Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35352e302f32342d3234203d3e20323637393336.roa
File:                     34352e3136362e35352e302f32342d3234203d3e20323637393336.roa (raw, json)
Hash identifier:          +2d0XPGANUNUzCfITn+vWp/jIkFrXDY9tgCIbuu0qKs=
Subject key identifier:   41:58:AF:87:3C:A7:71:F8:05:9A:9A:C6:43:48:F6:2A:84:C3:48:F6
Certificate issuer:       /CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
Certificate serial:       2A72F263F48141981C9E46C0257FF89C25A9F9D8
Authority key identifier: 60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35352e302f32342d3234203d3e20323637393336.roa
Signing time:             Fri 22 Mar 2024 14:11:05 +0000
ROA not before:           Fri 22 Mar 2024 14:06:05 +0000
ROA not after:            Fri 21 Mar 2025 14:11:05 +0000
asID:                     267936
IP address blocks:        45.166.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:72:f2:63:f4:81:41:98:1c:9e:46:c0:25:7f:f8:9c:25:a9:f9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E
        Validity
            Not Before: Mar 22 14:06:05 2024 GMT
            Not After : Mar 21 14:11:05 2025 GMT
        Subject: CN=4158AF873CA771F8059A9AC64348F62A84C348F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:0c:15:eb:b8:d1:9e:73:73:93:72:07:8a:
                    2b:18:8e:4d:52:4a:da:12:63:03:7c:d8:7a:90:f7:
                    96:6c:11:9e:2e:8f:64:00:34:80:ff:fa:d7:43:9c:
                    d9:89:d7:17:f6:2f:a5:04:80:3c:16:37:4d:ff:c5:
                    18:c6:dc:6e:5d:d1:cc:02:98:25:10:85:3f:ef:1b:
                    71:6f:6c:b7:a3:6e:0a:fa:4c:4c:bb:f9:7e:ca:2d:
                    6a:ee:68:84:d2:21:99:62:dd:65:db:21:c0:32:f1:
                    4c:59:6d:7c:c6:7a:03:46:52:ad:59:3d:33:68:6d:
                    0e:20:ea:cf:6a:a9:35:a4:a4:f8:e4:2f:b7:a6:f6:
                    60:07:1c:c3:d6:a2:a0:1b:01:ce:c6:20:73:bd:fd:
                    cb:85:2b:f6:35:d2:d7:a7:84:e7:16:26:e8:35:d0:
                    d7:9d:39:c2:e8:72:71:d3:98:64:1a:50:45:3f:46:
                    5f:7f:1f:b0:e4:fa:76:04:d8:fa:ab:b6:0a:54:85:
                    6d:52:04:8b:83:4f:d1:ad:5b:71:5a:bc:d8:31:c4:
                    57:b5:bf:b7:58:7f:5b:73:57:f0:c3:12:86:b6:51:
                    88:f8:c6:28:9b:3a:1f:a1:b1:23:9d:b0:2c:1a:8a:
                    06:de:ba:4f:b1:e5:fc:b3:95:47:b1:b0:19:7c:91:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:58:AF:87:3C:A7:71:F8:05:9A:9A:C6:43:48:F6:2A:84:C3:48:F6
            X509v3 Authority Key Identifier:
                keyid:60:EF:ED:D1:2B:A8:B6:1A:14:A1:F1:50:E6:8B:A1:BF:6F:8A:19:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60EFEDD12BA8B61A14A1F150E68BA1BF6F8A199E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/0/34352e3136362e35352e302f32342d3234203d3e20323637393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:d7:0e:d4:5a:b7:e1:4e:eb:5e:ae:ea:85:3e:7b:7e:4e:b4:
