Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa
File:                     34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa (raw, json)
Hash identifier:          sjqDDS0Ah5/nWsgAypkSs6HkK3d1aLEn8d1jI8JsuUA=
Subject key identifier:   2F:D0:41:B1:FD:04:F0:43:CD:E5:03:87:2B:40:5B:AD:BD:19:F0:76
Certificate issuer:       /CN=60BF19636304497B9AF26C48A5DC1EB337D25A44
Certificate serial:       3E49E9FDC2362380F52D619F5E174B6F179D8C9B
Authority key identifier: 60:BF:19:63:63:04:49:7B:9A:F2:6C:48:A5:DC:1E:B3:37:D2:5A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60BF19636304497B9AF26C48A5DC1EB337D25A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa
Signing time:             Sat 22 Jul 2023 14:58:21 +0000
ROA not before:           Sat 22 Jul 2023 14:53:21 +0000
ROA not after:            Sat 20 Jul 2024 14:58:21 +0000
asID:                     268977
IP address blocks:        45.176.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:49:e9:fd:c2:36:23:80:f5:2d:61:9f:5e:17:4b:6f:17:9d:8c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BF19636304497B9AF26C48A5DC1EB337D25A44
        Validity
            Not Before: Jul 22 14:53:21 2023 GMT
            Not After : Jul 20 14:58:21 2024 GMT
        Subject: CN=2FD041B1FD04F043CDE503872B405BADBD19F076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:e2:07:9f:45:a4:2d:91:37:2e:45:92:a5:
                    df:57:25:9b:78:ff:a2:e9:9a:ed:44:a1:8b:0f:de:
                    eb:37:50:9f:e2:02:72:42:47:f6:de:f0:74:98:c5:
                    b3:41:ba:80:22:ad:3b:35:8b:40:a2:83:d7:8e:f3:
                    ac:cf:cf:42:0b:17:9e:d9:b5:58:79:f1:f4:8e:1c:
                    25:6c:d2:0a:69:90:98:d3:06:0f:34:f7:1a:ef:01:
                    18:85:6f:38:4e:89:0b:77:5e:a7:74:76:4b:0e:48:
                    30:e7:c2:3a:b3:3e:82:ec:3c:6c:ff:c3:7a:e6:39:
                    07:81:5b:ef:00:97:d9:5e:ee:8f:38:e0:75:4d:5c:
                    20:c6:b0:56:e2:71:d2:88:23:af:35:2a:a8:4d:e2:
                    9b:d6:88:d7:99:a5:a9:2a:f4:b1:a6:30:66:fd:2d:
                    ce:d9:8d:5e:b9:cb:7c:8b:0b:29:a4:f7:7a:e4:88:
                    1a:fe:0f:f5:90:a0:9c:18:9f:fc:44:8d:c5:4f:61:
                    12:82:a1:66:bf:34:e8:ce:01:5e:6a:28:78:2e:0c:
                    2a:1c:81:a3:b5:cf:74:6f:89:15:59:6c:18:c1:5e:
                    55:4c:c1:8a:3e:2d:3a:6c:ef:83:1c:29:f2:ee:be:
                    ea:45:f6:bc:e9:ae:e9:23:e3:0b:f5:fb:91:91:85:
                    98:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D0:41:B1:FD:04:F0:43:CD:E5:03:87:2B:40:5B:AD:BD:19:F0:76
            X509v3 Authority Key Identifier:
                keyid:60:BF:19:63:63:04:49:7B:9A:F2:6C:48:A5:DC:1E:B3:37:D2:5A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/60BF19636304497B9AF26C48A5DC1EB337D25A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60BF19636304497B9AF26C48A5DC1EB337D25A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:f8:ed:dd:98:20:ab:23:ec:5e:dd:79:d7:d9:54:da:e3:d7:
         f3:0c:01:b5:4c:47:4f:c2:40:80:91:da:06:c4:c3:2c:b9:cb:
         74:ca:57:87:ee:ca:4f:73:e3:d0:8a:e2:4f:59:28:2d:a8:29:
         8e:14:cd:d9:c1:07:31:4a:1a:90:a3:0c:b6:8b:a2:eb:c6:63:
         f3:79:18:bb:ff:e8:ff:1f:13:a4:00:6c:57:93:4e:77:c4:09:
         87:8a:1b:9d:e3:07:c4:6a:9a:cb:5a:53:5b:d6:0a:a8:94:cb:
         8b:68:36:35:87:b0:1b:30:85:0e:63:b9:06:42:97:92:58:b7:
         c4:3e:4b:7b:7a:94:39:55:ef:3e:ba:21:cc:15:08:86:5d:53:
         a6:4c:b5:c8:5f:9c:a2:d6:7a:1b:b4:cc:6c:68:4c:86:45:85:
         62:bc:8a:ef:cd:cc:57:b9:6f:d7:48:ae:6d:2c:a1:70:3f:d0:
         6e:0f:0e:e4:9e:a0:93:01:46:62:3b:e5:5f:8a:f9:25:39:1f:
         b7:69:d6:1b:d1:25:15:de:12:b1:2c:6f:6d:3e:b8:f4:32:01:
         e2:a2:fd:50:dd:bd:2c:10:9b:d6:16:46:07:db:02:ae:31:fc:
         a2:e3:ab:7e:5f:cf:d4:d2:77:18:06:81:1b:96:47:ae:a2:47:
         07:08:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org