Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32342d3234203d3e20323637353533.roa
File:                     34352e37302e37322e302f32342d3234203d3e20323637353533.roa (raw, json)
Hash identifier:          h04L/vyFExOVXenmRH+G+tUHo85uiwzayBSOw6hLYq8=
Subject key identifier:   1C:B2:B0:7D:6F:EF:A8:62:BE:AF:5A:6E:79:8C:DE:0B:7C:68:7A:2B
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       1F085798C1152D38876DDBE3864984E60165DC27
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32342d3234203d3e20323637353533.roa
Signing time:             Wed 25 Oct 2023 18:01:49 +0000
ROA not before:           Wed 25 Oct 2023 17:56:49 +0000
ROA not after:            Wed 23 Oct 2024 18:01:49 +0000
asID:                     267553
IP address blocks:        45.70.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:08:57:98:c1:15:2d:38:87:6d:db:e3:86:49:84:e6:01:65:dc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 25 17:56:49 2023 GMT
            Not After : Oct 23 18:01:49 2024 GMT
        Subject: CN=1CB2B07D6FEFA862BEAF5A6E798CDE0B7C687A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:c9:ce:6f:4e:f8:fa:8c:e8:37:cd:6f:fa:
                    19:6e:e2:f4:7a:4b:10:dc:5b:10:7d:49:be:e1:a5:
                    9f:cb:66:eb:87:28:59:f3:78:07:6a:a5:3c:dc:15:
                    34:33:f0:bb:47:4a:ef:f8:ed:37:14:91:e0:cf:e7:
                    7d:93:e9:8e:d3:86:02:52:2e:82:d4:a0:b7:34:23:
                    5b:a4:b1:db:fa:43:2c:dd:30:23:d4:7b:d0:be:eb:
                    33:79:fd:96:c3:88:b8:1a:22:0c:85:1c:d5:c4:1b:
                    1a:fa:1d:4d:ca:5a:70:6b:a1:5b:2c:6e:56:f8:d2:
                    04:41:b7:5a:fe:ae:88:75:6b:01:10:9c:42:08:68:
                    d6:17:9e:d8:8e:c7:16:d1:c0:fa:fe:d7:35:49:87:
                    61:86:73:4e:7c:60:91:d6:1a:2d:5b:f0:09:7f:98:
                    44:fc:2e:a3:9e:4f:75:8b:91:83:89:0d:e6:2e:7f:
                    e6:ad:19:c1:4e:d0:86:12:fd:03:3c:24:89:84:74:
                    84:08:f7:d9:98:04:e6:64:2a:05:90:f4:c6:5d:a5:
                    e7:54:b2:49:d7:b3:84:f2:f3:ba:46:5f:23:25:39:
                    fb:73:ac:81:06:a2:6b:7a:b4:af:40:c5:e5:f3:a9:
                    b1:d6:0d:b9:1f:53:51:da:e5:3a:94:1f:3c:28:86:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B2:B0:7D:6F:EF:A8:62:BE:AF:5A:6E:79:8C:DE:0B:7C:68:7A:2B
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32342d3234203d3e20323637353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ef:b5:86:b9:b1:c1:9d:31:fe:b9:2c:c4:29:0c:3b:56:7b:
         35:73:a1:e4:43:dc:99:1e:17:7f:b0:99:0b:0a:0b:a7:06:ad:
         6c:42:e4:26:25:18:bc:23:02:90:50:c6:a9:fd:74:1c:c1:d5:
         cf:ba:33:15:4d:8a:e2:31:29:e1:79:75:9c:74:71:2d:e3:5d:
         b6:39:fa:bf:32:da:11:77:b3:d0:aa:60:f5:54:e1:b1:07:6d:
         3e:8c:aa:34:7f:1c:c1:d8:3f:eb:8f:d5:d1:32:2a:76:74:73:
         1f:4c:1c:84:78:19:3e:e9:77:ad:2c:d4:26:35:b1:ab:10:fb:
         81:d8:2c:b0:09:05:fa:bc:1b:e4:54:46:e0:0a:1e:3c:b8:d5:
         f4:41:ba:10:1b:8d:5c:76:33:e2:5a:c6:94:ca:85:6f:3a:07:
         22:a5:62:c0:16:04:9e:87:5f:27:e1:cd:aa:4a:84:cb:38:88:
         70:fc:c1:af:78:fa:04:6c:04:2d:b9:72:28:99:51:d9:f7:7f:
         95:1f:46:bd:43:40:7a:b3:09:84:b1:c0:83:2e:3b:97:9d:64:
         89:87:19:9e:e1:46:7b:1b:b8:40:96:91:0c:6e:e0:48:0d:32:
         34:a8:22:bf:1f:98:d4:63:5b:52:76:bb:d9:ce:f3:22:4a:e1:
         ba:d2:38:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org