Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36332e302f32342d3234203d3e20323638303533.roa
File:                     34352e3136372e36332e302f32342d3234203d3e20323638303533.roa (raw, json)
Hash identifier:          z+s60H3cS3aDwdafSGdj8r0O4KjavModFpllvWIAoK0=
Subject key identifier:   6E:CB:4E:D1:4F:AC:97:64:40:4A:FE:A5:B5:D5:64:F9:4C:4E:E2:EE
Certificate issuer:       /CN=60573234304A14834036D2BAAADE23EE1832BF5E
Certificate serial:       5D3D6B24C466F4CC7712B143923743C1620E9FD5
Authority key identifier: 60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36332e302f32342d3234203d3e20323638303533.roa
Signing time:             Sat 30 Mar 2024 01:18:18 +0000
ROA not before:           Sat 30 Mar 2024 01:13:18 +0000
ROA not after:            Sat 29 Mar 2025 01:18:18 +0000
asID:                     268053
IP address blocks:        45.167.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3d:6b:24:c4:66:f4:cc:77:12:b1:43:92:37:43:c1:62:0e:9f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60573234304A14834036D2BAAADE23EE1832BF5E
        Validity
            Not Before: Mar 30 01:13:18 2024 GMT
            Not After : Mar 29 01:18:18 2025 GMT
        Subject: CN=6ECB4ED14FAC9764404AFEA5B5D564F94C4EE2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:fa:23:df:1d:5f:05:73:c7:2e:c6:71:7b:
                    1c:6f:42:42:bb:28:17:df:84:be:31:7f:ea:73:00:
                    88:95:f7:b7:ac:bc:d2:ee:cd:c9:ff:6e:dc:fc:51:
                    0e:fb:87:94:0c:28:0b:83:a6:5c:c3:06:dc:a8:d7:
                    3c:ec:b9:92:95:b5:64:62:fa:60:49:e0:05:b0:7c:
                    dc:ff:a3:88:73:dd:87:92:3e:cf:af:f7:a9:75:e1:
                    5a:68:4f:7c:2e:05:42:9b:10:5e:29:fe:3a:bd:8a:
                    5b:5f:af:63:01:5e:34:55:2e:92:89:ce:de:80:b4:
                    32:da:eb:2c:37:fa:b6:d5:2b:05:8a:a7:df:1f:a3:
                    99:5f:f7:4c:60:ef:01:6b:45:dc:ea:99:0a:21:e1:
                    1b:7a:e6:c1:40:85:a8:64:14:7e:4b:ac:59:c0:6c:
                    de:a6:e8:c9:0b:94:bd:06:8e:28:7b:a9:11:9c:7d:
                    31:40:fe:95:c7:ca:92:58:82:47:c2:49:60:48:91:
                    1c:d0:6f:fd:ae:ce:4a:62:aa:fc:9f:8e:5e:11:16:
                    24:41:13:68:3b:5e:38:b1:7e:10:9b:e8:3f:8c:44:
                    c5:45:3e:ea:89:8f:13:76:e5:da:05:44:7e:4a:08:
                    c6:52:81:96:5a:9c:93:c4:12:b4:36:4e:f5:2e:d8:
                    45:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CB:4E:D1:4F:AC:97:64:40:4A:FE:A5:B5:D5:64:F9:4C:4E:E2:EE
            X509v3 Authority Key Identifier:
                keyid:60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/60573234304A14834036D2BAAADE23EE1832BF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36332e302f32342d3234203d3e20323638303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:84:8b:8b:57:8e:cd:77:05:eb:ee:ed:57:47:60:0e:98:38:
