Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37342e302f32342d3234203d3e20323637353533.roa
File:                     34352e37302e37342e302f32342d3234203d3e20323637353533.roa (raw, json)
Hash identifier:          r9+egUvNhpi29uipe4nZhjzTG0wd/QuG3p7g78QloxE=
Subject key identifier:   F6:3E:E5:94:E1:6E:1E:B2:4B:83:E4:8F:EC:04:17:3A:FC:BB:C5:D3
Certificate issuer:       /CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
Certificate serial:       68DF4A9F6D304E07EEB6912B8E7F5F5973932A31
Authority key identifier: 66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37342e302f32342d3234203d3e20323637353533.roa
Signing time:             Wed 25 Oct 2023 18:02:39 +0000
ROA not before:           Wed 25 Oct 2023 17:57:39 +0000
ROA not after:            Wed 23 Oct 2024 18:02:39 +0000
asID:                     267553
IP address blocks:        45.70.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:df:4a:9f:6d:30:4e:07:ee:b6:91:2b:8e:7f:5f:59:73:93:2a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3
        Validity
            Not Before: Oct 25 17:57:39 2023 GMT
            Not After : Oct 23 18:02:39 2024 GMT
        Subject: CN=F63EE594E16E1EB24B83E48FEC04173AFCBBC5D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:53:25:f1:38:27:48:12:7e:35:ae:77:5b:
                    63:46:32:78:97:dd:82:c6:18:be:30:4e:f2:24:9d:
                    52:9b:d7:04:97:55:d1:eb:9b:da:87:aa:3a:23:77:
                    aa:29:c5:09:00:c4:25:45:0f:09:03:9d:3d:5e:d1:
                    77:86:7d:2d:5f:a3:fd:ae:ac:a6:24:61:b5:85:17:
                    37:3a:46:71:61:b3:e9:34:18:1e:65:2c:b7:29:ae:
                    ce:e3:ea:c9:88:7d:9b:b2:87:5d:1f:10:c5:b2:8c:
                    3a:65:1a:8c:8c:f9:5f:ea:f6:b1:2c:42:80:ee:a8:
                    e7:4a:c1:57:d6:9a:9b:f5:f8:9b:92:81:97:99:b8:
                    24:24:7f:0c:20:57:6f:d7:23:50:15:9b:02:47:aa:
                    5b:ee:e7:54:30:e6:f7:a3:44:0d:bd:83:64:78:f4:
                    38:86:a6:53:c7:3e:75:31:fb:75:74:83:70:58:df:
                    47:fd:a3:9f:c7:4f:9c:43:38:04:55:6d:32:2b:32:
                    0d:f8:98:90:d9:7c:75:bc:99:56:cb:df:75:86:43:
                    82:b0:c2:38:ea:d7:5d:11:08:ce:6c:6b:36:11:4b:
                    d3:2b:6c:a3:02:f6:5a:6a:01:e9:8e:1f:72:68:f5:
                    cc:1a:04:4b:b0:17:6f:b0:31:b8:7d:0c:19:70:1b:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3E:E5:94:E1:6E:1E:B2:4B:83:E4:8F:EC:04:17:3A:FC:BB:C5:D3
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:F4:7E:AA:40:A6:AB:C0:E1:EE:29:D0:3B:4D:90:69:04:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EC78F47EAA40A6ABC0E1EE29D03B4D906904A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37342e302f32342d3234203d3e20323637353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:34:0a:b3:8a:90:7d:27:f6:7f:ff:49:a7:47:7b:e4:34:f1:
