Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/34352e362e3130302e302f32332d3234203d3e20323636313831.roa
File:                     34352e362e3130302e302f32332d3234203d3e20323636313831.roa (raw, json)
Hash identifier:          mXw2iTicHBgjXHhOPghp4IQe/qm7HqiihPBSAXFRRPo=
Subject key identifier:   D0:E3:34:E6:85:9E:35:C8:C0:5A:38:23:D8:E1:C9:F2:37:06:60:0F
Certificate issuer:       /CN=60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F
Certificate serial:       0A62BDDFC215848CBBED3E6C355CCC6B8B4592DA
Authority key identifier: 60:E9:4A:F7:2A:CD:FF:C1:8F:91:51:26:1A:92:F7:8E:5C:E8:FF:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/34352e362e3130302e302f32332d3234203d3e20323636313831.roa
Signing time:             Tue 15 Aug 2023 15:46:37 +0000
ROA not before:           Tue 15 Aug 2023 15:41:37 +0000
ROA not after:            Tue 13 Aug 2024 15:46:37 +0000
asID:                     266181
IP address blocks:        45.6.100.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:62:bd:df:c2:15:84:8c:bb:ed:3e:6c:35:5c:cc:6b:8b:45:92:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F
        Validity
            Not Before: Aug 15 15:41:37 2023 GMT
            Not After : Aug 13 15:46:37 2024 GMT
        Subject: CN=D0E334E6859E35C8C05A3823D8E1C9F23706600F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0f:9b:cd:08:18:da:f6:99:62:5a:55:b1:a4:
                    a7:ed:30:b5:cc:e0:8a:ba:ea:1e:af:77:c9:70:4b:
                    0c:95:aa:e4:00:8d:fb:3b:f0:45:09:a0:a9:88:17:
                    90:82:fd:73:35:be:ad:3d:74:b1:04:91:40:43:f2:
                    85:18:05:d2:59:29:11:fa:68:25:5b:6b:41:76:3b:
                    f0:9e:51:79:0e:7d:79:a5:b4:04:eb:09:87:43:ca:
                    a5:f1:0a:ea:24:d2:09:39:42:c3:b6:04:2c:37:9d:
                    ed:1b:7d:a2:ef:74:79:0f:25:8d:1a:3c:91:95:f9:
                    c7:00:86:23:93:ed:93:82:18:d2:32:67:5c:bf:66:
                    ef:2c:5b:6b:92:48:14:09:f7:fd:6b:e9:92:ca:f0:
                    f3:24:6d:16:a8:b9:6a:97:e0:64:0d:a3:5e:20:8e:
                    50:9b:ba:45:6d:12:d6:3a:d4:1c:38:b8:94:7e:d8:
                    91:14:4e:13:5e:01:e7:72:63:b0:b0:ab:e0:2e:0a:
                    be:47:7b:9f:8f:37:7d:27:10:4a:70:a0:db:6e:fe:
                    d9:b4:39:72:81:85:8f:d0:8e:d4:6e:c9:91:c9:b3:
                    92:60:0e:d6:cc:29:01:74:e9:aa:ba:b2:77:38:96:
                    b7:90:fb:61:15:3a:8b:0b:29:32:51:35:96:e8:05:
                    2e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E3:34:E6:85:9E:35:C8:C0:5A:38:23:D8:E1:C9:F2:37:06:60:0F
            X509v3 Authority Key Identifier:
                keyid:60:E9:4A:F7:2A:CD:FF:C1:8F:91:51:26:1A:92:F7:8E:5C:E8:FF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/34352e362e3130302e302f32332d3234203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:f8:3a:61:3d:84:ed:bf:d0:81:f2:15:fd:c2:4b:1a:ac:da:
         3a:ff:d9:87:4a:63:f9:1c:d5:05:74:cb:87:5a:b8:a5:95:ce:
         60:84:97:02:11:fe:28:3e:61:99:a4:53:80:5e:fc:9a:1b:5f:
         98:b0:49:f6:fb:f0:92:e7:33:81:06:8a:32:1f:55:8a:31:32:
         2d:2e:39:d1:d4:a9:87:47:2b:33:a0:97:14:a7:12:02:5e:9e:
         1c:f0:74:fb:3d:6c:2f:1f:eb:0c:cd:9d:14:cf:20:8c:90:77:
         49:c0:ea:88:f0:fc:5e:8a:03:c4:bc:84:fd:58:6d:d9:72:f4:
         ab:93:74:5c:a2:4e:16:e6:54:cd:1a:a4:56:e3:67:38:48:fd:
         34:fa:21:cb:47:b0:53:c4:b3:7f:50:7b:90:b6:f0:79:8b:dc:
         8b:ab:00:c9:0e:c9:fc:cd:f0:30:db:b0:c0:72:59:c8:bf:e6:
         51:c5:c0:8f:27:fb:f4:21:a5:4d:0d:06:4f:39:d6:2f:c9:57:
         00:80:42:1e:79:03:3d:18:6d:62:b5:95:49:c5:69:fa:7c:ca:
         2f:dd:1e:af:dc:e2:62:84:96:96:89:d5:4b:45:21:c5:45:56:
         dc:61:02:e3:19:55:a8:7e:e9:97:92:03:28:03:ed:bb:fb:41:
         42:07:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org