Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36302e302f32332d3233203d3e20323638303533.roa
File:                     34352e3136372e36302e302f32332d3233203d3e20323638303533.roa (raw, json)
Hash identifier:          N8kEGVmCw0uduMrm5ACcF2oRuaFkVeYFFlt7Kk6HpKQ=
Subject key identifier:   1A:9A:BC:08:9A:0A:6C:30:71:83:AD:5A:14:E9:D8:56:ED:C6:14:31
Certificate issuer:       /CN=0F1137C27E661ED0B131846131EE7EB20F7A2385
Certificate serial:       4163A032DED60D845E99CBE50843D2EAEA43712D
Authority key identifier: 0F:11:37:C2:7E:66:1E:D0:B1:31:84:61:31:EE:7E:B2:0F:7A:23:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36302e302f32332d3233203d3e20323638303533.roa
Signing time:             Fri 05 Apr 2024 00:11:04 +0000
ROA not before:           Fri 05 Apr 2024 00:06:04 +0000
ROA not after:            Fri 04 Apr 2025 00:11:04 +0000
asID:                     268053
IP address blocks:        45.167.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:63:a0:32:de:d6:0d:84:5e:99:cb:e5:08:43:d2:ea:ea:43:71:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1137C27E661ED0B131846131EE7EB20F7A2385
        Validity
            Not Before: Apr  5 00:06:04 2024 GMT
            Not After : Apr  4 00:11:04 2025 GMT
        Subject: CN=1A9ABC089A0A6C307183AD5A14E9D856EDC61431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:d2:5c:d7:ad:32:aa:31:86:ef:df:4f:2c:
                    80:cb:14:b3:89:44:5e:94:5c:53:54:5d:2c:ad:8b:
                    e2:b2:19:d6:dd:a6:50:bb:33:67:a3:e6:79:10:c4:
                    1d:59:20:5e:5d:3a:b8:35:d9:d5:73:e9:1a:1a:8e:
                    ab:05:e3:9a:b9:f6:8e:14:ec:c4:3b:f6:9f:34:72:
                    6b:88:a4:64:f8:ff:2c:f3:30:91:60:5a:8b:a7:c4:
                    2e:9c:f0:21:92:f7:e2:a2:42:54:96:04:2f:91:b8:
                    60:6b:76:83:81:67:58:26:35:d0:ab:78:26:59:27:
                    75:1a:a7:07:76:08:96:75:de:e3:80:b3:c4:fc:03:
                    d4:3a:f9:18:08:b0:67:83:6f:46:7f:55:08:6a:d8:
                    db:e9:7a:ec:c9:c2:c9:e5:9b:e2:61:da:bb:e3:4a:
                    1f:df:cc:0b:b2:61:3e:c4:10:13:4e:45:b0:8a:eb:
                    8d:7c:91:7b:ad:4c:d9:69:8e:db:dd:4b:35:57:68:
                    ed:d2:8e:7f:06:30:5d:d7:e8:07:fc:f8:93:bc:42:
                    3c:5b:9a:5c:b2:75:1a:00:bf:e5:f9:7d:52:af:29:
                    e9:0f:c5:bd:cf:c3:59:bd:c9:76:a8:26:0d:c0:20:
                    9e:22:92:b1:cf:21:3a:6e:3a:26:e1:4d:77:89:2a:
                    f0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9A:BC:08:9A:0A:6C:30:71:83:AD:5A:14:E9:D8:56:ED:C6:14:31
            X509v3 Authority Key Identifier:
                keyid:0F:11:37:C2:7E:66:1E:D0:B1:31:84:61:31:EE:7E:B2:0F:7A:23:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36302e302f32332d3233203d3e20323638303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:3c:06:17:80:cb:df:1b:cf:71:1b:ce:4d:3d:03:d1:38:ae:
         1d:d8:1d:80:bb:4d:75:bf:23:b6:b1:a8:d9:00:83:1f:81:c4:
         63:63:21:45:9e:7f:64:b3:c6:1e:e3:9d:e2:22:a0:6b:52:fb:
         7c:c5:8d:04:38:73:d6:f5:30:79:83:e8:2c:07:0b:a5:50:65:
         ff:15:b1:bb:c8:42:b4:f1:b6:ec:db:63:00:b6:5c:b9:b0:22:
         52:d9:35:81:3c:e7:17:d2:fe:cb:01:0c:2c:da:54:45:22:41:
         a0:7f:6b:9e:df:fe:64:f0:86:70:31:67:7f:81:a8:53:bf:fe:
         37:0a:a9:cc:44:4b:7b:c5:42:4f:bc:bb:68:19:f6:ff:58:d1:
         e7:f6:cc:48:16:18:44:43:07:be:c5:ba:e5:d7:77:6b:4d:99:
         f2:e8:0e:d0:e5:5d:39:88:0a:94:a0:73:a1:46:e9:24:f8:39:
         2c:84:0d:c6:28:44:a7:eb:9f:3d:1b:e3:ad:69:1a:ef:37:2c:
         8e:27:94:c6:1a:f4:59:39:e4:49:7c:a8:bc:df:86:a0:30:a6:
         b1:e0:ff:ac:2f:b6:b2:46:fd:0f:e8:39:07:07:52:44:7f:0b:
         0b:b4:33:26:f3:e7:14:7c:4b:7d:28:83:ec:f4:62:84:85:c9:
         ef:67:78:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:22:24 2024 by rpki-client on console-fra.rpki-client.org