Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36312e302f32342d3234203d3e20323638303533.roa
File:                     34352e3136372e36312e302f32342d3234203d3e20323638303533.roa (raw, json)
Hash identifier:          8y14wvuBd/j3sHTJT7GxaIIuP7z90bb+7mSmP9xY+Bk=
Subject key identifier:   5A:7B:61:88:59:12:B7:C1:B7:5B:2F:0B:AA:EB:6B:1D:AC:41:8B:DA
Certificate issuer:       /CN=60573234304A14834036D2BAAADE23EE1832BF5E
Certificate serial:       0DD650EB45A954B4794377538140977AD046DA41
Authority key identifier: 60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36312e302f32342d3234203d3e20323638303533.roa
Signing time:             Sat 30 Mar 2024 01:18:18 +0000
ROA not before:           Sat 30 Mar 2024 01:13:18 +0000
ROA not after:            Sat 29 Mar 2025 01:18:18 +0000
asID:                     268053
IP address blocks:        45.167.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d6:50:eb:45:a9:54:b4:79:43:77:53:81:40:97:7a:d0:46:da:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60573234304A14834036D2BAAADE23EE1832BF5E
        Validity
            Not Before: Mar 30 01:13:18 2024 GMT
            Not After : Mar 29 01:18:18 2025 GMT
        Subject: CN=5A7B61885912B7C1B75B2F0BAAEB6B1DAC418BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:85:4c:1e:bd:30:b1:64:db:60:3b:04:95:
                    0e:66:6b:3e:41:db:2b:6f:85:2b:8e:d2:04:47:92:
                    03:98:30:4c:e3:3f:03:3e:a0:69:aa:25:39:5a:8d:
                    d8:54:35:31:1a:b0:72:03:fc:26:42:de:61:46:e7:
                    80:c7:e4:aa:ee:54:4e:fe:23:31:1e:13:64:f2:99:
                    ae:e5:76:85:54:f7:12:72:8b:00:0e:ab:35:a6:25:
                    14:7a:d2:15:06:25:ba:be:1c:91:1c:d6:2c:d5:cb:
                    5c:47:9d:76:7c:77:17:a2:96:13:84:71:55:39:71:
                    8c:71:18:66:de:1e:db:2b:14:4f:a9:f8:7f:03:93:
                    02:46:d9:b5:da:84:cd:35:d4:f9:7a:ea:ef:42:b0:
                    6f:1e:b8:61:99:46:10:38:a1:43:f3:e0:c3:5b:b1:
                    28:a1:66:bb:ef:e3:16:91:8d:00:8f:02:fa:1d:38:
                    65:6d:0a:61:63:85:5f:41:36:bb:2f:c2:7a:dc:68:
                    54:33:3a:8a:38:6a:05:0f:bb:01:5e:34:3f:f3:0e:
                    e7:ae:b8:0a:87:2a:17:57:ac:f5:12:94:c1:46:37:
                    0a:6d:1d:83:27:e7:6a:66:ed:8c:59:b6:03:b0:bd:
                    16:5c:4e:3a:dd:93:3f:20:b4:d4:19:cb:c1:c0:42:
                    96:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7B:61:88:59:12:B7:C1:B7:5B:2F:0B:AA:EB:6B:1D:AC:41:8B:DA
            X509v3 Authority Key Identifier:
                keyid:60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/60573234304A14834036D2BAAADE23EE1832BF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36312e302f32342d3234203d3e20323638303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:a1:5a:a8:6f:61:96:f4:1a:d0:24:45:dc:20:12:dd:6e:75:
         ff:4f:ff:5c:9d:16:94:dc:f4:b2:f5:f8:f0:b8:b2:2b:b6:46:
         1c:1d:cf:9d:cf:60:9b:10:63:d6:81:e0:2a:80:80:cb:45:43:
         d5:bf:fe:2d:2b:cf:de:33:eb:8b:60:a0:9d:e9:d5:28:b1:0a:
         cf:df:fe:18:e4:fd:8f:94:49:61:c3:f0:fc:23:47:ca:b1:24:
         c4:f9:6d:49:b7:18:6a:da:c1:94:25:2d:b2:a3:cf:06:d0:b0:
         a9:b7:7d:61:57:be:94:7f:ac:97:1e:62:43:93:4b:8b:08:4d:
         e5:bd:2e:74:0d:59:a0:b0:d5:d1:f1:f8:21:73:d2:1d:92:38:
         ce:8e:13:74:4d:bd:00:98:d5:2e:50:5b:7f:4d:23:a9:70:a6:
         79:7c:b0:af:87:2f:ff:b9:b8:a9:17:87:f1:eb:f2:70:9c:fe:
         15:4d:27:b1:f7:ab:a3:ec:3a:18:6f:4f:86:0a:d3:de:4d:b1:
         19:cf:b3:01:ee:a8:a4:9c:78:04:37:f3:8f:ec:84:ef:a1:f1:
         3f:de:a7:66:ed:32:a3:a8:f7:5e:7c:ee:47:62:38:c4:f5:ab:
         a4:87:8a:7e:6e:0a:e9:e5:2e:03:80:bf:d6:ec:8a:fb:e4:0e:
         7f:aa:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org