Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35332e302f32342d3234203d3e20323637393336.roa
File:                     34352e3136362e35332e302f32342d3234203d3e20323637393336.roa (raw, json)
Hash identifier:          W1m2Bv1FEKeYkS7y1Ry/fJkmXSAQWRMuZ/bRtslK9Jo=
Subject key identifier:   8F:26:B0:7F:A6:33:7A:BC:3C:18:67:A4:91:BC:40:88:3E:BA:11:E7
Certificate issuer:       /CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
Certificate serial:       126F1F93AB9AF8E934AB39E09858520FF1F0EC0C
Authority key identifier: 60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35332e302f32342d3234203d3e20323637393336.roa
Signing time:             Fri 22 Mar 2024 14:10:30 +0000
ROA not before:           Fri 22 Mar 2024 14:05:30 +0000
ROA not after:            Fri 21 Mar 2025 14:10:30 +0000
asID:                     267936
IP address blocks:        45.166.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6f:1f:93:ab:9a:f8:e9:34:ab:39:e0:98:58:52:0f:f1:f0:ec:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
        Validity
            Not Before: Mar 22 14:05:30 2024 GMT
            Not After : Mar 21 14:10:30 2025 GMT
        Subject: CN=8F26B07FA6337ABC3C1867A491BC40883EBA11E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:7e:ce:8f:7d:18:0f:e1:34:40:c0:3b:d0:
                    e6:96:87:e0:05:c2:d3:98:c9:be:72:14:14:39:96:
                    00:7c:27:8c:29:cc:14:27:b0:f0:42:87:bc:ec:34:
                    a2:93:48:6d:53:f5:38:60:7e:aa:f1:81:0a:8f:10:
                    e3:b4:d0:5f:d5:3a:ae:7e:44:a8:35:e3:8f:71:ed:
                    45:f0:03:aa:30:d7:ab:e9:49:85:d8:d7:de:64:43:
                    b2:26:1e:45:e5:30:f2:0c:53:35:12:a8:19:ff:64:
                    d1:92:45:19:15:23:10:48:30:cd:6e:e2:96:42:f1:
                    cf:d1:a6:8b:27:36:df:b8:6e:72:42:e8:68:87:41:
                    33:8e:73:0f:3a:0b:7b:c6:ac:4b:2b:bf:31:77:e4:
                    bb:38:ec:b2:27:bb:4a:f0:d3:d4:db:97:01:df:03:
                    77:99:da:59:a4:32:c8:93:1f:ba:f0:0f:9a:0a:e4:
                    72:f7:3a:30:f6:05:39:42:8c:f5:19:8d:b8:b8:b4:
                    b5:52:34:5d:3d:08:09:65:11:db:4a:bf:0c:aa:32:
                    bf:50:7a:87:39:23:0a:36:8c:78:86:98:d2:71:ad:
                    a2:42:95:d5:0d:eb:f4:8e:b0:0c:6e:6f:a0:1e:d7:
                    81:f3:ce:6f:87:7d:bd:d3:bd:7c:63:ab:0a:e7:9b:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:26:B0:7F:A6:33:7A:BC:3C:18:67:A4:91:BC:40:88:3E:BA:11:E7
            X509v3 Authority Key Identifier:
                keyid:60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35332e302f32342d3234203d3e20323637393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a8:89:45:67:69:a9:67:bc:15:d2:02:53:45:bf:50:1a:44:
         6b:56:b0:01:c2:45:9a:e2:23:2a:76:9e:6e:72:da:88:6e:5d:
         a7:ab:95:12:ca:c0:e9:6c:ae:c1:13:b5:8f:5f:f6:61:c4:ce:
         5c:70:ee:4f:c6:70:aa:c7:52:2a:38:6a:fa:86:56:0c:5f:4d:
         5a:8d:72:45:a3:de:9e:49:c6:fb:b1:1d:49:6a:67:f0:81:ab:
         92:11:b9:3d:de:71:dd:0f:8c:de:51:6a:0e:e4:c7:e5:fd:e8:
         42:d2:53:14:5f:4b:69:c5:7e:2a:01:bb:8d:7f:67:e0:95:d4:
         08:56:ac:4d:96:e3:38:8b:30:c6:bd:a9:4b:18:0f:c1:55:cc:
         1c:a7:3c:a1:e7:da:1b:5e:9e:56:a7:a1:b7:f1:e6:85:f9:4d:
         11:cb:51:5b:cf:24:51:49:d4:08:7b:29:ca:17:b9:34:01:36:
         e2:3e:26:b0:d4:ad:cd:55:27:94:67:33:8e:a8:3c:46:65:d2:
         55:d2:e1:6f:26:06:00:10:29:99:33:b6:9b:de:6f:e1:52:14:
         d9:68:bb:ca:33:5b:4c:af:f2:74:3e:11:df:fb:8c:ce:d8:63:
         b2:be:66:33:1e:45:3c:66:b3:99:e1:e7:d0:b5:1f:e2:53:88:
         20:f5:68:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org