Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3232203d3e20323637353533.roa
File:                     34352e37302e37322e302f32322d3232203d3e20323637353533.roa (raw, json)
Hash identifier:          EGdxKAADT+kYFl4Q3YnPWjSKvppU/3h2mnUZfhzCAzw=
Subject key identifier:   FA:42:80:58:54:B8:9D:22:BD:FE:22:6F:C3:39:C3:BA:48:7D:90:F8
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       63FD8124B39946E4D00CAFCBD91E43A8F4D607B5
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3232203d3e20323637353533.roa
Signing time:             Mon 23 Oct 2023 18:25:23 +0000
ROA not before:           Mon 23 Oct 2023 18:20:23 +0000
ROA not after:            Mon 21 Oct 2024 18:25:23 +0000
asID:                     267553
IP address blocks:        45.70.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fd:81:24:b3:99:46:e4:d0:0c:af:cb:d9:1e:43:a8:f4:d6:07:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 23 18:20:23 2023 GMT
            Not After : Oct 21 18:25:23 2024 GMT
        Subject: CN=FA42805854B89D22BDFE226FC339C3BA487D90F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:55:da:fa:55:35:19:3f:1d:a1:bd:16:20:
                    91:a4:8f:c1:1e:f1:00:c9:4c:23:bf:75:a3:c8:02:
                    a5:b8:ac:b3:4b:a9:82:1b:68:24:83:00:df:84:b4:
                    79:1f:2c:2f:c0:33:cb:95:d7:b8:b6:f1:fb:6e:04:
                    90:93:d4:f1:6d:92:04:20:2c:5a:35:09:59:5b:2f:
                    69:3f:9f:ff:72:4f:09:93:3f:39:59:73:a0:83:25:
                    7c:2f:0b:97:7b:6e:d3:85:60:3d:f5:15:39:51:04:
                    28:45:a3:c9:d7:7f:7d:a4:7a:f7:36:1f:0f:3d:f5:
                    42:9d:bb:9b:ca:b3:5c:fd:d4:df:f7:40:36:97:a0:
                    1f:3b:d1:5c:37:f9:d8:2f:d4:9d:8f:ab:96:65:d4:
                    4f:63:6c:91:cb:a4:32:77:a7:f9:0a:be:17:58:cf:
                    89:c6:2b:07:24:3a:cf:88:c3:d8:57:23:78:4f:17:
                    05:c4:fa:e6:65:71:14:53:5c:f4:94:2b:42:9f:ee:
                    00:c9:72:fa:7a:7e:40:88:00:63:5f:60:8a:69:b8:
                    00:cf:e0:44:dc:5b:2e:f7:86:78:1f:59:e3:6b:9e:
                    e3:1d:d8:86:16:c8:e6:85:95:09:82:42:d8:3b:fe:
                    9d:7b:82:3c:e9:81:3d:94:a2:cc:15:16:63:e6:72:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:42:80:58:54:B8:9D:22:BD:FE:22:6F:C3:39:C3:BA:48:7D:90:F8
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3232203d3e20323637353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:ed:27:c5:0a:e8:a2:5a:21:63:97:fb:d6:4e:a1:6a:8b:de:
         76:d1:f5:23:c9:de:93:67:cf:09:8e:8d:02:d4:e1:df:6c:db:
         ad:c0:cd:e4:fd:a4:15:4d:5f:0e:e6:22:40:b1:5c:d4:ee:a1:
         51:5b:90:a6:c9:28:fe:d9:69:4e:19:9f:53:d6:4f:72:62:1f:
         07:e1:78:48:6f:2e:ca:5d:c3:13:96:fa:aa:a4:91:9a:7a:d2:
         80:20:c9:01:e7:0e:1d:da:5c:22:eb:0f:76:57:74:cb:33:6a:
         a6:f0:ee:51:f1:b8:4e:1a:8c:e7:89:66:27:a8:9b:5a:3b:63:
         99:e9:8d:82:87:ab:e0:c5:c2:f5:a5:8c:6d:92:1d:63:bf:a7:
         5c:ad:59:72:ab:ec:3e:ef:b9:c0:f6:48:60:9b:55:7c:02:3b:
         34:3d:53:df:41:15:39:bb:ea:51:3d:09:eb:03:dd:e7:be:f6:
         c5:19:6d:f4:17:29:81:e6:59:f5:1b:c0:e2:61:e0:02:99:c2:
         63:64:cc:09:cb:20:67:80:72:81:af:c8:43:b2:55:09:8d:b9:
         eb:db:ec:6e:e2:16:52:3f:b1:5c:f6:9b:fe:47:5e:40:0a:06:
         f1:0c:d8:d7:ac:98:23:96:7a:28:eb:8a:44:b4:f0:c6:74:3e:
         37:82:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org