Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPQTbGaitkkqm2mFnGjVUzYRNZM8M6SY2hUPzuiyCvUj/0/34352e3232342e362e302f32332d3233203d3e20323637363436.roa
File:                     34352e3232342e362e302f32332d3233203d3e20323637363436.roa (raw, json)
Hash identifier:          yLoPkNHMTCP8W8SWOAfkjJAptNzEIc74WcXSNHC7G0A=
Subject key identifier:   BE:9E:E5:79:B4:38:59:72:A0:E8:04:0C:AF:46:05:69:67:50:1E:20
Certificate issuer:       /CN=61B3B30AF1C85AD09C8A4D8E236BD1409AD38031
Certificate serial:       43F81ADBE7709B17940FF9730950E378BB443D29
Authority key identifier: 61:B3:B3:0A:F1:C8:5A:D0:9C:8A:4D:8E:23:6B:D1:40:9A:D3:80:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61B3B30AF1C85AD09C8A4D8E236BD1409AD38031.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPQTbGaitkkqm2mFnGjVUzYRNZM8M6SY2hUPzuiyCvUj/0/34352e3232342e362e302f32332d3233203d3e20323637363436.roa
Signing time:             Thu 20 Apr 2023 16:59:12 +0000
ROA not before:           Thu 20 Apr 2023 16:54:12 +0000
ROA not after:            Thu 18 Apr 2024 16:59:12 +0000
asID:                     267646
IP address blocks:        45.224.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f8:1a:db:e7:70:9b:17:94:0f:f9:73:09:50:e3:78:bb:44:3d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B3B30AF1C85AD09C8A4D8E236BD1409AD38031
        Validity
            Not Before: Apr 20 16:54:12 2023 GMT
            Not After : Apr 18 16:59:12 2024 GMT
        Subject: CN=BE9EE579B4385972A0E8040CAF46056967501E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:57:90:69:ad:0c:6d:72:ce:b6:dc:1b:98:
                    8e:38:0f:b7:ce:2d:f6:c6:fc:5d:07:5a:eb:c8:0e:
                    6a:52:18:12:a2:d4:c5:89:44:bb:f8:a4:98:27:f1:
                    5f:5e:67:4b:11:97:dd:ac:ba:07:99:3b:1e:55:0c:
                    6b:97:ee:99:f9:f7:05:51:70:cc:c5:c1:3c:3e:7c:
                    93:e0:76:c0:8b:3f:bb:b8:37:8b:d4:58:4f:fd:b7:
                    91:76:fe:5b:b2:c6:43:ed:40:57:73:75:ae:ac:51:
                    35:0b:35:54:6c:c3:8c:55:81:9b:f8:c8:12:80:eb:
                    33:e7:65:c4:b8:b0:ca:6d:08:64:36:df:95:0a:51:
                    a7:5e:d1:33:15:b0:09:1f:c3:7b:81:12:8c:3a:1c:
                    bb:76:30:01:14:8e:6a:ea:a9:3c:d5:a3:f1:cb:34:
                    c4:96:8b:98:f7:13:2c:02:b7:3d:16:87:61:41:80:
                    01:60:0f:69:7f:88:2e:6d:23:13:a7:b5:2a:59:2a:
                    95:09:f8:fe:58:2d:d1:5f:60:e6:f0:d1:a7:25:82:
                    bb:df:7b:97:0e:b1:4f:92:0f:28:cb:00:0f:14:8c:
                    6f:28:35:c8:e0:be:4d:fe:48:43:aa:bb:74:60:62:
                    06:e7:86:28:90:4c:bf:f9:4e:78:07:1b:d8:99:18:
                    f3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9E:E5:79:B4:38:59:72:A0:E8:04:0C:AF:46:05:69:67:50:1E:20
            X509v3 Authority Key Identifier:
                keyid:61:B3:B3:0A:F1:C8:5A:D0:9C:8A:4D:8E:23:6B:D1:40:9A:D3:80:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPQTbGaitkkqm2mFnGjVUzYRNZM8M6SY2hUPzuiyCvUj/0/61B3B30AF1C85AD09C8A4D8E236BD1409AD38031.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61B3B30AF1C85AD09C8A4D8E236BD1409AD38031.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPQTbGaitkkqm2mFnGjVUzYRNZM8M6SY2hUPzuiyCvUj/0/34352e3232342e362e302f32332d3233203d3e20323637363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:99:3f:2a:86:5f:99:1a:2c:48:59:08:6d:3f:71:3f:87:9b:
         56:55:ab:bd:8f:0c:8b:ec:f3:6d:09:0c:42:88:18:bd:8c:56:
         1c:22:48:b7:61:aa:45:9b:9f:ac:43:0f:2e:12:8e:20:98:2f:
         a6:52:2e:ad:18:a3:49:2b:59:bb:da:25:a8:00:2f:b7:20:07:
         41:28:fc:7c:6d:d6:c2:ac:69:6d:f2:3b:ce:0b:c5:31:5c:ba:
         1a:04:f1:42:43:c7:e2:67:c0:a3:e4:c8:0f:25:c9:aa:28:75:
         98:88:9d:56:67:a4:38:d4:b6:5a:89:b7:c3:1f:6f:e9:30:5c:
         75:d7:56:d9:4b:5d:4e:36:40:a6:a8:38:9e:5c:cb:12:eb:00:
         9d:d6:79:54:51:02:73:e9:93:21:01:6b:ef:60:72:87:12:7e:
         b5:57:4f:e0:38:a7:ef:e8:02:3b:57:83:19:e6:86:66:f7:cb:
         ad:8c:f2:1f:43:23:90:8b:bb:ee:62:3f:57:8b:ce:31:96:ae:
         27:aa:1d:ce:28:c2:82:91:16:9f:72:f8:ff:50:e4:c5:50:9a:
         43:06:8e:0a:c2:05:55:31:b1:38:cb:4d:83:35:38:6e:67:75:
         2c:42:a9:75:d6:ee:c5:41:c5:be:8f:1b:7e:43:04:d3:2d:4a:
         b8:df:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org