Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35322e302f32322d3232203d3e20323637393336.roa
File:                     34352e3136362e35322e302f32322d3232203d3e20323637393336.roa (raw, json)
Hash identifier:          PHm1uSd4rrkKgi5xA7Qu1uCp3oFxn7UY8Dqwbz/2P84=
Subject key identifier:   BB:55:9D:E6:69:FA:B3:D4:08:4E:D8:A9:4F:8C:61:76:D8:D6:A3:C2
Certificate issuer:       /CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
Certificate serial:       21269CC2A4339BCED84430C4BD405E40B86AC0F3
Authority key identifier: 60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35322e302f32322d3232203d3e20323637393336.roa
Signing time:             Thu 21 Mar 2024 19:50:31 +0000
ROA not before:           Thu 21 Mar 2024 19:45:31 +0000
ROA not after:            Thu 20 Mar 2025 19:50:31 +0000
asID:                     267936
IP address blocks:        45.166.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:26:9c:c2:a4:33:9b:ce:d8:44:30:c4:bd:40:5e:40:b8:6a:c0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
        Validity
            Not Before: Mar 21 19:45:31 2024 GMT
            Not After : Mar 20 19:50:31 2025 GMT
        Subject: CN=BB559DE669FAB3D4084ED8A94F8C6176D8D6A3C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:61:68:1b:bd:f9:61:c0:93:4d:5a:5e:c9:
                    e1:d6:ac:89:d2:e9:1c:61:ae:8c:cf:67:1b:1b:5b:
                    2a:63:4e:ef:d0:be:ff:80:47:3c:a4:6a:44:94:96:
                    a8:c8:03:03:8b:7b:d6:04:ae:22:c2:17:86:5f:e8:
                    fe:43:10:59:fd:0b:7d:ce:4b:6b:1c:61:85:ec:93:
                    2e:7e:e8:85:0c:33:9b:27:a8:8b:8c:0b:58:42:92:
                    ae:5f:8d:b4:85:fc:8e:79:15:e3:21:46:c8:75:1d:
                    5c:8b:08:18:b1:4d:44:59:f0:b2:07:41:96:16:2a:
                    03:6a:d6:01:95:be:ed:02:51:8a:17:a2:76:cd:8f:
                    b2:26:1a:9e:8d:68:ce:b1:0c:54:c3:3a:82:0d:00:
                    94:10:40:9d:3b:a0:67:23:10:2d:3c:cb:9d:93:47:
                    fd:75:d0:99:32:74:c9:ea:bc:55:59:72:44:14:84:
                    66:6d:0e:6b:51:5e:bd:6f:0b:f3:02:79:19:cb:ce:
                    07:f5:c3:35:74:7c:c9:9b:44:7b:1f:26:6c:eb:49:
                    30:25:b1:77:aa:c5:32:ef:5e:6b:6a:50:8c:37:b5:
                    5c:52:aa:01:7c:35:5d:cb:8e:97:b9:4f:aa:5e:ed:
                    82:21:0c:0b:b6:05:12:aa:53:e8:5a:b6:cd:e3:31:
                    88:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:55:9D:E6:69:FA:B3:D4:08:4E:D8:A9:4F:8C:61:76:D8:D6:A3:C2
            X509v3 Authority Key Identifier:
                keyid:60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35322e302f32322d3232203d3e20323637393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:02:0a:06:62:65:cd:d3:96:89:ed:00:c1:8a:de:8a:b7:37:
         58:28:77:6a:0d:0d:19:30:38:04:0b:39:cb:c8:18:c2:c1:0f:
         93:4e:ef:c4:e5:42:4a:5e:58:4d:00:c3:49:fb:45:80:97:85:
         11:6e:f7:28:14:98:f0:52:af:0b:1c:33:d9:ce:18:0f:32:47:
         69:72:55:09:64:8f:00:98:17:37:12:ef:17:71:12:cc:73:35:
         b4:76:05:90:d6:7b:27:3c:1b:c5:95:96:88:b4:98:b1:f8:fd:
         bc:34:df:9a:ad:12:b9:d1:c1:48:43:39:68:c7:11:14:97:07:
         fd:55:66:df:2d:2b:fb:8b:3a:6b:b1:fb:1f:75:d2:a6:8b:c1:
         0a:e6:8d:5f:e3:10:6c:b8:2c:fe:42:29:e2:a2:a0:27:df:92:
         e8:1a:95:3b:d0:6d:ab:fa:91:e5:0c:cd:fe:08:24:33:9a:b8:
         a6:3e:b6:23:7c:fa:e3:ce:10:ac:dc:1c:43:68:8f:18:d8:f1:
         34:7a:09:7c:80:dd:51:92:7f:c3:3b:9b:50:12:91:0b:ed:72:
         bd:ba:fb:4f:2e:43:02:82:00:db:6f:25:08:6d:1d:85:55:f0:
         ac:14:18:43:44:0d:24:32:23:41:44:71:13:47:d8:d9:1b:55:
         ed:11:9d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org