         4c:02:90:24:f1:4a:32:4e:2e:f7:3d:d0:dd:b4:00:c9:9e:d5:
         1b:11:c5:74:21:87:e2:cd:e0:89:60:de:fd:9a:6b:fb:c4:04:
         03:5c:00:11:59:93:b0:00:00:c8:36:00:7c:79:16:38:3b:4a:
         a8:70:15:7d:42:3a:4f:5c:36:0f:b1:fd:e7:3d:d6:e9:c2:9a:
         93:36:c6:5f:29:e7:57:fc:d4:ae:42:86:3f:c3:b7:ab:b2:b6:
         5e:99:47:f9:fb:14:7f:71:12:45:50:ff:41:36:da:f6:22:ae:
         f4:c8:c8:2a:92:ab:38:4a:22:47:e5:c6:85:f6:d9:f7:61:c1:
         29:0a:e3:b5:af:c9:42:bd:74:84:a0:6c:e1:0c:39:3f:78:82:
         ec:bd:c8:f4:ca:70:d4:32:10:6e:e6:eb:80:e7:53:bc:96:61:
         29:7c:41:23:b7:08:a2:a4:2c:32:41:1e:b5:08:f8:a9:7d:c6:
         10:6f:f4:2d:1d:4f:3a:e6:f8:ae:af:94:f2:fa:fc:33:27:de:
         e5:02:4c:2a:35:5f:28:38:da:23:25:f1:c9:6a:e3:0c:54:a1:
         fc:44:9b:76:02:32:9e:7d:a9:c8:8d:80:01:4f:cf:20:c2:1f:
         d3:40:dc:6d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaN9Kn20wTgfutpErjn9fWXOTKjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZFQzc4RjQ3RUFBNDBBNkFCQzBFMUVFMjlEMDNCNEQ5
MDY5MDRBMzAeFw0yMzEwMjUxNzU3MzlaFw0yNDEwMjMxODAyMzlaMDMxMTAvBgNV
BAMTKEY2M0VFNTk0RTE2RTFFQjI0QjgzRTQ4RkVDMDQxNzNBRkNCQkM1RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/eFMl8TgnSBJ+Na53W2NGMniX
3YLGGL4wTvIknVKb1wSXVdHrm9qHqjojd6opxQkAxCVFDwkDnT1e0XeGfS1fo/2u
rKYkYbWFFzc6RnFhs+k0GB5lLLcprs7j6smIfZuyh10fEMWyjDplGoyM+V/q9rEs
QoDuqOdKwVfWmpv1+JuSgZeZuCQkfwwgV2/XI1AVmwJHqlvu51Qw5vejRA29g2R4
9DiGplPHPnUx+3V0g3BY30f9o5/HT5xDOARVbTIrMg34mJDZfHW8mVbL33WGQ4Kw
wjjq110RCM5sazYRS9MrbKMC9lpqAemOH3Jo9cwaBEuwF2+wMbh9DBlwG3dRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU9j7llOFuHrJLg+SP7AQXOvy7xdMwHwYDVR0j
BBgwFoAUZux49H6qQKarwOHuKdA7TZBpBKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNZS2tLSkhLMmpCYVFRTWRWZFc5cm4zcnZWeDlmc04xaTJzbWZlWExi
RXcvMC82NkVDNzhGNDdFQUE0MEE2QUJDMEUxRUUyOUQwM0I0RDkwNjkwNEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY2RUM3OEY0N0VBQTQwQTZB
QkMwRTFFRTI5RDAzQjREOTA2OTA0QTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTWUtrS0pISzJqQmFRUU1kVmRXOXJuM3J2Vng5ZnNOMWkyc21mZVhMYkV3LzAv
MzQzNTJlMzczMDJlMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM1
MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC1GSjANBgkqhkiG9w0BAQsFAAOCAQEARjQKs4qQfSf2
f/9Jp0d75DTxTAKQJPFKMk4u9z3Q3bQAyZ7VGxHFdCGH4s3giWDe/Zpr+8QEA1wA
EVmTsAAAyDYAfHkWODtKqHAVfUI6T1w2D7H95z3W6cKakzbGXynnV/zUrkKGP8O3
q7K2XplH+fsUf3ESRVD/QTba9iKu9MjIKpKrOEoiR+XGhfbZ92HBKQrjta/JQr10
hKBs4Qw5P3iC7L3I9Mpw1DIQbubrgOdTvJZhKXxBI7cIoqQsMkEetQj4qX3GEG/0
LR1POub4rq+U8vr8Myfe5QJMKjVfKDjaIyXxyWrjDFSh/ESbdgIynn2pyI2AAU/P
IMIf00DcbQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org