Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35322e302f32342d3234203d3e20323637393336.roa
File:                     34352e3136362e35322e302f32342d3234203d3e20323637393336.roa (raw, json)
Hash identifier:          10ZydwwZCfeT3UTIAIpdRQmxM3GV29YAa/qAW/ygTJE=
Subject key identifier:   72:8F:02:1E:1F:4D:2C:D7:57:75:EC:18:D7:97:8D:29:B0:1A:A0:1F
Certificate issuer:       /CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
Certificate serial:       4DE3755A47FC97D3C28F9AFDEE17A0061AE5BD19
Authority key identifier: 60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35322e302f32342d3234203d3e20323637393336.roa
Signing time:             Fri 22 Mar 2024 14:10:06 +0000
ROA not before:           Fri 22 Mar 2024 14:05:06 +0000
ROA not after:            Fri 21 Mar 2025 14:10:06 +0000
asID:                     267936
IP address blocks:        45.166.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e3:75:5a:47:fc:97:d3:c2:8f:9a:fd:ee:17:a0:06:1a:e5:bd:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
        Validity
            Not Before: Mar 22 14:05:06 2024 GMT
            Not After : Mar 21 14:10:06 2025 GMT
        Subject: CN=728F021E1F4D2CD75775EC18D7978D29B01AA01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:f0:7f:2f:73:d9:54:10:d8:0a:fb:1e:78:
                    e5:5f:b1:e4:ff:ed:e7:7a:9b:30:40:cd:08:df:92:
                    53:09:78:60:17:e8:bb:3d:ed:7a:ea:a6:6f:1e:af:
                    1c:6e:c2:16:43:aa:72:b1:22:42:c9:fc:b5:24:55:
                    69:ee:fe:5d:58:62:e4:ef:cd:3a:44:01:b1:a4:9d:
                    63:3c:58:c9:a6:a2:88:39:56:59:c9:ef:41:0e:fb:
                    04:83:73:96:4e:a6:ca:9f:c2:9d:f1:4b:2e:00:87:
                    47:44:dc:9a:bf:03:07:eb:73:f1:7b:e3:89:87:7e:
                    b1:69:8b:73:cd:b9:6f:6c:6d:df:e6:46:b9:3e:93:
                    0d:a5:1c:05:ea:64:e0:22:3b:4c:87:63:7d:e3:db:
                    ce:bc:20:fb:b6:4c:c5:4e:90:2a:a8:70:da:b1:13:
                    b3:b1:78:7a:3b:bc:ef:bc:43:be:86:1d:6b:dc:07:
                    55:a7:58:2c:13:f9:49:ad:f7:35:e4:32:2d:9b:86:
                    d5:b9:4a:fc:19:b4:fe:95:33:03:6c:dd:df:c5:d0:
                    36:0b:ee:29:d0:3f:86:66:75:1b:d6:6b:75:bf:f3:
                    78:09:7e:87:f8:a9:6e:3e:d5:08:16:0a:ae:2b:c1:
                    58:a5:52:80:ff:c3:25:ca:26:54:fc:7a:30:c3:7f:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8F:02:1E:1F:4D:2C:D7:57:75:EC:18:D7:97:8D:29:B0:1A:A0:1F
            X509v3 Authority Key Identifier:
                keyid:60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35322e302f32342d3234203d3e20323637393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:d4:fb:a0:97:86:d8:12:04:dc:7e:df:c2:ee:51:4b:09:
         90:23:46:96:21:c5:de:8c:17:1b:79:a1:e0:e0:02:b5:a7:eb:
         85:ca:5d:11:8a:a6:cd:65:aa:9a:36:00:41:6f:0e:60:c4:59:
         c3:63:e2:d3:ae:85:4d:1e:b5:99:a3:db:b9:9f:d1:c3:43:f1:
         80:9d:34:19:cf:b7:93:a6:13:c3:65:ec:4c:85:90:05:09:1e:
         56:06:18:09:ba:39:69:a7:a3:ce:b4:91:95:98:f8:2e:d3:09:
         b5:71:3b:f4:9f:30:80:df:e8:4a:87:11:08:d0:b2:48:59:57:
         b0:e8:80:60:ef:a9:10:23:16:91:01:be:28:4d:c9:25:e4:17:
         5f:0c:a2:aa:6a:0e:bb:47:20:3c:7a:ec:e3:70:09:95:45:a3:
         da:34:7e:cc:c1:55:22:a8:b2:ff:4b:f6:cf:3c:1b:b0:f6:4e:
         aa:e1:3e:09:4d:f6:e7:e1:3b:21:06:71:92:88:8e:f3:d0:39:
         01:65:1f:f8:8c:ef:f7:a7:b8:94:95:dd:81:3a:1f:f9:23:82:
         6d:39:5b:73:3a:3c:46:e1:ef:35:7c:7b:22:36:4b:c6:b5:72:
         ac:0a:6a:cf:8c:df:03:b6:8d:db:49:62:c7:73:3f:d8:dc:13:
         c0:87:8a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org