Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35342e302f32332d3233203d3e20323637393336.roa
File:                     34352e3136362e35342e302f32332d3233203d3e20323637393336.roa (raw, json)
Hash identifier:          MgLPQHKdqZYDFXqGUJ6A5vAE3fKxH1/AQMGCKRRqmd8=
Subject key identifier:   F6:66:C1:76:8F:F5:45:4A:A6:29:56:4D:C5:D3:78:C4:96:0E:DE:10
Certificate issuer:       /CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
Certificate serial:       66F5F825E708708E809A407D01FF2E7911096F5A
Authority key identifier: 60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35342e302f32332d3233203d3e20323637393336.roa
Signing time:             Tue 12 Mar 2024 14:37:34 +0000
ROA not before:           Tue 12 Mar 2024 14:32:34 +0000
ROA not after:            Tue 11 Mar 2025 14:37:34 +0000
asID:                     267936
IP address blocks:        45.166.54.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f5:f8:25:e7:08:70:8e:80:9a:40:7d:01:ff:2e:79:11:09:6f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
        Validity
            Not Before: Mar 12 14:32:34 2024 GMT
            Not After : Mar 11 14:37:34 2025 GMT
        Subject: CN=F666C1768FF5454AA629564DC5D378C4960EDE10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:db:25:8a:b8:85:fc:20:79:36:7b:24:e7:
                    b7:1b:af:cc:f4:9c:1c:d6:f3:05:fa:d3:60:11:3f:
                    6e:d5:a4:9f:86:cd:aa:fb:c1:70:7e:f0:40:ec:f0:
                    7c:f2:b1:63:5e:b4:cc:e3:0f:5b:7c:05:86:30:cb:
                    42:d2:77:84:8a:74:1d:b4:e7:c0:23:db:08:5f:ed:
                    41:62:e0:ed:ae:35:7f:6a:4a:b6:c0:ec:b7:00:6f:
                    d9:f5:20:fc:5a:86:a6:7d:e4:09:85:9f:cd:3e:66:
                    b7:ce:12:6f:0c:6b:cc:e4:f2:13:5e:c5:fd:4e:96:
                    c9:61:af:47:8b:66:47:55:9e:27:67:0e:fe:a7:46:
                    09:1a:3f:69:7e:fe:d7:2f:47:13:af:53:52:2d:c2:
                    2d:95:70:fe:79:67:3d:63:2f:fc:e4:9b:75:74:ed:
                    6a:35:c5:da:47:a5:9c:2d:fd:6a:72:1b:03:d2:8d:
                    b9:0f:d2:b1:98:57:92:24:d9:40:92:65:f6:f3:73:
                    1b:33:e2:14:de:76:e7:0a:f7:3a:ae:7c:62:9b:be:
                    b3:f2:1e:5a:fc:53:e5:1c:1f:2f:7f:a1:52:8b:38:
                    e2:41:0e:47:7e:75:4d:45:61:93:8a:e8:b6:25:f1:
                    c8:0f:ee:58:b1:47:92:39:55:97:02:7d:20:e7:79:
                    40:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:66:C1:76:8F:F5:45:4A:A6:29:56:4D:C5:D3:78:C4:96:0E:DE:10
            X509v3 Authority Key Identifier:
                keyid:60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35342e302f32332d3233203d3e20323637393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:fc:f5:d4:2d:05:5f:38:14:35:aa:4f:42:f2:8c:9b:f7:7a:
         50:3a:27:99:87:fa:bb:ee:4b:66:31:7a:68:ed:a5:85:59:c5:
         be:c2:50:43:0e:40:bf:6f:93:00:30:ac:8d:35:ab:26:75:56:
         fa:c6:2b:6b:dd:35:a2:21:a3:40:49:b6:f3:1a:be:ac:f7:a2:
         ff:e2:6f:60:f2:68:84:bc:c4:d0:3b:2d:a1:f2:45:1b:34:6d:
         b4:1c:82:fc:6f:41:36:56:5d:df:dc:b8:cc:1d:9b:a1:ee:be:
         01:61:80:06:bc:f8:26:31:6c:8c:4c:6a:83:55:0f:f7:dd:a1:
         5a:ec:d2:15:d8:8b:7a:75:30:f2:53:e1:2a:f5:4e:13:41:13:
         a3:03:cb:b3:65:4c:22:1e:76:a4:2a:8d:65:96:2a:2b:f5:2b:
         7e:45:ec:27:a0:80:a7:d8:a8:cf:10:13:5b:e6:01:99:d2:1a:
         01:6d:eb:9b:17:5e:e7:aa:46:a4:d0:0a:ce:ed:09:78:c9:90:
         85:3a:48:0e:80:d9:a7:db:ce:6c:da:fa:3b:22:dd:f0:6c:2b:
         c8:96:9b:ef:c1:62:b3:b1:d5:f2:8d:ba:ff:6c:f0:57:a8:fc:
         b4:9d:99:95:8d:e0:71:3f:c5:ae:5e:f4:15:bc:38:ce:03:da:
         66:17:7d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org