         b4:b4:61:68:8a:c6:7b:2c:e2:38:46:98:43:d0:40:09:7e:68:
         0a:38:34:1a:d1:59:4f:ca:98:ea:0b:38:2d:b6:25:cb:39:d0:
         61:72:eb:e2:88:23:04:e9:7d:86:62:63:ab:6e:dd:f6:a8:c4:
         b1:94:9d:1b:9d:03:b1:b9:82:8f:32:f3:6b:98:93:54:63:af:
         57:69:77:68:f7:59:dc:ce:ff:e3:ff:41:f2:ae:9e:a8:0b:3b:
         58:45:52:ae:ed:bd:d5:a3:ee:6a:ee:1d:10:4b:8a:7f:36:1a:
         02:0f:ae:27:11:96:31:7a:3b:cb:9a:af:7a:fd:b6:41:57:72:
         c1:5e:f6:9e:5e:05:f0:eb:05:48:77:b2:b9:3c:3a:c1:ad:7f:
         5d:7c:5a:7d:03:eb:1e:1c:39:1e:3c:b0:1e:a0:c1:e6:a0:97:
         66:e5:63:ca:f9:14:5c:51:6f:e8:14:2d:3c:d3:d2:f1:c4:e3:
         1d:50:fa:cc:1b:a9:2b:a6:8b:17:82:6f:6e:aa:51:4a:74:5d:
         20:b8:a7:61:17:fd:9d:61:3a:b7:b4:58:56:04:cc:b3:8f:e9:
         54:aa:74:b7:cd:0a:02:f6:17:26:e4:81:33:33:b7:81:56:c7:
         35:15:17:90
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKnLyY/SBQZgcnkbAJX/4nCWp+dgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBFRkVERDEyQkE4QjYxQTE0QTFGMTUwRTY4QkExQkY2
RjhBMTk5RTAeFw0yNDAzMjIxNDA2MDVaFw0yNTAzMjExNDExMDVaMDMxMTAvBgNV
BAMTKDQxNThBRjg3M0NBNzcxRjgwNTlBOUFDNjQzNDhGNjJBODRDMzQ4RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtAwV67jRnnNzk3IHiisYjk1S
StoSYwN82HqQ95ZsEZ4uj2QANID/+tdDnNmJ1xf2L6UEgDwWN03/xRjG3G5d0cwC
mCUQhT/vG3FvbLejbgr6TEy7+X7KLWruaITSIZli3WXbIcAy8UxZbXzGegNGUq1Z
PTNobQ4g6s9qqTWkpPjkL7em9mAHHMPWoqAbAc7GIHO9/cuFK/Y10tenhOcWJug1
0NedOcLocnHTmGQaUEU/Rl9/H7Dk+nYE2PqrtgpUhW1SBIuDT9GtW3FavNgxxFe1
v7dYf1tzV/DDEoa2UYj4xiibOh+hsSOdsCwaigbeuk+x5fyzlUexsBl8kRUbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQVivhzyncfgFmprGQ0j2KoTDSPYwHwYDVR0j
BBgwFoAUYO/t0SuothoUofFQ5ouhv2+KGZ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tXTkIyTHVOb3hDZXhpMlVZclc2anprQzJVVUdEWm5XUDV4MTkxeW9X
Y00vMC82MEVGRUREMTJCQThCNjFBMTRBMUYxNTBFNjhCQTFCRjZGOEExOTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYwRUZFREQxMkJBOEI2MUEx
NEExRjE1MEU2OEJBMUJGNkY4QTE5OUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0drV05CMkx1Tm94Q2V4aTJVWXJXNmp6a0MyVVVHRFpuV1A1eDE5MXlvV2NNLzAv
MzQzNTJlMzEzNjM2MmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaY3MA0GCSqGSIb3DQEBCwUAA4IBAQAA1w7UWrfh
TuteruqFPnt+TrS0tGFoisZ7LOI4RphD0EAJfmgKODQa0VlPypjqCzgttiXLOdBh
cuviiCME6X2GYmOrbt32qMSxlJ0bnQOxuYKPMvNrmJNUY69XaXdo91nczv/j/0Hy
rp6oCztYRVKu7b3Vo+5q7h0QS4p/NhoCD64nEZYxejvLmq96/bZBV3LBXvaeXgXw
6wVId7K5PDrBrX9dfFp9A+seHDkePLAeoMHmoJdm5WPK+RRcUW/oFC0809LxxOMd
UPrMG6krposXgm9uqlFKdF0guKdhF/2dYTq3tFhWBMyzj+lUqnS3zQoC9hcm5IEz
M7eBVsc1FReQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org