:a3:b4:28:18:73:
         36:1a:20:a2:04:6c:89:53:56:9c:c8:9a:2b:26:fa:1d:05:99:
         49:4f:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org