Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37332e302f32342d3234203d3e20323637353533.roa
File:                     34352e37302e37332e302f32342d3234203d3e20323637353533.roa (raw, json)
Hash identifier:          uPHH0Kk/6k2qVNGICnzf92IR7Ns5/oo4ZE5Id1VMGfw=
Subject key identifier:   03:37:6F:70:1F:E4:43:6A:73:F9:F9:62:A8:4B:EB:9B:C6:86:F7:73
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       17137E5AB937293B51308A8DCEADEA0F0321D29D
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37332e302f32342d3234203d3e20323637353533.roa
Signing time:             Wed 25 Oct 2023 18:02:19 +0000
ROA not before:           Wed 25 Oct 2023 17:57:19 +0000
ROA not after:            Wed 23 Oct 2024 18:02:19 +0000
asID:                     267553
IP address blocks:        45.70.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:13:7e:5a:b9:37:29:3b:51:30:8a:8d:ce:ad:ea:0f:03:21:d2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 25 17:57:19 2023 GMT
            Not After : Oct 23 18:02:19 2024 GMT
        Subject: CN=03376F701FE4436A73F9F962A84BEB9BC686F773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:17:4b:79:f9:b2:56:e2:cd:e6:a9:6f:f4:
                    ea:2d:f3:00:7b:7b:f5:c4:10:be:9a:90:ad:2e:a5:
                    16:a2:55:84:68:df:c5:72:80:e6:d2:24:03:4b:2e:
                    f2:62:83:2f:30:aa:15:a8:76:d2:ba:df:fa:74:2d:
                    94:ea:43:95:84:ac:59:64:b1:c4:5d:19:f5:28:3f:
                    32:9c:71:e2:a0:23:ed:c3:c9:23:1d:0e:d9:29:46:
                    82:1a:f0:cc:f0:95:17:cb:79:82:e4:f7:43:d6:54:
                    7d:a3:ba:ef:02:73:5b:ff:1d:b1:a8:c9:c1:9b:ab:
                    20:89:c2:de:3d:d7:39:db:0a:6d:0e:92:d2:21:e7:
                    99:b3:cb:15:95:d1:98:ec:09:9b:d6:91:ab:a7:74:
                    ad:36:dc:6e:38:58:bb:52:84:32:b0:ea:c5:1a:e2:
                    b0:51:7f:9f:8c:3f:1c:c4:91:04:a0:2f:fc:68:cc:
                    e2:6b:32:f2:9e:d6:2b:11:6e:35:45:c5:88:15:04:
                    6e:af:0a:a4:41:4c:3c:51:a0:67:16:26:1b:da:58:
                    5c:3f:06:65:22:b8:6a:76:fc:9d:bd:cd:ce:3d:16:
                    aa:bf:6e:e6:b2:54:12:e3:20:a8:3d:be:9a:1a:92:
                    4e:de:b6:a2:85:00:4d:8f:5c:c1:5d:55:28:12:c0:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:37:6F:70:1F:E4:43:6A:73:F9:F9:62:A8:4B:EB:9B:C6:86:F7:73
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37332e302f32342d3234203d3e20323637353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:57:0e:67:a6:3f:f7:6b:f3:24:3a:58:52:1b:c7:bc:e3:29:
         3a:13:e9:6d:0a:27:43:8e:d6:58:76:ab:10:af:c6:bb:3d:15:
         a2:9b:92:55:fe:15:cb:72:58:02:2c:7d:0d:c9:47:41:a2:6e:
         f9:4b:76:bd:af:4b:ee:93:18:fc:86:8e:2f:e3:d8:fe:4b:36:
         48:79:20:20:43:37:51:32:df:15:78:18:c5:f1:e2:4d:fb:e6:
         6d:f8:93:91:63:31:92:b7:7f:4c:52:63:f9:03:d8:56:2f:c1:
         d8:31:f7:c3:9f:4b:6f:b7:5c:1b:5d:fb:e9:82:e4:e4:de:07:
         94:e6:a8:11:34:b3:7c:51:90:28:b3:36:e6:51:6c:0c:5d:53:
         cf:a9:6c:bc:84:32:fa:74:2d:1a:6d:2a:8b:1f:80:c0:fc:98:
         de:04:80:9f:42:21:86:50:57:da:e1:bf:40:db:52:81:fb:07:
         2c:35:89:62:cc:78:b4:04:a3:7b:8b:e7:41:27:78:b8:de:40:
         3c:25:d7:97:b2:40:40:97:d5:d2:6a:85:1a:54:ab:f6:15:11:
         43:53:c2:fe:b2:ce:22:95:87:c1:01:7d:6f:8c:74:b4:20:44:
         76:31:97:5c:69:9f:ef:3d:c7:01:fc:1b:af:22:fc:d3:4e:f3:
         8b:d3:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:14 2025 by rpki-client