Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36302e302f32332d3233203d3e20323638303533.roa
File:                     34352e3136372e36302e302f32332d3233203d3e20323638303533.roa (raw, json)
Hash identifier:          i45NVsOk++23UhE3eornL8k4xwBtkRwiAxvqw/H/Ruw=
Subject key identifier:   87:A5:16:B5:8D:DA:88:F1:05:F4:2D:AD:47:FB:C5:DC:D2:FE:6D:79
Certificate issuer:       /CN=60573234304A14834036D2BAAADE23EE1832BF5E
Certificate serial:       18D4EB822962AB0A66B9160075E7566C67417ACA
Authority key identifier: 60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36302e302f32332d3233203d3e20323638303533.roa
Signing time:             Sat 30 Mar 2024 01:18:17 +0000
ROA not before:           Sat 30 Mar 2024 01:13:17 +0000
ROA not after:            Sat 29 Mar 2025 01:18:17 +0000
asID:                     268053
IP address blocks:        45.167.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d4:eb:82:29:62:ab:0a:66:b9:16:00:75:e7:56:6c:67:41:7a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60573234304A14834036D2BAAADE23EE1832BF5E
        Validity
            Not Before: Mar 30 01:13:17 2024 GMT
            Not After : Mar 29 01:18:17 2025 GMT
        Subject: CN=87A516B58DDA88F105F42DAD47FBC5DCD2FE6D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:7f:36:69:00:5b:87:40:81:e1:7f:36:9d:
                    5b:ee:15:4a:74:f1:d1:13:67:ca:14:ca:4d:a1:ac:
                    44:9d:48:a3:6a:41:3a:67:bb:99:4d:1c:af:7d:b8:
                    39:1d:21:44:d8:ab:1e:9a:4f:dc:e2:ec:d1:9b:a8:
                    5e:9c:ff:9f:2b:0d:7a:19:29:22:36:86:78:01:c8:
                    28:8c:a5:62:3b:08:e6:05:a2:dc:c7:fa:d0:bd:6a:
                    cc:51:ff:11:a2:f5:22:67:0d:57:72:0e:de:e5:60:
                    3d:2c:f1:32:15:6e:4f:88:a9:20:cd:0b:62:5b:22:
                    1f:b2:d4:00:07:61:07:87:b6:64:42:ac:c3:9c:45:
                    7b:00:68:d2:55:df:bc:2c:4b:c2:30:88:20:09:74:
                    43:a0:e8:b5:92:12:f9:53:80:d3:66:af:f9:ec:e3:
                    e5:da:cf:6b:90:1a:e2:76:bc:f4:e6:73:76:cc:54:
                    7b:7e:ec:47:6f:58:6b:f6:95:f1:e1:7a:1b:de:6f:
                    e6:59:0c:e8:0f:a1:f5:a2:f5:83:98:e1:8f:31:1b:
                    0a:c4:23:93:08:d5:25:1c:e7:87:9a:f4:03:be:db:
                    65:6e:cf:9d:4f:ed:3b:bb:64:56:24:08:a5:33:39:
                    69:fb:1e:36:ac:19:0f:f0:5c:47:17:ac:b6:f5:cd:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A5:16:B5:8D:DA:88:F1:05:F4:2D:AD:47:FB:C5:DC:D2:FE:6D:79
            X509v3 Authority Key Identifier:
                keyid:60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/60573234304A14834036D2BAAADE23EE1832BF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36302e302f32332d3233203d3e20323638303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:7c:0a:ca:c6:e3:ff:51:dc:91:f5:1c:11:32:d2:f5:ff:9c:
         72:bc:ec:83:bf:b7:e6:10:e2:5d:4c:23:2d:ad:29:b1:43:89:
         bf:f6:5d:d9:6c:2b:7a:fb:7b:62:11:07:33:7b:d3:8d:f4:df:
         fd:39:90:e0:62:db:be:d8:e5:82:42:ff:a1:5e:89:20:98:c9:
         b4:58:8c:1c:e5:24:3f:06:44:0d:76:4a:23:10:28:22:10:91:
         37:3c:5b:4e:27:43:92:8f:6d:cf:0a:9a:71:62:38:7b:36:08:
         bf:0f:5b:9e:31:07:01:c9:69:de:96:71:aa:b7:94:75:fd:f3:
         fd:2e:2a:a6:7c:cc:36:27:98:cf:2f:d1:c7:fb:41:5d:41:ae:
         ca:a7:be:a2:af:f6:4c:a7:ca:69:82:05:ba:46:e9:d2:0d:f5:
         ee:3d:d5:68:20:26:37:97:5c:d1:d1:7e:82:85:d6:c4:ab:86:
         30:bb:46:cc:39:35:70:1d:ff:35:84:89:cc:f6:12:05:8f:9d:
         f9:b8:da:19:ae:35:2c:fc:da:35:16:f4:4b:22:41:73:b2:6c:
         43:bc:7a:1b:b2:db:20:f5:01:37:6c:ea:bc:10:e5:79:b2:a8:
         de:8e:7e:f9:49:79:40:0e:3e:ba:cd:5f:a9:39:48:31:ef:93:
         aa:d8:18:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org