Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37342e302f32332d3233203d3e20323637353533.roa
File:                     34352e37302e37342e302f32332d3233203d3e20323637353533.roa (raw, json)
Hash identifier:          0hBEZuTLg+2PcQrMpo/P49uPNZodSSfMUxGAMaXo9Q8=
Subject key identifier:   C8:E3:B2:1E:68:91:8B:3B:63:A2:C9:46:07:83:AF:19:E4:45:82:6F
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       1D1003EBE897EC27B135CA2234AD8A8C76672865
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37342e302f32332d3233203d3e20323637353533.roa
Signing time:             Wed 25 Oct 2023 18:04:20 +0000
ROA not before:           Wed 25 Oct 2023 17:59:20 +0000
ROA not after:            Wed 23 Oct 2024 18:04:20 +0000
asID:                     267553
IP address blocks:        45.70.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:10:03:eb:e8:97:ec:27:b1:35:ca:22:34:ad:8a:8c:76:67:28:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 25 17:59:20 2023 GMT
            Not After : Oct 23 18:04:20 2024 GMT
        Subject: CN=C8E3B21E68918B3B63A2C9460783AF19E445826F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:15:9f:b7:a7:99:0d:70:65:a6:1f:45:c4:
                    7b:4f:fb:3c:c3:76:b2:a6:4d:34:51:01:a9:ac:d4:
                    2f:27:74:e3:4b:d3:e7:d8:b8:b4:be:69:90:04:e1:
                    cf:ca:6d:d8:41:78:05:d8:d0:71:84:ed:a0:a6:15:
                    8c:28:d4:3f:23:64:ee:0c:1b:d2:2d:51:cd:fd:00:
                    7c:57:9d:d5:a9:36:bf:f3:51:12:05:5a:2d:ab:19:
                    c4:81:27:41:07:74:20:0d:d1:20:54:10:54:fd:41:
                    e0:12:84:d9:08:d3:de:55:27:fa:a5:8a:58:01:01:
                    8c:2f:ad:1c:12:83:cd:79:2c:fc:76:fa:cf:35:dd:
                    7f:bb:40:41:1c:66:04:c8:5b:d4:43:4b:69:4f:25:
                    e9:36:04:b6:a2:f8:d1:40:14:0f:08:a7:e0:32:01:
                    fe:7c:22:b4:9c:85:30:60:31:5d:61:dc:a8:04:48:
                    ae:c3:0c:3f:c7:a2:18:c5:fa:cc:24:5d:69:2f:b1:
                    91:f6:fd:a6:52:87:4f:8b:eb:bf:02:58:93:8f:15:
                    6b:01:06:dc:fa:2a:19:68:ba:1f:9a:3d:c6:d8:c6:
                    c4:df:50:0c:6e:5f:f8:7f:e9:cc:96:5d:f9:91:e3:
                    60:87:d8:e4:da:11:20:6a:9a:a8:ff:cd:f2:9e:89:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E3:B2:1E:68:91:8B:3B:63:A2:C9:46:07:83:AF:19:E4:45:82:6F
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37342e302f32332d3233203d3e20323637353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:e7:6f:5b:70:f8:4a:b5:47:6a:6d:22:b2:ee:8e:e9:ae:
         ce:99:82:a7:e4:84:47:15:c6:76:0d:27:a7:36:94:d5:e8:dc:
         59:32:ee:c5:97:a3:5b:5b:c4:c3:20:d7:91:dc:62:07:95:46:
         05:a8:bc:5a:8b:c5:fa:4e:98:e4:96:e2:fc:ab:fe:82:35:da:
         e2:9f:96:7b:aa:f1:76:d6:69:54:46:4a:da:f7:72:7a:63:39:
         4d:5b:aa:e5:c4:77:d0:bf:8b:63:23:91:23:aa:d9:87:44:13:
         0c:20:9c:23:f6:99:58:47:ef:fb:f1:93:75:c4:ce:d4:20:77:
         8a:0c:e6:86:a0:77:2f:5d:c7:0e:73:90:64:9b:01:83:75:62:
         cb:6d:c1:b8:c8:f8:13:eb:d9:50:18:f3:98:90:ae:a5:08:58:
         e4:7d:7e:2e:52:3f:ce:af:4d:47:9c:a5:04:7e:4e:2b:32:33:
         80:a3:2e:65:20:ff:d8:46:aa:d2:55:8f:62:e0:0b:b5:20:df:
         d4:d6:a9:7b:e4:bf:c3:71:18:28:b6:81:0c:01:22:e0:a7:00:
         71:aa:4a:dd:55:7d:6d:65:44:99:24:a2:14:8e:ec:c4:80:7b:
         66:e0:66:69:84:15:d1:96:7d:5c:d6:b5:0a:6f:82:d2:2f:76:
         f6:cd:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org