Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36302e302f32322d3232203d3e20323638303533.roa
File:                     34352e3136372e36302e302f32322d3232203d3e20323638303533.roa (raw, json)
Hash identifier:          j7DhAiWBFIbj/WyfNuDnQg8x1puRjkcm5EyVsAggq4I=
Subject key identifier:   D4:1C:B5:2C:FF:A4:C6:EE:A2:51:43:2E:EC:5D:4D:DA:76:26:A8:FE
Certificate issuer:       /CN=60573234304A14834036D2BAAADE23EE1832BF5E
Certificate serial:       431C77770813201C8AAFCA08F72AC01862F6BB97
Authority key identifier: 60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36302e302f32322d3232203d3e20323638303533.roa
Signing time:             Sat 30 Mar 2024 01:18:30 +0000
ROA not before:           Sat 30 Mar 2024 01:13:30 +0000
ROA not after:            Sat 29 Mar 2025 01:18:30 +0000
asID:                     268053
IP address blocks:        45.167.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1c:77:77:08:13:20:1c:8a:af:ca:08:f7:2a:c0:18:62:f6:bb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60573234304A14834036D2BAAADE23EE1832BF5E
        Validity
            Not Before: Mar 30 01:13:30 2024 GMT
            Not After : Mar 29 01:18:30 2025 GMT
        Subject: CN=D41CB52CFFA4C6EEA251432EEC5D4DDA7626A8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6e:94:71:02:b2:f5:19:91:ef:67:22:b3:bb:
                    2d:e5:28:c0:ec:69:d2:53:2b:94:1c:e3:64:86:fb:
                    64:fd:a9:cb:f1:02:c3:29:46:9d:d1:7c:0c:9e:14:
                    86:8d:2a:f6:14:60:89:9e:6a:45:64:4b:f6:1e:50:
                    b5:e6:74:dc:f5:e5:67:f0:82:1c:62:1a:dd:c7:09:
                    01:81:67:9c:44:b5:91:ad:9c:61:b1:21:d4:43:0f:
                    0b:b0:4d:b7:d0:32:d6:17:0d:8a:89:42:51:26:b1:
                    46:c0:3e:bb:82:87:d1:32:6e:ad:50:2b:71:b1:44:
                    d2:23:c9:0f:b2:1c:e1:73:f2:76:ab:48:07:50:21:
                    ac:46:bb:63:24:9c:db:3e:23:0f:52:fe:5d:69:2b:
                    a7:70:bc:05:ff:e5:ec:e7:64:81:07:14:44:ca:d0:
                    5a:9d:04:a6:4b:d0:98:20:5f:17:43:3a:1c:37:a3:
                    fd:5f:90:ba:d3:40:56:73:f7:c1:e2:87:df:e0:df:
                    f6:8d:bd:ab:a7:23:e3:12:60:18:c1:4d:3c:ff:90:
                    f3:17:89:84:93:e8:05:60:c5:7e:a9:46:85:87:c1:
                    09:fc:01:0e:76:76:65:ee:23:27:76:33:e6:e7:51:
                    f8:83:60:67:50:87:6d:7a:2b:62:5a:b5:e1:19:3a:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1C:B5:2C:FF:A4:C6:EE:A2:51:43:2E:EC:5D:4D:DA:76:26:A8:FE
            X509v3 Authority Key Identifier:
                keyid:60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/60573234304A14834036D2BAAADE23EE1832BF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36302e302f32322d3232203d3e20323638303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:c3:9f:ec:87:b5:90:78:66:b5:c2:48:a8:81:1a:2c:e5:b4:
         c5:b8:b8:25:0a:56:cb:d6:81:27:ac:80:d4:57:89:6a:99:33:
         e2:0c:22:fa:85:dc:b9:cb:11:12:2a:98:1f:b2:06:2b:ac:0b:
         c1:ee:59:17:5b:fc:5c:bd:ce:40:c6:dc:81:35:14:b1:50:d0:
         13:26:12:10:fe:db:a9:d0:ae:8a:e6:c9:d3:88:35:29:70:9f:
         1a:0d:42:d2:af:8e:cd:c1:fb:4b:3c:34:92:b8:50:d7:67:ca:
         d5:d7:6c:37:cd:8c:f9:dd:f6:4b:1e:6b:29:62:fb:fc:2e:38:
         98:ed:13:97:e8:f8:4d:65:f2:32:19:3a:97:90:ad:76:7e:2e:
         3b:5b:b1:7f:81:8b:c9:6b:25:09:88:c0:b5:a7:ce:df:94:fe:
         41:98:ea:16:f1:97:4f:fe:d2:b4:ff:f3:6a:e0:52:77:bc:88:
         25:57:bb:4c:ad:0e:f9:68:ab:18:e9:71:a2:c0:05:78:e9:3f:
         dd:a0:ed:a3:e4:bb:cd:4d:c0:04:08:b7:07:55:b7:28:08:b7:
         38:90:40:5f:40:e4:c0:8c:7d:9d:0a:d9:9e:78:c6:32:96:45:
         72:cf:61:18:1b:64:9c:f3:03:bd:c7:49:c9:05:72:16:31:6e:
         20:e6:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org