Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32302e302f32322d3232203d3e20323637303038.roa
File:                     34352e3232372e32302e302f32322d3232203d3e20323637303038.roa (raw, json)
Hash identifier:          j5H+GUOmIi9UcXyzu8DOC8V7oKgRHQwE+WjWdq8c8ZE=
Subject key identifier:   DF:B5:C1:12:9A:2B:38:82:BB:61:14:01:B9:39:E4:E4:7A:CF:BA:62
Certificate issuer:       /CN=C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41
Certificate serial:       05FAAC0FB711780102627C3CB77422DC0A3CA00C
Authority key identifier: C0:06:CA:8A:3F:C1:CE:6D:F1:B5:B0:6B:E6:A6:FF:C6:C9:DB:FA:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32302e302f32322d3232203d3e20323637303038.roa
Signing time:             Thu 09 Nov 2023 17:39:48 +0000
ROA not before:           Thu 09 Nov 2023 17:34:48 +0000
ROA not after:            Thu 07 Nov 2024 17:39:48 +0000
asID:                     267008
IP address blocks:        45.227.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fa:ac:0f:b7:11:78:01:02:62:7c:3c:b7:74:22:dc:0a:3c:a0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41
        Validity
            Not Before: Nov  9 17:34:48 2023 GMT
            Not After : Nov  7 17:39:48 2024 GMT
        Subject: CN=DFB5C1129A2B3882BB611401B939E4E47ACFBA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:81:a3:4a:95:4b:cf:ce:a1:13:d4:ac:53:
                    7e:1a:cc:ea:60:84:d5:04:fa:29:a4:e1:00:94:73:
                    59:5f:5a:00:7b:72:b8:8a:03:e3:72:af:d0:bc:23:
                    eb:f8:57:73:f8:8a:45:b1:db:fd:ed:5c:b0:48:f7:
                    8e:71:5f:5f:6f:30:c8:26:0c:74:5b:58:76:8f:20:
                    49:37:c4:e6:d8:08:a2:81:a8:ac:27:7b:7b:cc:1c:
                    d0:41:41:92:e4:2f:8a:f1:16:9c:ed:bb:3b:cf:58:
                    97:e4:ce:50:ca:10:ab:11:ad:9c:0c:e7:f9:3f:75:
                    8e:83:36:96:99:60:5a:20:fe:89:c8:08:72:98:cf:
                    8c:6f:f7:d7:24:10:90:e5:47:e4:f7:3c:d3:7f:50:
                    20:5e:b4:cd:ef:86:d8:38:a8:8c:7d:de:44:d9:12:
                    48:2b:20:19:d9:bf:61:5a:11:a7:5d:2c:a9:ed:95:
                    96:c4:27:a8:27:6b:11:c2:04:6c:05:24:a0:9c:0a:
                    07:9e:ba:db:31:f7:52:fa:dc:59:3f:48:43:19:d1:
                    86:84:e1:a8:8f:b1:c2:1f:63:9e:62:a1:8b:a2:04:
                    ff:95:5e:b2:63:3e:33:51:54:ad:ca:6f:c9:72:b1:
                    91:e5:5a:24:02:97:c6:72:ae:96:d5:ca:0f:36:16:
                    c2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B5:C1:12:9A:2B:38:82:BB:61:14:01:B9:39:E4:E4:7A:CF:BA:62
            X509v3 Authority Key Identifier:
                keyid:C0:06:CA:8A:3F:C1:CE:6D:F1:B5:B0:6B:E6:A6:FF:C6:C9:DB:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32302e302f32322d3232203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:7b:7f:51:62:53:ac:fd:09:73:f5:48:73:0e:e5:41:d2:6e:
         aa:10:af:6a:a5:de:22:64:a0:ea:02:a4:da:ac:35:e3:c1:aa:
         d3:e8:19:b0:8f:bd:63:38:03:2b:97:1e:a6:78:f2:5f:2b:21:
         06:37:af:99:93:8b:8d:5d:b7:93:97:3a:ad:dc:fc:1f:15:1d:
         79:05:f7:f5:2a:a0:2a:a7:de:f8:f7:d7:f3:c3:a9:0e:81:28:
         c1:88:6c:98:07:fa:ff:79:ba:28:10:5b:9a:5a:a0:15:1a:de:
         3d:69:df:c8:cb:28:b2:94:c7:2c:e3:31:a6:39:90:cb:6d:b9:
         32:d2:19:b9:0e:1d:5f:e8:45:a5:4f:26:a7:11:32:04:d4:cf:
         a8:43:c8:2e:d7:c1:c3:39:53:48:50:f7:a4:9b:09:4c:59:1d:
         d4:5f:5f:ec:df:f8:cd:7c:10:b3:8b:d7:0d:fd:44:96:e5:42:
         de:53:ff:74:65:31:b1:79:87:88:8f:d2:5e:a7:37:aa:82:e8:
         fb:3e:33:2a:df:fe:04:3b:bd:df:36:fd:2b:82:bb:30:00:ac:
         7d:ac:6d:b3:e7:85:fa:ac:dd:5c:19:1d:65:b1:9a:b0:d0:ef:
         d8:2b:84:d9:40:8d:ac:13:f8:d3:58:44:9d:7c:7f:ad:80:1b:
         d5:c1:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org