Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36322e302f32342d3234203d3e20323638303533.roa
File:                     34352e3136372e36322e302f32342d3234203d3e20323638303533.roa (raw, json)
Hash identifier:          NLPh70W3aWx1UHoDprw6jjveFjUBtFNs2IQfOJFZ704=
Subject key identifier:   8D:EF:C2:EF:C0:41:BC:2A:69:F7:27:9A:4D:D5:F9:28:BA:8E:B1:F0
Certificate issuer:       /CN=60573234304A14834036D2BAAADE23EE1832BF5E
Certificate serial:       1E26E43FE2659D9B2AEE7B69A0E09559BAEB68B5
Authority key identifier: 60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36322e302f32342d3234203d3e20323638303533.roa
Signing time:             Sat 30 Mar 2024 01:18:17 +0000
ROA not before:           Sat 30 Mar 2024 01:13:17 +0000
ROA not after:            Sat 29 Mar 2025 01:18:17 +0000
asID:                     268053
IP address blocks:        45.167.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:26:e4:3f:e2:65:9d:9b:2a:ee:7b:69:a0:e0:95:59:ba:eb:68:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60573234304A14834036D2BAAADE23EE1832BF5E
        Validity
            Not Before: Mar 30 01:13:17 2024 GMT
            Not After : Mar 29 01:18:17 2025 GMT
        Subject: CN=8DEFC2EFC041BC2A69F7279A4DD5F928BA8EB1F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:1a:1a:4d:2c:ba:1f:80:6b:78:52:c9:e2:
                    2a:38:7a:ac:97:0b:31:d3:65:9c:e0:0b:8c:6b:97:
                    75:75:7d:8c:f9:ce:11:73:e7:75:fd:6a:44:6e:f0:
                    d9:5b:f0:03:79:1e:87:29:7c:50:e8:f9:cd:ce:7b:
                    3f:ef:9e:e6:c1:8e:50:37:f6:db:e8:31:64:9e:69:
                    f7:97:f9:a9:9e:4c:01:c1:f2:b9:a0:d0:e3:dc:28:
                    be:a9:b2:15:e1:60:65:ea:c0:bc:35:2b:ee:cb:5a:
                    5b:78:a6:8e:a1:a1:e9:ba:e6:16:e8:91:61:3c:51:
                    b1:d2:c7:e9:fd:99:2f:6b:c4:74:2f:98:4b:3c:89:
                    7d:a1:d3:b1:a3:c1:a6:21:ed:05:1d:8b:24:3c:62:
                    80:af:a3:22:fc:84:d0:3e:f0:01:d2:06:62:12:75:
                    f8:b4:d1:4d:dc:fe:03:de:64:91:4d:bb:dc:23:9f:
                    00:da:bf:76:37:35:0e:d1:e9:df:60:56:1c:15:2f:
                    91:7c:2d:6d:18:89:04:79:f2:2a:df:cd:07:0e:5f:
                    c3:8e:6d:88:d5:2e:94:74:3e:28:21:d2:7b:60:5f:
                    66:04:f8:e2:40:aa:84:8c:d7:2e:a2:85:ef:b8:0c:
                    b9:95:15:ab:ab:e0:3f:22:43:03:fa:d2:80:67:e3:
                    c6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EF:C2:EF:C0:41:BC:2A:69:F7:27:9A:4D:D5:F9:28:BA:8E:B1:F0
            X509v3 Authority Key Identifier:
                keyid:60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/60573234304A14834036D2BAAADE23EE1832BF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36322e302f32342d3234203d3e20323638303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:c1:9b:67:bd:52:cb:23:98:85:ab:e9:0b:f7:4e:97:52:09:
         c6:d4:63:22:40:22:45:0f:a7:59:0a:f3:97:65:a2:49:c3:b8:
         22:e5:1c:69:40:42:dc:b0:0e:0c:31:9c:c4:59:c3:27:db:bb:
         4f:c1:fd:28:9a:3f:f0:90:20:11:d2:05:55:04:32:fd:92:bc:
         af:1b:ba:f7:55:dc:c1:d5:22:85:28:2c:8a:23:60:0a:7a:ee:
         89:c5:6a:66:e2:8f:7a:d9:34:6f:c8:03:08:91:b8:32:d6:18:
         fb:e1:a1:c6:3e:e7:7b:25:7d:9b:14:d5:6e:7a:eb:34:49:be:
         9d:e6:b6:55:c9:b5:74:15:b8:83:8e:fb:11:1f:c3:4e:55:ea:
         28:f4:c4:67:f5:a5:79:0f:e9:65:ce:cd:c6:9a:9f:49:90:1a:
         2f:ab:e5:67:c2:0c:23:b3:01:30:03:62:a0:c5:fd:23:70:a5:
         ca:66:56:da:33:7b:b9:f8:15:f8:e8:05:cb:28:94:2f:f4:47:
         87:f3:b8:99:ae:63:3c:b6:4b:76:a0:54:8b:bd:2a:8a:ff:f7:
         5d:1b:3e:6e:c6:fb:a1:ca:16:18:07:7e:81:c6:e6:61:a0:67:
         d2:79:5f:90:5f:a7:cd:cb:73:73:3b:7f:00:67:73:52:f5:a6:
         72:4f:9e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:05 2024 by rpki-client on console-ams.rpki-client.org