         5d:b3:41:08:2d:9e:24:07:5e:a2:73:5f:27:4b:94:04:55:c5:
         7a:a9:8d:10:3e:37:70:7a:d5:0b:0b:46:74:18:c0:54:d5:0f:
         e3:dc:19:d4:8f:d4:57:cb:ad:2d:0a:ee:dc:20:ae:0e:21:d9:
         6d:35:ad:95:6a:97:1f:4d:f3:0a:0b:bf:91:4b:2a:ce:21:ff:
         dc:f7:49:aa:6c:bc:ee:4c:3d:9e:22:f9:64:90:86:61:b1:b4:
         25:0e:79:c0:c8:35:d3:93:5f:56:ee:dd:11:df:05:c9:8e:04:
         8b:e3:82:0d:4f:fb:a7:02:e8:bf:20:2b:45:3b:23:97:d9:26:
         ed:e1:b7:d5:75:af:2b:8b:9c:43:ce:19:d7:08:38:05:34:74:
         58:65:ef:ff:b1:e5:3e:a9:3a:8c:e0:3b:40:76:0b:99:8d:0a:
         d9:c6:d1:87:b2:5d:38:a7:e0:26:ef:ca:07:49:92:9c:10:47:
         1d:e4:0d:a6:f2:96:63:76:6b:4c:cf:d1:e7:02:72:b4:99:07:
         a6:9b:8a:a9:e3:c8:a9:8c:50:12:17:bd:21:fe:7a:df:1c:61:
         51:80:a8:e8:a1:09:09:c0:eb:67:b9:34:b8:8c:da:48:62:40:
         38:d9:2a:fb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXT1rJMRm9Mx3ErFDkjdDwWIOn9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NzMyMzQzMDRBMTQ4MzQwMzZEMkJBQUFERTIzRUUx
ODMyQkY1RTAeFw0yNDAzMzAwMTEzMThaFw0yNTAzMjkwMTE4MThaMDMxMTAvBgNV
BAMTKDZFQ0I0RUQxNEZBQzk3NjQ0MDRBRkVBNUI1RDU2NEY5NEM0RUUyRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Rfoj3x1fBXPHLsZxexxvQkK7
KBffhL4xf+pzAIiV97esvNLuzcn/btz8UQ77h5QMKAuDplzDBtyo1zzsuZKVtWRi
+mBJ4AWwfNz/o4hz3YeSPs+v96l14VpoT3wuBUKbEF4p/jq9iltfr2MBXjRVLpKJ
zt6AtDLa6yw3+rbVKwWKp98fo5lf90xg7wFrRdzqmQoh4Rt65sFAhahkFH5LrFnA
bN6m6MkLlL0Gjih7qRGcfTFA/pXHypJYgkfCSWBIkRzQb/2uzkpiqvyfjl4RFiRB
E2g7XjixfhCb6D+MRMVFPuqJjxN25doFRH5KCMZSgZZanJPEErQ2TvUu2EUlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbstO0U+sl2RASv6ltdVk+UxO4u4wHwYDVR0j
BBgwFoAUYFcyNDBKFINANtK6qt4j7hgyv14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmNjQTk4Y204SlRBTno2Y0JrcFV6bWRSMzVrNzk2a2lCV3I2ZzNlS0N2
czMvMC82MDU3MzIzNDMwNEExNDgzNDAzNkQyQkFBQURFMjNFRTE4MzJCRjVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYwNTczMjM0MzA0QTE0ODM0
MDM2RDJCQUFBREUyM0VFMTgzMkJGNUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZjY0E5OGNtOEpUQU56NmNCa3BVem1kUjM1azc5NmtpQldyNmczZUtDdnMzLzAv
MzQzNTJlMzEzNjM3MmUzNjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzAzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALac/MA0GCSqGSIb3DQEBCwUAA4IBAQBMhIuLV47N
dwXr7u1XR2AOmDhds0EILZ4kB16ic18nS5QEVcV6qY0QPjdwetULC0Z0GMBU1Q/j
3BnUj9RXy60tCu7cIK4OIdltNa2VapcfTfMKC7+RSyrOIf/c90mqbLzuTD2eIvlk
kIZhsbQlDnnAyDXTk19W7t0R3wXJjgSL44INT/unAui/ICtFOyOX2Sbt4bfVda8r
i5xDzhnXCDgFNHRYZe//seU+qTqM4DtAdguZjQrZxtGHsl04p+Am78oHSZKcEEcd
5A2m8pZjdmtMz9HnAnK0mQemm4qp48ipjFASF70h/nrfHGFRgKjooQkJwOtnuTS4
jNpIYkA42Sr7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org