Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36302e302f32342d3234203d3e20323638303533.roa
File:                     34352e3136372e36302e302f32342d3234203d3e20323638303533.roa (raw, json)
Hash identifier:          ANX0t088IyX7+iY9IjxcDzLv3MS7wsSr42CncdRINj8=
Subject key identifier:   B1:4F:D2:1F:CE:03:5E:56:25:55:49:92:6B:54:64:BB:12:F7:9F:F0
Certificate issuer:       /CN=60573234304A14834036D2BAAADE23EE1832BF5E
Certificate serial:       18EB45CA37B3BBF038FAB2704328F6B9729AD2D7
Authority key identifier: 60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36302e302f32342d3234203d3e20323638303533.roa
Signing time:             Sat 30 Mar 2024 01:18:17 +0000
ROA not before:           Sat 30 Mar 2024 01:13:17 +0000
ROA not after:            Sat 29 Mar 2025 01:18:17 +0000
asID:                     268053
IP address blocks:        45.167.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:eb:45:ca:37:b3:bb:f0:38:fa:b2:70:43:28:f6:b9:72:9a:d2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60573234304A14834036D2BAAADE23EE1832BF5E
        Validity
            Not Before: Mar 30 01:13:17 2024 GMT
            Not After : Mar 29 01:18:17 2025 GMT
        Subject: CN=B14FD21FCE035E56255549926B5464BB12F79FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f1:59:74:9e:14:6d:59:a2:e9:9b:2f:9f:99:
                    a8:9c:4c:32:03:f2:2c:76:66:17:29:54:94:02:38:
                    7d:a5:fe:c2:b5:41:b3:d9:c8:05:d2:9f:ad:ee:94:
                    df:d5:d8:fb:a8:a8:03:f5:f6:94:4b:6d:5e:b2:da:
                    63:d2:9f:7d:e8:29:4e:49:5b:00:e3:8f:91:62:79:
                    5c:57:4d:30:56:c3:b8:7e:02:c0:d9:b4:b5:ff:ec:
                    27:72:e5:cd:a0:0b:82:56:c1:3c:f8:30:8d:33:58:
                    a5:f2:73:61:08:ee:48:ee:97:49:00:3f:19:71:95:
                    9b:53:2e:4d:ad:ea:a2:54:b5:00:07:7d:05:5e:97:
                    c5:dc:28:10:ca:0a:47:24:a6:a4:ec:67:f1:2d:89:
                    04:dc:1a:f6:88:2e:ad:4c:44:2a:28:12:ee:80:28:
                    07:9f:2d:e9:50:69:b0:cf:40:88:b8:61:68:c0:de:
                    15:96:ad:f7:81:e5:a9:16:f8:41:15:2f:88:8e:66:
                    62:bf:e5:16:28:59:11:4b:5b:f7:0d:bb:c8:64:5f:
                    66:d1:1a:35:99:aa:b7:ca:87:f3:57:c3:cf:f1:26:
                    50:f5:7d:6b:4a:f7:b4:40:8e:3d:b6:62:11:6a:e3:
                    04:19:da:39:cf:fc:9b:8e:a3:c4:36:96:37:f8:2b:
                    a7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4F:D2:1F:CE:03:5E:56:25:55:49:92:6B:54:64:BB:12:F7:9F:F0
            X509v3 Authority Key Identifier:
                keyid:60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/60573234304A14834036D2BAAADE23EE1832BF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36302e302f32342d3234203d3e20323638303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:2c:7c:66:51:dc:d2:4f:75:9a:c6:f1:a9:d8:25:c5:53:
         6b:2e:9b:33:5b:ff:bc:20:eb:cd:a1:1d:a8:67:69:d4:1e:bc:
         53:ac:82:8e:da:fb:cd:86:22:16:89:f7:af:8b:44:be:64:0f:
         12:bf:80:a8:47:4a:06:ba:26:a1:43:af:8b:2e:9e:27:74:ff:
         78:8a:41:1b:d6:3d:b9:65:da:81:b4:e9:ad:94:ca:9e:5d:a4:
         24:f1:5e:da:df:c6:b7:a3:19:b5:9a:e4:e5:13:6a:bf:92:d0:
         d9:96:86:19:59:81:6d:a8:9b:7e:46:e5:f6:55:9d:6e:43:90:
         de:d6:df:9b:04:7a:9b:a9:b4:4d:48:70:c5:78:d8:11:4d:b4:
         61:39:a4:9d:5b:67:9a:0a:f0:43:2b:a3:26:39:3d:11:2e:59:
         95:d9:17:1f:07:5a:99:27:f7:63:ab:17:aa:cc:6b:14:9d:2f:
         d0:91:ea:1c:85:1c:a1:d4:1d:26:0f:76:54:62:a6:f6:6b:48:
         6d:cd:99:61:69:07:3f:d9:4b:7d:0d:41:10:db:42:c2:67:05:
         d4:7d:d7:7a:80:5c:36:da:85:21:65:69:fc:28:14:0e:f1:70:
         36:82:87:fd:22:6b:69:ce:7d:93:ab:e8:70:21:3d:38:53:ff:
         dd:2a:1f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org