Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPQTbGaitkkqm2mFnGjVUzYRNZM8M6SY2hUPzuiyCvUj/0/34352e3232342e342e302f32322d3234203d3e20323637363436.roa
File:                     34352e3232342e342e302f32322d3234203d3e20323637363436.roa (raw, json)
Hash identifier:          n6hIXbw4C6Y9eNnTpk9cXqjnNwO2EUNnAEuWs2JZ8RY=
Subject key identifier:   72:EB:45:A5:72:63:EC:50:73:2C:DC:0B:96:F5:6E:C1:74:9A:71:A4
Certificate issuer:       /CN=61B3B30AF1C85AD09C8A4D8E236BD1409AD38031
Certificate serial:       35190EC0C61E5143E71CA8146252E278390E0EDB
Authority key identifier: 61:B3:B3:0A:F1:C8:5A:D0:9C:8A:4D:8E:23:6B:D1:40:9A:D3:80:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61B3B30AF1C85AD09C8A4D8E236BD1409AD38031.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPQTbGaitkkqm2mFnGjVUzYRNZM8M6SY2hUPzuiyCvUj/0/34352e3232342e342e302f32322d3234203d3e20323637363436.roa
Signing time:             Thu 20 Apr 2023 12:27:12 +0000
ROA not before:           Thu 20 Apr 2023 12:22:12 +0000
ROA not after:            Thu 18 Apr 2024 12:27:12 +0000
asID:                     267646
IP address blocks:        45.224.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:19:0e:c0:c6:1e:51:43:e7:1c:a8:14:62:52:e2:78:39:0e:0e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B3B30AF1C85AD09C8A4D8E236BD1409AD38031
        Validity
            Not Before: Apr 20 12:22:12 2023 GMT
            Not After : Apr 18 12:27:12 2024 GMT
        Subject: CN=72EB45A57263EC50732CDC0B96F56EC1749A71A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d8:d0:f7:6f:df:f9:87:3b:b1:02:45:20:4e:
                    fe:0b:80:99:74:e6:a4:ec:10:01:55:19:30:0c:ca:
                    c2:c2:da:b0:a8:4e:75:8e:60:28:4a:f7:07:bc:2d:
                    fe:89:25:ad:ee:5f:4d:09:a9:3d:f0:d4:9a:0e:4e:
                    14:72:6e:18:23:44:2d:7b:5b:b1:cc:84:c6:78:02:
                    c6:0b:c5:8c:8b:a7:c9:4b:41:9d:25:2e:5e:af:e0:
                    ac:d5:60:6c:24:0f:c8:f2:80:d3:cd:ab:41:78:f8:
                    b0:03:21:9e:c1:12:89:cd:e5:14:77:92:69:5e:c0:
                    7d:62:77:a6:9f:fe:2b:b6:48:29:2c:e1:38:fc:75:
                    80:4b:55:9f:15:ce:55:05:c3:35:c9:2e:fc:4f:da:
                    c5:84:89:24:62:56:68:80:e4:75:b5:4f:70:d4:2d:
                    c4:5c:ca:fb:cc:58:ab:dd:fc:30:7b:77:15:c3:35:
                    49:a1:1c:2a:cd:c2:3f:f1:96:a3:1d:ab:f1:52:cc:
                    a3:59:8d:fd:ae:b4:77:53:d6:83:30:9c:15:13:8f:
                    3e:eb:3b:00:80:71:77:7e:e1:4f:1b:d7:ba:67:0b:
                    63:4a:56:77:46:1f:c0:da:35:db:c3:3a:7a:76:1d:
                    cd:a0:bf:62:b6:3a:f4:9a:e9:c6:c5:27:dd:d7:e4:
                    38:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EB:45:A5:72:63:EC:50:73:2C:DC:0B:96:F5:6E:C1:74:9A:71:A4
            X509v3 Authority Key Identifier:
                keyid:61:B3:B3:0A:F1:C8:5A:D0:9C:8A:4D:8E:23:6B:D1:40:9A:D3:80:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPQTbGaitkkqm2mFnGjVUzYRNZM8M6SY2hUPzuiyCvUj/0/61B3B30AF1C85AD09C8A4D8E236BD1409AD38031.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61B3B30AF1C85AD09C8A4D8E236BD1409AD38031.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPQTbGaitkkqm2mFnGjVUzYRNZM8M6SY2hUPzuiyCvUj/0/34352e3232342e342e302f32322d3234203d3e20323637363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:fb:d0:23:a9:c8:6c:d9:db:0c:2d:f7:6d:76:b2:3e:ec:03:
         bd:3f:b6:66:8b:38:9a:37:f6:1b:6d:da:bd:9d:54:44:3f:6b:
         e4:df:aa:9c:44:0a:e4:bb:6a:00:12:39:10:02:59:bf:69:6b:
         88:c6:64:aa:a5:31:a6:dd:cd:0f:58:c7:4e:9d:45:53:d3:5b:
         5b:55:d0:3b:27:84:d0:c2:71:73:9b:70:c5:be:26:cb:02:a4:
         ac:07:14:06:39:05:f6:17:c8:8b:be:bc:b8:80:84:d9:62:bb:
         f2:78:ac:f5:b5:ee:a2:3c:45:94:c5:a4:12:d4:97:a4:79:f7:
         34:c2:dc:08:96:2c:94:bf:ec:9e:7f:b6:8e:aa:33:ec:1f:18:
         6c:f7:91:14:f6:74:32:99:47:f1:51:95:87:53:13:65:f4:06:
         a1:2b:31:74:aa:35:c8:7e:5e:7b:73:0c:d4:28:73:4f:8a:4c:
         e5:b4:1c:e4:fe:55:2c:6f:c2:10:f7:9b:f5:d1:2c:38:80:ac:
         5b:fe:f2:a9:47:5d:e1:ed:a1:20:23:0c:62:54:1e:02:52:a5:
         b0:f8:f4:54:dc:31:69:ae:a5:d8:33:f4:8c:cf:62:77:19:76:
         30:f8:99:1a:50:d3:44:e2:70:45:15:3f:5f:50:17:3f:2d:7a:
         e8:0d:22:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org