Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32332d3233203d3e20323637353533.roa
File:                     34352e37302e37322e302f32332d3233203d3e20323637353533.roa (raw, json)
Hash identifier:          CRsKSjrdi3JWfFJPLvjnzX7gkKXhLnKXwTVBY6xGSpw=
Subject key identifier:   CB:0E:04:70:0F:81:99:5C:A9:70:B3:0B:F8:6C:51:00:DB:3B:7D:FE
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       4E86A83F5D55F832468D60DC587C7EE0BCB6D2F6
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32332d3233203d3e20323637353533.roa
Signing time:             Wed 25 Oct 2023 18:04:02 +0000
ROA not before:           Wed 25 Oct 2023 17:59:02 +0000
ROA not after:            Wed 23 Oct 2024 18:04:02 +0000
asID:                     267553
IP address blocks:        45.70.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:86:a8:3f:5d:55:f8:32:46:8d:60:dc:58:7c:7e:e0:bc:b6:d2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 25 17:59:02 2023 GMT
            Not After : Oct 23 18:04:02 2024 GMT
        Subject: CN=CB0E04700F81995CA970B30BF86C5100DB3B7DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:63:ea:7a:c1:78:c8:bd:89:0e:1e:23:ce:12:
                    c5:b1:ef:e0:67:fc:9d:b5:f5:7e:a9:d7:f6:b4:7c:
                    2f:17:d8:ce:6a:75:50:53:cd:96:d7:5f:7d:2c:19:
                    88:b2:be:45:57:8b:f1:4f:ee:ab:6c:40:5f:4f:70:
                    87:5f:f5:b1:53:f4:6f:e2:a6:49:b8:1b:3b:f3:99:
                    2b:33:e6:73:4d:76:01:79:a1:c7:db:e5:cd:18:aa:
                    a4:bc:6a:2c:a8:a7:c7:47:87:b2:52:da:49:db:b0:
                    1b:79:c3:a0:14:2c:1f:cf:e0:59:86:9e:fd:01:56:
                    58:df:08:d4:3e:c3:b3:92:2f:c5:fc:43:a7:78:ea:
                    3d:21:b7:58:68:9f:5f:97:25:8d:b0:82:f1:65:3c:
                    3c:96:4c:77:0e:cc:69:02:c3:62:4b:21:f5:40:06:
                    3e:8a:3b:ea:5f:21:14:50:46:70:94:5f:e0:da:52:
                    66:71:e8:28:e4:89:42:14:ed:92:47:7c:6f:fa:70:
                    78:2b:eb:b7:17:2d:46:6e:3a:62:5c:7b:42:d6:61:
                    a2:c9:bb:7f:2a:1c:9e:f5:a8:18:41:4c:4d:4a:ec:
                    b0:44:44:d9:56:cf:94:40:37:dc:70:8c:4c:37:28:
                    b9:2d:78:fd:b0:e7:ad:b7:8a:43:59:58:0a:6d:6b:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0E:04:70:0F:81:99:5C:A9:70:B3:0B:F8:6C:51:00:DB:3B:7D:FE
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32332d3233203d3e20323637353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:4a:8e:ab:d4:37:09:2a:94:0b:21:cc:fb:b7:59:2b:de:19:
         14:8e:cd:05:5f:f6:83:42:f3:36:3f:4b:85:c3:a1:e2:68:1c:
         02:b3:b7:7d:17:7b:d0:65:82:06:fd:68:92:83:c6:b4:5a:20:
         c5:10:2c:2c:4d:b4:2f:d3:ff:28:f7:71:6c:42:cf:26:32:94:
         b4:4e:bd:c8:bb:50:88:cf:bb:7d:93:97:50:7f:e6:62:4e:35:
         37:1a:a9:53:08:99:f4:c4:e2:a7:5e:40:1f:12:57:a3:b6:2f:
         a6:8e:71:39:0a:94:62:bd:2d:3f:2e:86:dd:a4:2e:35:34:b5:
         59:75:ef:b7:5c:d9:ef:00:2b:15:4c:10:37:fe:f0:9b:fd:6d:
         20:8d:7c:8b:67:19:69:8b:5e:8a:63:2b:fd:1b:d2:84:e4:81:
         66:10:05:45:bc:c5:5e:ad:5a:f0:ac:5e:3d:55:20:aa:75:cd:
         ac:f8:1d:1d:18:71:c9:78:3f:c2:32:a1:11:f2:9c:9e:3b:f1:
         63:0a:51:c1:73:99:4a:8e:b9:ba:ec:c0:77:18:95:3d:ac:da:
         32:5d:79:26:88:1d:67:a8:42:4d:69:13:ff:cf:98:47:22:b7:
         96:13:53:cc:ae:df:29:08:11:4d:b6:3f:ba:0f:db:a9:38:0a:
         ca:cb:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org